4430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={r3, 0x101, 0xb06, 0x6}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x300, 0x190, 0x0, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x1f, 0x0, "9166f854ca060d518d81dd4a46d46160f9e64cd684979a7bd5882c0bb6f28c0f7a148512621b9086d0c6c16cc6814d8cd953cf16d3537a2ddcfefe90e56377d06eb50d7d058bc69bfc6b4e41e590d132"}, 0xd8) (async) vmsplice(r5, &(0x7f0000000480)=[{&(0x7f0000000040)="1b953796f13945b05256", 0x1}], 0x100000000000017d, 0x5) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7ab, &(0x7f0000000100)={&(0x7f0000000780)={{@hyper, 0xffffffff}, {}, 0x400, "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"}, 0x418, 0x6}) (async) r7 = open(&(0x7f0000000300)='./file0\x00', 0x42c2, 0x42) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) write(r7, &(0x7f0000001400)="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"/3584, 0xe00) sendfile(r7, r8, 0x0, 0x11f06) (async) sendmsg$FOU_CMD_GET(r7, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000bc0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbdf25030000000400050008000b00", @ANYRES32=0x0, @ANYBLOB="e39517de8057afe37302d99c87bc8a7aa599fce3069dd4aa61d8849500000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=':/&+#^\x00', 0x0, r4) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @hyper, 0x0, 0x2000000, 0x0, 0x0, 0x1000000000005}) 10:22:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{0x0, 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) 10:22:06 executing program 3: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000000000)={&(0x7f0000000780)=[0x40, 0x0, 0x3, 0xffffffff, 0xfff, 0x0, 0x0, 0xfffffffb, 0x9, 0xffffffff, 0x0, 0x0, 0x4, 0x18, 0x8001, 0x9, 0xffff, 0xffff, 0x3, 0x0, 0x8, 0x7f, 0x6, 0x0, 0x6, 0x3, 0xa22d, 0x5, 0x9, 0xffffffc0, 0xffff122d, 0x3, 0x80000000, 0x3, 0x1, 0x10001, 0xffff, 0x0, 0x0, 0x6, 0x0, 0x5, 0x7c, 0xffff, 0x6, 0x401, 0x6, 0x40, 0x5, 0x1ff, 0x7ff, 0x81, 0x7, 0x1, 0x10000, 0x8001, 0x8, 0xffff, 0x3, 0x8, 0xffffffff, 0x80, 0x3ff, 0x0, 0x7, 0x7fff, 0x3f, 0x0, 0x8, 0x0, 0x7ff, 0x9, 0x3f, 0x2, 0x482b, 0xbd5, 0x400, 0x3, 0x0, 0x8, 0x80000000, 0xfff, 0x40, 0x9, 0x4, 0x4, 0x9, 0xd6e, 0x2, 0xb6, 0x1, 0x80000000, 0x47, 0x800, 0xd, 0x9, 0x5, 0x0, 0x1, 0x1, 0x9, 0x5e, 0xff9, 0x1, 0x9, 0x3, 0x5, 0x7fff, 0xb9, 0x0, 0x5, 0x81c800, 0x7fffffff, 0x5, 0xffffffff, 0x8, 0x6, 0x81, 0xfffffffd, 0x200, 0x7fff, 0x400, 0x7fffffff, 0x51, 0x48ca, 0x3, 0x6, 0x526f, 0x8001, 0x7f, 0x40, 0x7, 0x7, 0x1400000, 0xffff, 0xc71, 0x5, 0x9, 0x9, 0x7fffffff, 0x7, 0x84, 0x20, 0x3, 0x1000, 0x8, 0x9, 0x3ff, 0xffffffff, 0x9, 0x4, 0x101, 0xfffffff7, 0xbbb2, 0x401, 0x6, 0x0, 0x10000, 0x3, 0xfffffffe, 0x4, 0x6, 0x6f95, 0x100, 0x8, 0x7, 0x6, 0x5, 0x398, 0xffff, 0x10001, 0x6, 0x7fffffff, 0x60f0, 0x10000, 0x2, 0x4, 0x4, 0x7, 0x1f, 0x4959dc5e, 0x6f6, 0xfffff233, 0x0, 0xfffffffa, 0x44, 0x6, 0x0, 0x9ab, 0x6894, 0x7, 0x1, 0x9, 0x0, 0x6, 0x2a, 0x4, 0x3ff, 0x8, 0x8, 0x1, 0x7fff, 0x7f, 0x0, 0x7, 0x40, 0x80000000, 0x6, 0x40, 0x1, 0xb45, 0x1, 0x1ff, 0x0, 0x0, 0x7, 0xc009, 0xab0, 0x8, 0x7, 0xffffffff, 0x7, 0x2, 0x20, 0x101, 0x7ff, 0x7, 0x6, 0x8, 0x7, 0x2, 0x8, 0x77f, 0x1, 0x4, 0x7f, 0x6, 0x800, 0x4, 0x20, 0x7fff, 0xce7d, 0x1c, 0xc5, 0x5, 0x6, 0x200, 0x80000000, 0x1f, 0x4, 0x1c00000, 0x4, 0x3234, 0x7, 0x6, 0x8000, 0x1, 0x60, 0xffffffff, 0xa7, 0x8000, 0x64e, 0x6, 0xffffffc1, 0xffff8001, 0x2, 0x0, 0xfffffffb, 0x1800, 0x8, 0x0, 0xffff, 0x0, 0x6, 0x7, 0x101, 0xfffffffa, 0x50, 0x1, 0x0, 0x2, 0x4, 0x1, 0x62c1, 0x1, 0x1, 0x3, 0x5, 0x1, 0x0, 0x53e, 0xbfcf, 0x1ff, 0x2, 0x6, 0x800, 0x5, 0x71777e63, 0x100, 0x8d, 0x3, 0x0, 0x0, 0x0, 0x80, 0x4, 0x302655ba, 0x5, 0xfffffffe, 0xfffff000, 0x3f, 0x1, 0xfffffff7, 0x2, 0x7, 0x9, 0x2, 0x3, 0x25, 0x3, 0xfffffffe, 0x0, 0x5, 0x4c05, 0x7, 0x7, 0x0, 0x8f08, 0x8001, 0x7fffffff, 0x101, 0x7, 0x9, 0x8, 0x6, 0x0, 0x7f, 0x1, 0x7, 0x100, 0x7, 0xffffff4b, 0x3, 0x401, 0x4, 0x80, 0x4, 0x0, 0x3, 0x54e, 0x7, 0x4, 0xd55, 0x7, 0x1, 0x4fad, 0x20, 0x1000, 0x5, 0x7, 0x7, 0x2, 0x1f, 0x5, 0x10000, 0x67, 0x0, 0x1, 0x9, 0x467a, 0x8, 0x80000001, 0xffff8aec, 0xffffffff, 0x8, 0x5, 0x6, 0x8, 0xfff, 0x8, 0x2, 0xffffffff, 0x2, 0x1, 0xf3, 0x6, 0x3f, 0x9, 0x101, 0x9, 0x7, 0x6, 0x0, 0x2, 0x1000, 0x8, 0x2, 0x7f, 0x0, 0x8000, 0x6, 0x4, 0x0, 0x4, 0x400, 0x10001, 0x7fffffff, 0x8, 0x8, 0x4, 0x7, 0x7, 0x9, 0xffff, 0x100, 0x9, 0x8, 0x20, 0x4, 0x200, 0xfffffff7, 0xfff, 0x3e, 0x7, 0x3, 0x2, 0x1, 0x1, 0x5, 0x20, 0x0, 0xa1e, 0x0, 0x6, 0x2, 0x1, 0x0, 0x9, 0x60, 0xfffffff9, 0xb6db55c, 0x4, 0x36479465, 0x56, 0x4, 0xffffffff, 0x5, 0x0, 0x1, 0x0, 0x8, 0xfffffeff, 0x10001, 0x7, 0x5, 0x4df3a70a, 0x3f, 0x8, 0x101, 0x401, 0x95bd, 0xa389, 0x9, 0x9, 0xb505, 0x1, 0x1, 0x52b, 0x0, 0x7, 0x10001, 0x1, 0xff, 0xfff, 0x1000, 0x400, 0x60c, 0x7ff, 0xf39, 0x7fff, 0xa15, 0x80000001, 0x7, 0x1, 0x9, 0x20, 0x2, 0x7, 0x7f, 0xfffffffa, 0x0, 0x9, 0x1, 0x2, 0x1, 0x9, 0xfffffffc, 0x4, 0x0, 0x8001, 0x5, 0x4, 0x7ff, 0xd3b, 0x5, 0x1, 0x9467, 0x4, 0x8, 0x3, 0x8, 0xd19, 0x3f, 0x9, 0x9, 0xfffffe00, 0x4, 0x1ff, 0x4, 0x8000, 0x3, 0x9, 0x8, 0x1f, 0xfb48872, 0xffffffff, 0x0, 0x7fffffff, 0xe58f, 0x5, 0x7, 0x1b, 0x8000, 0x2, 0x6, 0x2aa5, 0x8, 0x8001, 0x5, 0x1, 0x0, 0x100, 0xfff, 0x7, 0xff, 0xc29e, 0x0, 0x8000, 0xfffffffc, 0x80000001, 0xbd, 0x3b94, 0xfff, 0x2, 0x8, 0xa809, 0x6, 0x2, 0x1ff, 0x4, 0x7fff, 0x7, 0xe62, 0x400, 0x2, 0x4, 0x1ff, 0xffffffe0, 0x4, 0x2, 0x6, 0x638, 0x0, 0xffffff02, 0x0, 0xfffffffc, 0x1, 0x1, 0x9, 0xa5d, 0x70c0, 0x8, 0x0, 0x6, 0xfffffffe, 0x84b, 0x101, 0x6, 0x3523, 0x5, 0x5, 0x5, 0x4, 0x1f, 0x80000001, 0x2, 0x5, 0x80000000, 0x7, 0x9ab, 0x9, 0x3f, 0x7ff, 0x2, 0x3800, 0x39, 0x3ff, 0x6, 0x8, 0xfffffffe, 0x1, 0xbc, 0x9, 0x2, 0x7, 0x8001, 0xa4fb, 0x101, 0x7, 0xffffffff, 0x800, 0x100, 0x1, 0x3ff, 0x3fe, 0x1, 0x56f08cba, 0x4, 0xf90, 0x1, 0x0, 0x401, 0x2, 0x2, 0x0, 0xac3, 0x7ff, 0xc1b, 0x3dcadad2, 0xfffffffe, 0x1f, 0x7, 0x6, 0xffff, 0x0, 0x8, 0x7, 0x4, 0x4183, 0x401, 0x6, 0x8, 0x0, 0x200, 0x7, 0x1, 0x5, 0x7, 0x5, 0x2, 0x6a5c, 0x7, 0x80000000, 0x2, 0x0, 0x0, 0xde, 0x81, 0x0, 0x0, 0xe71, 0x0, 0xd, 0x8, 0x1, 0x3, 0x6, 0x0, 0x3, 0xffffff00, 0x9, 0x101, 0x1, 0xffffffff, 0x0, 0x5c7, 0xffff8000, 0x1a3, 0x14000000, 0xfff, 0xad8c, 0x0, 0x8, 0xff, 0x2, 0x8, 0x4, 0x8, 0x2, 0x3, 0x1, 0x80000000, 0x5193, 0x21d, 0x1, 0xb4a, 0x93, 0x9, 0xd17a, 0x9, 0x3, 0x4, 0x7f9e, 0x3, 0x3243, 0x6, 0x7fff, 0x5, 0x8, 0x3d5, 0xffffabb3, 0x5, 0x5, 0x6, 0x8, 0x80, 0x0, 0x2, 0x9, 0x1, 0x80, 0xe6a, 0x65, 0x8, 0x5, 0x20, 0x3, 0x7, 0x8, 0x200, 0x7, 0x8, 0x1, 0xffffffff, 0x7, 0x3, 0x7, 0x0, 0xcf, 0xbd, 0x2, 0x8, 0x10000, 0x0, 0x3, 0x3, 0x8001, 0x5, 0x3, 0x9, 0x7, 0x0, 0x7fffffff, 0x6e7, 0x1f, 0x0, 0x3f, 0xd7, 0x5, 0x8, 0x1ff, 0x58e757fc, 0x408a255b, 0x5, 0x3ea, 0x7, 0x40, 0x6, 0x7, 0x2, 0x1ff, 0x0, 0x9023, 0x2d8, 0x735, 0x1, 0x1, 0x7f, 0x0, 0x1c, 0x1, 0x9, 0x80000001, 0x1, 0x800, 0x7, 0x40, 0x0, 0x2, 0x6, 0x704, 0x81, 0x3ff, 0x3, 0x7, 0x0, 0x7, 0x0, 0x3, 0x40, 0x5, 0xd92c, 0x3a, 0x8, 0x9cb, 0x800, 0x40, 0x8, 0x4, 0x3ff, 0x80000000, 0x27, 0x100, 0x81, 0x5, 0x80000000, 0x101, 0xffffffff, 0x2, 0x7ff, 0xffffffff, 0x0, 0x0, 0x8001, 0x2, 0x7fffffff, 0x40, 0x1, 0x9bc, 0x10001, 0x0, 0x3, 0x1, 0x6, 0x101, 0xfffffeff, 0x100, 0x9, 0x8, 0x8, 0x9, 0x7, 0xffffffff, 0x3ff, 0xfff, 0x80000001, 0x6, 0x80000000, 0x4, 0x1, 0x66eb, 0xffffffff, 0xffff, 0x2, 0x81, 0x3e, 0x0, 0x1, 0x6, 0x401, 0x80, 0x951, 0x6, 0x100, 0x78cc774f, 0x2, 0x1, 0x6, 0x8, 0x100, 0x5, 0x7fff, 0x3, 0x5, 0x0, 0x80000001, 0x40, 0x2, 0x7, 0xfffffffd, 0x6, 0x4fb, 0x7ff, 0xff, 0x10001, 0x8cce, 0x1, 0x6, 0x2, 0x9, 0x1, 0x1, 0x2, 0x10000, 0x0, 0x6, 0x400, 0x9, 0x8, 0xff, 0x80, 0x10001, 0x0, 0x7, 0x5, 0x1, 0x8, 0x8, 0xc95, 0x4, 0x3, 0xb7, 0x4, 0x1b9e5f88, 0x8, 0x0, 0x1, 0x3, 0x400, 0x9, 0x0, 0x5, 0x15, 0xed7c, 0x4, 0x8, 0x5, 0x7fffffff, 0x101, 0x6, 0x6, 0xfffffffa, 0x8, 0x10000, 0x4, 0x1, 0x4, 0x3f, 0x7, 0x3, 0x3, 0x7fffffff, 0x7ff, 0xee72, 0x7, 0x3f, 0x3, 0x200, 0x6, 0xc9b3, 0x80000000, 0x0, 0x4, 0x496cfa6c, 0x6, 0x6, 0x0, 0x51ba5b4d, 0x28, 0x1000, 0x6, 0x1f, 0x2, 0x2, 0x1, 0xd6d5, 0x7, 0x1, 0x3, 0x1, 0x8001, 0x8, 0x6, 0x10000, 0x3f, 0x478f012f, 0x53c, 0x3dd09020, 0x4, 0x5, 0xb4, 0x200, 0x0, 0x200, 0x1, 0x8, 0xb9e0, 0x738b, 0x7, 0x28d8, 0x8000, 0x0, 0x5, 0x7, 0x5, 0xffffff00, 0x7fffffff, 0x47, 0x6, 0x2, 0x4, 0x8000, 0x8, 0x3, 0x3, 0x2c6, 0x1ff, 0x4, 0x0, 0x2, 0xfffffffb, 0x9, 0x8, 0x4], 0x6, 0x400, 0x10000}) [ 1416.251682][ T5171] ip6_vti0 speed is unknown, defaulting to 1000 [ 1416.270762][T32278] Cannot find add_set index 0 as target 10:22:06 executing program 1: openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x300, 0x190, 0x0, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={r3, 0x101, 0xb06, 0x6}) pipe(&(0x7f0000000140)) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x300, 0x190, 0x0, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x1f, 0x0, "9166f854ca060d518d81dd4a46d46160f9e64cd684979a7bd5882c0bb6f28c0f7a148512621b9086d0c6c16cc6814d8cd953cf16d3537a2ddcfefe90e56377d06eb50d7d058bc69bfc6b4e41e590d132"}, 0xd8) vmsplice(r5, &(0x7f0000000480)=[{&(0x7f0000000040)="1b953796f13945b05256", 0x1}], 0x100000000000017d, 0x5) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7ab, &(0x7f0000000100)={&(0x7f0000000780)={{@hyper, 0xffffffff}, {}, 0x400, "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"}, 0x418, 0x6}) (async) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7ab, &(0x7f0000000100)={&(0x7f0000000780)={{@hyper, 0xffffffff}, {}, 0x400, "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"}, 0x418, 0x6}) open(&(0x7f0000000300)='./file0\x00', 0x42c2, 0x42) (async) r7 = open(&(0x7f0000000300)='./file0\x00', 0x42c2, 0x42) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r7, &(0x7f0000001400)="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"/3584, 0xe00) sendfile(r7, r8, 0x0, 0x11f06) sendmsg$FOU_CMD_GET(r7, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000bc0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbdf25030000000400050008000b00", @ANYRES32=0x0, @ANYBLOB="e39517de8057afe37302d99c87bc8a7aa599fce3069dd4aa61d8849500000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)=':/&+#^\x00', 0x0, r4) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @hyper, 0x0, 0x2000000, 0x0, 0x0, 0x1000000000005}) [ 1416.293203][T32279] Cannot find add_set index 0 as target [ 1416.314037][T32264] bridge0: port 3(erspan0) entered blocking state [ 1416.320617][T32264] bridge0: port 3(erspan0) entered forwarding state 10:22:06 executing program 3: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000000000)={&(0x7f0000000780)=[0x40, 0x0, 0x3, 0xffffffff, 0xfff, 0x0, 0x0, 0xfffffffb, 0x9, 0xffffffff, 0x0, 0x0, 0x4, 0x18, 0x8001, 0x9, 0xffff, 0xffff, 0x3, 0x0, 0x8, 0x7f, 0x6, 0x0, 0x6, 0x3, 0xa22d, 0x5, 0x9, 0xffffffc0, 0xffff122d, 0x3, 0x80000000, 0x3, 0x1, 0x10001, 0xffff, 0x0, 0x0, 0x6, 0x0, 0x5, 0x7c, 0xffff, 0x6, 0x401, 0x6, 0x40, 0x5, 0x1ff, 0x7ff, 0x81, 0x7, 0x1, 0x10000, 0x8001, 0x8, 0xffff, 0x3, 0x8, 0xffffffff, 0x80, 0x3ff, 0x0, 0x7, 0x7fff, 0x3f, 0x0, 0x8, 0x0, 0x7ff, 0x9, 0x3f, 0x2, 0x482b, 0xbd5, 0x400, 0x3, 0x0, 0x8, 0x80000000, 0xfff, 0x40, 0x9, 0x4, 0x4, 0x9, 0xd6e, 0x2, 0xb6, 0x1, 0x80000000, 0x47, 0x800, 0xd, 0x9, 0x5, 0x0, 0x1, 0x1, 0x9, 0x5e, 0xff9, 0x1, 0x9, 0x3, 0x5, 0x7fff, 0xb9, 0x0, 0x5, 0x81c800, 0x7fffffff, 0x5, 0xffffffff, 0x8, 0x6, 0x81, 0xfffffffd, 0x200, 0x7fff, 0x400, 0x7fffffff, 0x51, 0x48ca, 0x3, 0x6, 0x526f, 0x8001, 0x7f, 0x40, 0x7, 0x7, 0x1400000, 0xffff, 0xc71, 0x5, 0x9, 0x9, 0x7fffffff, 0x7, 0x84, 0x20, 0x3, 0x1000, 0x8, 0x9, 0x3ff, 0xffffffff, 0x9, 0x4, 0x101, 0xfffffff7, 0xbbb2, 0x401, 0x6, 0x0, 0x10000, 0x3, 0xfffffffe, 0x4, 0x6, 0x6f95, 0x100, 0x8, 0x7, 0x6, 0x5, 0x398, 0xffff, 0x10001, 0x6, 0x7fffffff, 0x60f0, 0x10000, 0x2, 0x4, 0x4, 0x7, 0x1f, 0x4959dc5e, 0x6f6, 0xfffff233, 0x0, 0xfffffffa, 0x44, 0x6, 0x0, 0x9ab, 0x6894, 0x7, 0x1, 0x9, 0x0, 0x6, 0x2a, 0x4, 0x3ff, 0x8, 0x8, 0x1, 0x7fff, 0x7f, 0x0, 0x7, 0x40, 0x80000000, 0x6, 0x40, 0x1, 0xb45, 0x1, 0x1ff, 0x0, 0x0, 0x7, 0xc009, 0xab0, 0x8, 0x7, 0xffffffff, 0x7, 0x2, 0x20, 0x101, 0x7ff, 0x7, 0x6, 0x8, 0x7, 0x2, 0x8, 0x77f, 0x1, 0x4, 0x7f, 0x6, 0x800, 0x4, 0x20, 0x7fff, 0xce7d, 0x1c, 0xc5, 0x5, 0x6, 0x200, 0x80000000, 0x1f, 0x4, 0x1c00000, 0x4, 0x3234, 0x7, 0x6, 0x8000, 0x1, 0x60, 0xffffffff, 0xa7, 0x8000, 0x64e, 0x6, 0xffffffc1, 0xffff8001, 0x2, 0x0, 0xfffffffb, 0x1800, 0x8, 0x0, 0xffff, 0x0, 0x6, 0x7, 0x101, 0xfffffffa, 0x50, 0x1, 0x0, 0x2, 0x4, 0x1, 0x62c1, 0x1, 0x1, 0x3, 0x5, 0x1, 0x0, 0x53e, 0xbfcf, 0x1ff, 0x2, 0x6, 0x800, 0x5, 0x71777e63, 0x100, 0x8d, 0x3, 0x0, 0x0, 0x0, 0x80, 0x4, 0x302655ba, 0x5, 0xfffffffe, 0xfffff000, 0x3f, 0x1, 0xfffffff7, 0x2, 0x7, 0x9, 0x2, 0x3, 0x25, 0x3, 0xfffffffe, 0x0, 0x5, 0x4c05, 0x7, 0x7, 0x0, 0x8f08, 0x8001, 0x7fffffff, 0x101, 0x7, 0x9, 0x8, 0x6, 0x0, 0x7f, 0x1, 0x7, 0x100, 0x7, 0xffffff4b, 0x3, 0x401, 0x4, 0x80, 0x4, 0x0, 0x3, 0x54e, 0x7, 0x4, 0xd55, 0x7, 0x1, 0x4fad, 0x20, 0x1000, 0x5, 0x7, 0x7, 0x2, 0x1f, 0x5, 0x10000, 0x67, 0x0, 0x1, 0x9, 0x467a, 0x8, 0x80000001, 0xffff8aec, 0xffffffff, 0x8, 0x5, 0x6, 0x8, 0xfff, 0x8, 0x2, 0xffffffff, 0x2, 0x1, 0xf3, 0x6, 0x3f, 0x9, 0x101, 0x9, 0x7, 0x6, 0x0, 0x2, 0x1000, 0x8, 0x2, 0x7f, 0x0, 0x8000, 0x6, 0x4, 0x0, 0x4, 0x400, 0x10001, 0x7fffffff, 0x8, 0x8, 0x4, 0x7, 0x7, 0x9, 0xffff, 0x100, 0x9, 0x8, 0x20, 0x4, 0x200, 0xfffffff7, 0xfff, 0x3e, 0x7, 0x3, 0x2, 0x1, 0x1, 0x5, 0x20, 0x0, 0xa1e, 0x0, 0x6, 0x2, 0x1, 0x0, 0x9, 0x60, 0xfffffff9, 0xb6db55c, 0x4, 0x36479465, 0x56, 0x4, 0xffffffff, 0x5, 0x0, 0x1, 0x0, 0x8, 0xfffffeff, 0x10001, 0x7, 0x5, 0x4df3a70a, 0x3f, 0x8, 0x101, 0x401, 0x95bd, 0xa389, 0x9, 0x9, 0xb505, 0x1, 0x1, 0x52b, 0x0, 0x7, 0x10001, 0x1, 0xff, 0xfff, 0x1000, 0x400, 0x60c, 0x7ff, 0xf39, 0x7fff, 0xa15, 0x80000001, 0x7, 0x1, 0x9, 0x20, 0x2, 0x7, 0x7f, 0xfffffffa, 0x0, 0x9, 0x1, 0x2, 0x1, 0x9, 0xfffffffc, 0x4, 0x0, 0x8001, 0x5, 0x4, 0x7ff, 0xd3b, 0x5, 0x1, 0x9467, 0x4, 0x8, 0x3, 0x8, 0xd19, 0x3f, 0x9, 0x9, 0xfffffe00, 0x4, 0x1ff, 0x4, 0x8000, 0x3, 0x9, 0x8, 0x1f, 0xfb48872, 0xffffffff, 0x0, 0x7fffffff, 0xe58f, 0x5, 0x7, 0x1b, 0x8000, 0x2, 0x6, 0x2aa5, 0x8, 0x8001, 0x5, 0x1, 0x0, 0x100, 0xfff, 0x7, 0xff, 0xc29e, 0x0, 0x8000, 0xfffffffc, 0x80000001, 0xbd, 0x3b94, 0xfff, 0x2, 0x8, 0xa809, 0x6, 0x2, 0x1ff, 0x4, 0x7fff, 0x7, 0xe62, 0x400, 0x2, 0x4, 0x1ff, 0xffffffe0, 0x4, 0x2, 0x6, 0x638, 0x0, 0xffffff02, 0x0, 0xfffffffc, 0x1, 0x1, 0x9, 0xa5d, 0x70c0, 0x8, 0x0, 0x6, 0xfffffffe, 0x84b, 0x101, 0x6, 0x3523, 0x5, 0x5, 0x5, 0x4, 0x1f, 0x80000001, 0x2, 0x5, 0x80000000, 0x7, 0x9ab, 0x9, 0x3f, 0x7ff, 0x2, 0x3800, 0x39, 0x3ff, 0x6, 0x8, 0xfffffffe, 0x1, 0xbc, 0x9, 0x2, 0x7, 0x8001, 0xa4fb, 0x101, 0x7, 0xffffffff, 0x800, 0x100, 0x1, 0x3ff, 0x3fe, 0x1, 0x56f08cba, 0x4, 0xf90, 0x1, 0x0, 0x401, 0x2, 0x2, 0x0, 0xac3, 0x7ff, 0xc1b, 0x3dcadad2, 0xfffffffe, 0x1f, 0x7, 0x6, 0xffff, 0x0, 0x8, 0x7, 0x4, 0x4183, 0x401, 0x6, 0x8, 0x0, 0x200, 0x7, 0x1, 0x5, 0x7, 0x5, 0x2, 0x6a5c, 0x7, 0x80000000, 0x2, 0x0, 0x0, 0xde, 0x81, 0x0, 0x0, 0xe71, 0x0, 0xd, 0x8, 0x1, 0x3, 0x6, 0x0, 0x3, 0xffffff00, 0x9, 0x101, 0x1, 0xffffffff, 0x0, 0x5c7, 0xffff8000, 0x1a3, 0x14000000, 0xfff, 0xad8c, 0x0, 0x8, 0xff, 0x2, 0x8, 0x4, 0x8, 0x2, 0x3, 0x1, 0x80000000, 0x5193, 0x21d, 0x1, 0xb4a, 0x93, 0x9, 0xd17a, 0x9, 0x3, 0x4, 0x7f9e, 0x3, 0x3243, 0x6, 0x7fff, 0x5, 0x8, 0x3d5, 0xffffabb3, 0x5, 0x5, 0x6, 0x8, 0x80, 0x0, 0x2, 0x9, 0x1, 0x80, 0xe6a, 0x65, 0x8, 0x5, 0x20, 0x3, 0x7, 0x8, 0x200, 0x7, 0x8, 0x1, 0xffffffff, 0x7, 0x3, 0x7, 0x0, 0xcf, 0xbd, 0x2, 0x8, 0x10000, 0x0, 0x3, 0x3, 0x8001, 0x5, 0x3, 0x9, 0x7, 0x0, 0x7fffffff, 0x6e7, 0x1f, 0x0, 0x3f, 0xd7, 0x5, 0x8, 0x1ff, 0x58e757fc, 0x408a255b, 0x5, 0x3ea, 0x7, 0x40, 0x6, 0x7, 0x2, 0x1ff, 0x0, 0x9023, 0x2d8, 0x735, 0x1, 0x1, 0x7f, 0x0, 0x1c, 0x1, 0x9, 0x80000001, 0x1, 0x800, 0x7, 0x40, 0x0, 0x2, 0x6, 0x704, 0x81, 0x3ff, 0x3, 0x7, 0x0, 0x7, 0x0, 0x3, 0x40, 0x5, 0xd92c, 0x3a, 0x8, 0x9cb, 0x800, 0x40, 0x8, 0x4, 0x3ff, 0x80000000, 0x27, 0x100, 0x81, 0x5, 0x80000000, 0x101, 0xffffffff, 0x2, 0x7ff, 0xffffffff, 0x0, 0x0, 0x8001, 0x2, 0x7fffffff, 0x40, 0x1, 0x9bc, 0x10001, 0x0, 0x3, 0x1, 0x6, 0x101, 0xfffffeff, 0x100, 0x9, 0x8, 0x8, 0x9, 0x7, 0xffffffff, 0x3ff, 0xfff, 0x80000001, 0x6, 0x80000000, 0x4, 0x1, 0x66eb, 0xffffffff, 0xffff, 0x2, 0x81, 0x3e, 0x0, 0x1, 0x6, 0x401, 0x80, 0x951, 0x6, 0x100, 0x78cc774f, 0x2, 0x1, 0x6, 0x8, 0x100, 0x5, 0x7fff, 0x3, 0x5, 0x0, 0x80000001, 0x40, 0x2, 0x7, 0xfffffffd, 0x6, 0x4fb, 0x7ff, 0xff, 0x10001, 0x8cce, 0x1, 0x6, 0x2, 0x9, 0x1, 0x1, 0x2, 0x10000, 0x0, 0x6, 0x400, 0x9, 0x8, 0xff, 0x80, 0x10001, 0x0, 0x7, 0x5, 0x1, 0x8, 0x8, 0xc95, 0x4, 0x3, 0xb7, 0x4, 0x1b9e5f88, 0x8, 0x0, 0x1, 0x3, 0x400, 0x9, 0x0, 0x5, 0x15, 0xed7c, 0x4, 0x8, 0x5, 0x7fffffff, 0x101, 0x6, 0x6, 0xfffffffa, 0x8, 0x10000, 0x4, 0x1, 0x4, 0x3f, 0x7, 0x3, 0x3, 0x7fffffff, 0x7ff, 0xee72, 0x7, 0x3f, 0x3, 0x200, 0x6, 0xc9b3, 0x80000000, 0x0, 0x4, 0x496cfa6c, 0x6, 0x6, 0x0, 0x51ba5b4d, 0x28, 0x1000, 0x6, 0x1f, 0x2, 0x2, 0x1, 0xd6d5, 0x7, 0x1, 0x3, 0x1, 0x8001, 0x8, 0x6, 0x10000, 0x3f, 0x478f012f, 0x53c, 0x3dd09020, 0x4, 0x5, 0xb4, 0x200, 0x0, 0x200, 0x1, 0x8, 0xb9e0, 0x738b, 0x7, 0x28d8, 0x8000, 0x0, 0x5, 0x7, 0x5, 0xffffff00, 0x7fffffff, 0x47, 0x6, 0x2, 0x4, 0x8000, 0x8, 0x3, 0x3, 0x2c6, 0x1ff, 0x4, 0x0, 0x2, 0xfffffffb, 0x9, 0x8, 0x4], 0x6, 0x400, 0x10000}) [ 1416.342334][T32289] Cannot find add_set index 0 as target [ 1416.350397][T32264] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1416.360045][T32289] Cannot find add_set index 0 as target [ 1416.371422][T32264] 8021q: adding VLAN 0 to HW filter on device bond0 10:22:06 executing program 3: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, 0x0) 10:22:06 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x6, 0x640142) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000000c0)={@my=0x0, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000640)={{@host}, @hyper, 0x0, 0x2000000, 0x0, 0x0, 0x1000000000005}) [ 1416.381470][ T26] audit: type=1800 audit(1679566926.608:446): pid=32288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1195 res=0 errno=0 [ 1416.396204][T32264] 8021q: adding VLAN 0 to HW filter on device team0 10:22:06 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x6, 0x640142) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000000c0)={@my=0x0, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000640)={{@host}, @hyper, 0x0, 0x2000000, 0x0, 0x0, 0x1000000000005}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000000040), 0x6, 0x640142) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000000c0)={@my=0x0, 0x1}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000640)={{@host}, @hyper, 0x0, 0x2000000, 0x0, 0x0, 0x1000000000005}) (async) [ 1416.462950][T32264] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1416.464504][ T26] audit: type=1804 audit(1679566926.628:447): pid=32288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir93003574/syzkaller.4QGSmP/1345/file0" dev="sda1" ino=1195 res=1 errno=0 [ 1416.547911][T32265] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1416.605751][T32303] syz-executor.1: vmalloc error: size 16384, page order 0, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1416.617661][ T26] audit: type=1804 audit(1679566926.628:448): pid=32289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir93003574/syzkaller.4QGSmP/1345/file0" dev="sda1" ino=1195 res=1 errno=0 [ 1416.665072][T32303] CPU: 1 PID: 32303 Comm: syz-executor.1 Not tainted 6.3.0-rc3-syzkaller-00026-gfff5a5e7f528 #0 [ 1416.675507][T32303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1416.685558][T32303] Call Trace: [ 1416.688833][T32303] [ 1416.691761][T32303] dump_stack_lvl+0x136/0x150 [ 1416.696450][T32303] warn_alloc+0x213/0x360 [ 1416.700781][T32303] ? zone_watermark_ok_safe+0x2e0/0x2e0 [ 1416.706345][T32303] __vmalloc_node_range+0xf1c/0x1300 [ 1416.711655][T32303] ? kernel_clone+0xeb/0x890 [ 1416.716259][T32303] ? delayed_vfree_work+0x70/0x70 [ 1416.721305][T32303] ? rcu_is_watching+0x12/0xb0 [ 1416.726064][T32303] ? kernel_clone+0xeb/0x890 [ 1416.730650][T32303] copy_process+0x1320/0x7590 [ 1416.735316][T32303] ? kernel_clone+0xeb/0x890 [ 1416.739900][T32303] ? find_held_lock+0x2d/0x110 [ 1416.744660][T32303] ? find_held_lock+0x2d/0x110 [ 1416.749420][T32303] ? __cleanup_sighand+0xb0/0xb0 [ 1416.754348][T32303] ? lock_downgrade+0x690/0x690 [ 1416.759186][T32303] ? folio_flags.constprop.0+0x53/0x150 [ 1416.764730][T32303] ? folio_add_lru+0x47f/0x7c0 [ 1416.769497][T32303] kernel_clone+0xeb/0x890 [ 1416.774002][T32303] ? create_io_thread+0xf0/0xf0 [ 1416.778844][T32303] ? vm_iomap_memory+0x190/0x190 [ 1416.783774][T32303] ? find_held_lock+0x2d/0x110 [ 1416.788537][T32303] __do_sys_clone+0xba/0x100 [ 1416.793120][T32303] ? kernel_clone+0x890/0x890 [ 1416.797800][T32303] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1416.803777][T32303] do_syscall_64+0x39/0xb0 [ 1416.808284][T32303] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1416.814171][T32303] RIP: 0033:0x7fd815a8d521 [ 1416.818659][T32303] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 1416.838262][T32303] RSP: 002b:00007ffc67aa6738 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1416.846753][T32303] RAX: ffffffffffffffda RBX: 00007fd81675b700 RCX: 00007fd815a8d521 [ 1416.854716][T32303] RDX: 00007fd81675b9d0 RSI: 00007fd81675b2f0 RDI: 00000000003d0f00 [ 1416.862673][T32303] RBP: 00007ffc67aa6980 R08: 00007fd81675b700 R09: 00007fd81675b700 [ 1416.870725][T32303] R10: 00007fd81675b9d0 R11: 0000000000000206 R12: 00007ffc67aa67ee [ 1416.878681][T32303] R13: 00007ffc67aa67ef R14: 00007fd81675b300 R15: 0000000000022000 [ 1416.886824][T32303] [ 1416.931205][T32265] bridge0: port 3(erspan0) entered disabled state [ 1416.959807][T32303] Mem-Info: [ 1416.962972][T32303] active_anon:239271 inactive_anon:10749 isolated_anon:0 [ 1416.962972][T32303] active_file:12 inactive_file:14035 isolated_file:0 [ 1416.962972][T32303] unevictable:768 dirty:24 writeback:0 [ 1416.962972][T32303] slab_reclaimable:21779 slab_unreclaimable:103120 [ 1416.962972][T32303] mapped:24552 shmem:11241 pagetables:1056 [ 1416.962972][T32303] sec_pagetables:0 bounce:0 [ 1416.962972][T32303] kernel_misc_reclaimable:0 [ 1416.962972][T32303] free:1174240 free_pcp:3160 free_cma:0 [ 1417.097628][T32303] Node 0 active_anon:958784kB inactive_anon:42996kB active_file:48kB inactive_file:56064kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98208kB dirty:92kB writeback:0kB shmem:43428kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 47104kB writeback_tmp:0kB kernel_stack:13204kB pagetables:4224kB sec_pagetables:0kB all_unreclaimable? no [ 1417.161695][T32303] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1417.196648][T32303] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1417.228323][T32303] lowmem_reserve[]: 0 2617 2619 2619 2619 [ 1417.236330][T32303] Node 0 DMA32 free:730324kB boost:0kB min:35440kB low:44300kB high:53160kB reserved_highatomic:0KB active_anon:959744kB inactive_anon:42992kB active_file:48kB inactive_file:54516kB unevictable:1536kB writepending:92kB present:3129332kB managed:2685112kB mlocked:0kB bounce:0kB free_pcp:8256kB local_pcp:6640kB free_cma:0kB [ 1417.272019][T32303] lowmem_reserve[]: 0 0 1 1 1 [ 1417.276842][T32303] Node 0 Normal free:16kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:40kB inactive_anon:4kB active_file:0kB inactive_file:1548kB unevictable:0kB writepending:0kB present:1048576kB managed:1620kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1417.305233][T32303] lowmem_reserve[]: 0 0 0 0 0 [ 1417.319548][T32303] Node 1 Normal free:3950000kB boost:0kB min:54444kB low:68052kB high:81660kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117612kB mlocked:0kB bounce:0kB free_pcp:2944kB local_pcp:2944kB free_cma:0kB [ 1417.363298][T32303] lowmem_reserve[]: 0 0 0 0 0 [ 1417.368077][T32303] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1417.384952][T32303] Node 0 DMA32: 736*4kB (UME) 2050*8kB (UME) 781*16kB (UM) 690*32kB (UME) 137*64kB (UME) 62*128kB (UME) 98*256kB (UME) 30*512kB (ME) 14*1024kB (M) 11*2048kB (UME) 142*4096kB (M) = 729568kB [ 1417.407763][T32303] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB 10:22:07 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1417.424232][T32303] Node 1 Normal: 160*4kB (UE) 36*8kB (UME) 35*16kB (UE) 179*32kB (UME) 88*64kB (UME) 29*128kB (UE) 11*256kB (U) 3*512kB (UE) 3*1024kB (UME) 3*2048kB (UE) 957*4096kB (M) = 3950000kB [ 1417.446497][T32303] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1417.456391][T32303] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1417.487023][T32270] bridge0: port 3(erspan0) entered blocking state [ 1417.493180][T32303] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1417.493544][T32270] bridge0: port 3(erspan0) entered forwarding state [ 1417.503476][T32303] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1417.515058][T32270] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1417.520252][T32303] 24584 total pagecache pages [ 1417.527633][T32270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1417.545248][T32270] 8021q: adding VLAN 0 to HW filter on device team0 [ 1417.548300][T32303] 0 pages in swap cache [ 1417.556260][T32270] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1417.556535][T32303] Free swap = 0kB [ 1417.575778][T32303] Total swap = 0kB [ 1417.575857][T32271] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1417.579661][T32303] 2097051 pages RAM [ 1417.591535][T32303] 0 pages HighMem/MovableOnly [ 1417.596207][T32303] 392125 pages reserved [ 1417.604848][T32303] 0 pages cma reserved [ 1417.652444][T32271] bridge0: port 3(erspan0) entered disabled state 10:22:08 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1417.901682][T32272] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1417.915174][ T5169] ip6_vti0 speed is unknown, defaulting to 1000 [ 1417.937385][T32284] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1417.976499][T32284] infiniband syz2: set active [ 1417.983451][T32284] infiniband syz2: set active [ 1418.009878][T32284] bridge0: port 3(erspan0) entered blocking state [ 1418.016395][T32284] bridge0: port 3(erspan0) entered forwarding state [ 1418.026676][T32284] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1418.037379][T32284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1418.046919][T32284] 8021q: adding VLAN 0 to HW filter on device team0 [ 1418.065740][T32284] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1418.094728][T32294] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1418.172183][T32294] bridge0: port 3(erspan0) entered disabled state [ 1418.217106][T32294] infiniband syz2: set down 10:22:08 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r2 = getpid() fsmount(0xffffffffffffffff, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r3, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) 10:22:08 executing program 3: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, 0x0) 10:22:08 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async, rerun: 32) openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (rerun: 32) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x6, 0x640142) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000000c0)={@my=0x0, 0x1}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000640)={{@host}, @hyper, 0x0, 0x2000000, 0x0, 0x0, 0x1000000000005}) [ 1418.610360][T32295] bridge0: port 3(erspan0) entered blocking state [ 1418.616868][T32295] bridge0: port 3(erspan0) entered forwarding state [ 1418.634233][T32295] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1418.642516][T32295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1418.650968][T32295] 8021q: adding VLAN 0 to HW filter on device team0 [ 1418.662947][T32295] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1418.679006][T22782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 10:22:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) 10:22:08 executing program 3: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, 0x0) 10:22:08 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000000000)={&(0x7f0000000780)=[0x40, 0x0, 0x3, 0xffffffff, 0xfff, 0x0, 0x0, 0xfffffffb, 0x9, 0xffffffff, 0x0, 0x0, 0x4, 0x18, 0x8001, 0x9, 0xffff, 0xffff, 0x3, 0x0, 0x8, 0x7f, 0x6, 0x0, 0x6, 0x3, 0xa22d, 0x5, 0x9, 0xffffffc0, 0xffff122d, 0x3, 0x80000000, 0x3, 0x1, 0x10001, 0xffff, 0x0, 0x0, 0x6, 0x0, 0x5, 0x7c, 0xffff, 0x6, 0x401, 0x6, 0x40, 0x5, 0x1ff, 0x7ff, 0x81, 0x7, 0x1, 0x10000, 0x8001, 0x8, 0xffff, 0x3, 0x8, 0xffffffff, 0x80, 0x3ff, 0x0, 0x7, 0x7fff, 0x3f, 0x0, 0x8, 0x0, 0x7ff, 0x9, 0x3f, 0x2, 0x482b, 0xbd5, 0x400, 0x3, 0x0, 0x8, 0x80000000, 0xfff, 0x40, 0x9, 0x4, 0x4, 0x9, 0xd6e, 0x2, 0xb6, 0x1, 0x80000000, 0x47, 0x800, 0xd, 0x9, 0x5, 0x0, 0x1, 0x1, 0x9, 0x5e, 0xff9, 0x1, 0x9, 0x3, 0x5, 0x7fff, 0xb9, 0x0, 0x5, 0x81c800, 0x7fffffff, 0x5, 0xffffffff, 0x8, 0x6, 0x81, 0xfffffffd, 0x200, 0x7fff, 0x400, 0x7fffffff, 0x51, 0x48ca, 0x3, 0x6, 0x526f, 0x8001, 0x7f, 0x40, 0x7, 0x7, 0x1400000, 0xffff, 0xc71, 0x5, 0x9, 0x9, 0x7fffffff, 0x7, 0x84, 0x20, 0x3, 0x1000, 0x8, 0x9, 0x3ff, 0xffffffff, 0x9, 0x4, 0x101, 0xfffffff7, 0xbbb2, 0x401, 0x6, 0x0, 0x10000, 0x3, 0xfffffffe, 0x4, 0x6, 0x6f95, 0x100, 0x8, 0x7, 0x6, 0x5, 0x398, 0xffff, 0x10001, 0x6, 0x7fffffff, 0x60f0, 0x10000, 0x2, 0x4, 0x4, 0x7, 0x1f, 0x4959dc5e, 0x6f6, 0xfffff233, 0x0, 0xfffffffa, 0x44, 0x6, 0x0, 0x9ab, 0x6894, 0x7, 0x1, 0x9, 0x0, 0x6, 0x2a, 0x4, 0x3ff, 0x8, 0x8, 0x1, 0x7fff, 0x7f, 0x0, 0x7, 0x40, 0x80000000, 0x6, 0x40, 0x1, 0xb45, 0x1, 0x1ff, 0x0, 0x0, 0x7, 0xc009, 0xab0, 0x8, 0x7, 0xffffffff, 0x7, 0x2, 0x20, 0x101, 0x7ff, 0x7, 0x6, 0x8, 0x7, 0x2, 0x8, 0x77f, 0x1, 0x4, 0x7f, 0x6, 0x800, 0x4, 0x20, 0x7fff, 0xce7d, 0x1c, 0xc5, 0x5, 0x6, 0x200, 0x80000000, 0x1f, 0x4, 0x1c00000, 0x4, 0x3234, 0x7, 0x6, 0x8000, 0x1, 0x60, 0xffffffff, 0xa7, 0x8000, 0x64e, 0x6, 0xffffffc1, 0xffff8001, 0x2, 0x0, 0xfffffffb, 0x1800, 0x8, 0x0, 0xffff, 0x0, 0x6, 0x7, 0x101, 0xfffffffa, 0x50, 0x1, 0x0, 0x2, 0x4, 0x1, 0x62c1, 0x1, 0x1, 0x3, 0x5, 0x1, 0x0, 0x53e, 0xbfcf, 0x1ff, 0x2, 0x6, 0x800, 0x5, 0x71777e63, 0x100, 0x8d, 0x3, 0x0, 0x0, 0x0, 0x80, 0x4, 0x302655ba, 0x5, 0xfffffffe, 0xfffff000, 0x3f, 0x1, 0xfffffff7, 0x2, 0x7, 0x9, 0x2, 0x3, 0x25, 0x3, 0xfffffffe, 0x0, 0x5, 0x4c05, 0x7, 0x7, 0x0, 0x8f08, 0x8001, 0x7fffffff, 0x101, 0x7, 0x9, 0x8, 0x6, 0x0, 0x7f, 0x1, 0x7, 0x100, 0x7, 0xffffff4b, 0x3, 0x401, 0x4, 0x80, 0x4, 0x0, 0x3, 0x54e, 0x7, 0x4, 0xd55, 0x7, 0x1, 0x4fad, 0x20, 0x1000, 0x5, 0x7, 0x7, 0x2, 0x1f, 0x5, 0x10000, 0x67, 0x0, 0x1, 0x9, 0x467a, 0x8, 0x80000001, 0xffff8aec, 0xffffffff, 0x8, 0x5, 0x6, 0x8, 0xfff, 0x8, 0x2, 0xffffffff, 0x2, 0x1, 0xf3, 0x6, 0x3f, 0x9, 0x101, 0x9, 0x7, 0x6, 0x0, 0x2, 0x1000, 0x8, 0x2, 0x7f, 0x0, 0x8000, 0x6, 0x4, 0x0, 0x4, 0x400, 0x10001, 0x7fffffff, 0x8, 0x8, 0x4, 0x7, 0x7, 0x9, 0xffff, 0x100, 0x9, 0x8, 0x20, 0x4, 0x200, 0xfffffff7, 0xfff, 0x3e, 0x7, 0x3, 0x2, 0x1, 0x1, 0x5, 0x20, 0x0, 0xa1e, 0x0, 0x6, 0x2, 0x1, 0x0, 0x9, 0x60, 0xfffffff9, 0xb6db55c, 0x4, 0x36479465, 0x56, 0x4, 0xffffffff, 0x5, 0x0, 0x1, 0x0, 0x8, 0xfffffeff, 0x10001, 0x7, 0x5, 0x4df3a70a, 0x3f, 0x8, 0x101, 0x401, 0x95bd, 0xa389, 0x9, 0x9, 0xb505, 0x1, 0x1, 0x52b, 0x0, 0x7, 0x10001, 0x1, 0xff, 0xfff, 0x1000, 0x400, 0x60c, 0x7ff, 0xf39, 0x7fff, 0xa15, 0x80000001, 0x7, 0x1, 0x9, 0x20, 0x2, 0x7, 0x7f, 0xfffffffa, 0x0, 0x9, 0x1, 0x2, 0x1, 0x9, 0xfffffffc, 0x4, 0x0, 0x8001, 0x5, 0x4, 0x7ff, 0xd3b, 0x5, 0x1, 0x9467, 0x4, 0x8, 0x3, 0x8, 0xd19, 0x3f, 0x9, 0x9, 0xfffffe00, 0x4, 0x1ff, 0x4, 0x8000, 0x3, 0x9, 0x8, 0x1f, 0xfb48872, 0xffffffff, 0x0, 0x7fffffff, 0xe58f, 0x5, 0x7, 0x1b, 0x8000, 0x2, 0x6, 0x2aa5, 0x8, 0x8001, 0x5, 0x1, 0x0, 0x100, 0xfff, 0x7, 0xff, 0xc29e, 0x0, 0x8000, 0xfffffffc, 0x80000001, 0xbd, 0x3b94, 0xfff, 0x2, 0x8, 0xa809, 0x6, 0x2, 0x1ff, 0x4, 0x7fff, 0x7, 0xe62, 0x400, 0x2, 0x4, 0x1ff, 0xffffffe0, 0x4, 0x2, 0x6, 0x638, 0x0, 0xffffff02, 0x0, 0xfffffffc, 0x1, 0x1, 0x9, 0xa5d, 0x70c0, 0x8, 0x0, 0x6, 0xfffffffe, 0x84b, 0x101, 0x6, 0x3523, 0x5, 0x5, 0x5, 0x4, 0x1f, 0x80000001, 0x2, 0x5, 0x80000000, 0x7, 0x9ab, 0x9, 0x3f, 0x7ff, 0x2, 0x3800, 0x39, 0x3ff, 0x6, 0x8, 0xfffffffe, 0x1, 0xbc, 0x9, 0x2, 0x7, 0x8001, 0xa4fb, 0x101, 0x7, 0xffffffff, 0x800, 0x100, 0x1, 0x3ff, 0x3fe, 0x1, 0x56f08cba, 0x4, 0xf90, 0x1, 0x0, 0x401, 0x2, 0x2, 0x0, 0xac3, 0x7ff, 0xc1b, 0x3dcadad2, 0xfffffffe, 0x1f, 0x7, 0x6, 0xffff, 0x0, 0x8, 0x7, 0x4, 0x4183, 0x401, 0x6, 0x8, 0x0, 0x200, 0x7, 0x1, 0x5, 0x7, 0x5, 0x2, 0x6a5c, 0x7, 0x80000000, 0x2, 0x0, 0x0, 0xde, 0x81, 0x0, 0x0, 0xe71, 0x0, 0xd, 0x8, 0x1, 0x3, 0x6, 0x0, 0x3, 0xffffff00, 0x9, 0x101, 0x1, 0xffffffff, 0x0, 0x5c7, 0xffff8000, 0x1a3, 0x14000000, 0xfff, 0xad8c, 0x0, 0x8, 0xff, 0x2, 0x8, 0x4, 0x8, 0x2, 0x3, 0x1, 0x80000000, 0x5193, 0x21d, 0x1, 0xb4a, 0x93, 0x9, 0xd17a, 0x9, 0x3, 0x4, 0x7f9e, 0x3, 0x3243, 0x6, 0x7fff, 0x5, 0x8, 0x3d5, 0xffffabb3, 0x5, 0x5, 0x6, 0x8, 0x80, 0x0, 0x2, 0x9, 0x1, 0x80, 0xe6a, 0x65, 0x8, 0x5, 0x20, 0x3, 0x7, 0x8, 0x200, 0x7, 0x8, 0x1, 0xffffffff, 0x7, 0x3, 0x7, 0x0, 0xcf, 0xbd, 0x2, 0x8, 0x10000, 0x0, 0x3, 0x3, 0x8001, 0x5, 0x3, 0x9, 0x7, 0x0, 0x7fffffff, 0x6e7, 0x1f, 0x0, 0x3f, 0xd7, 0x5, 0x8, 0x1ff, 0x58e757fc, 0x408a255b, 0x5, 0x3ea, 0x7, 0x40, 0x6, 0x7, 0x2, 0x1ff, 0x0, 0x9023, 0x2d8, 0x735, 0x1, 0x1, 0x7f, 0x0, 0x1c, 0x1, 0x9, 0x80000001, 0x1, 0x800, 0x7, 0x40, 0x0, 0x2, 0x6, 0x704, 0x81, 0x3ff, 0x3, 0x7, 0x0, 0x7, 0x0, 0x3, 0x40, 0x5, 0xd92c, 0x3a, 0x8, 0x9cb, 0x800, 0x40, 0x8, 0x4, 0x3ff, 0x80000000, 0x27, 0x100, 0x81, 0x5, 0x80000000, 0x101, 0xffffffff, 0x2, 0x7ff, 0xffffffff, 0x0, 0x0, 0x8001, 0x2, 0x7fffffff, 0x40, 0x1, 0x9bc, 0x10001, 0x0, 0x3, 0x1, 0x6, 0x101, 0xfffffeff, 0x100, 0x9, 0x8, 0x8, 0x9, 0x7, 0xffffffff, 0x3ff, 0xfff, 0x80000001, 0x6, 0x80000000, 0x4, 0x1, 0x66eb, 0xffffffff, 0xffff, 0x2, 0x81, 0x3e, 0x0, 0x1, 0x6, 0x401, 0x80, 0x951, 0x6, 0x100, 0x78cc774f, 0x2, 0x1, 0x6, 0x8, 0x100, 0x5, 0x7fff, 0x3, 0x5, 0x0, 0x80000001, 0x40, 0x2, 0x7, 0xfffffffd, 0x6, 0x4fb, 0x7ff, 0xff, 0x10001, 0x8cce, 0x1, 0x6, 0x2, 0x9, 0x1, 0x1, 0x2, 0x10000, 0x0, 0x6, 0x400, 0x9, 0x8, 0xff, 0x80, 0x10001, 0x0, 0x7, 0x5, 0x1, 0x8, 0x8, 0xc95, 0x4, 0x3, 0xb7, 0x4, 0x1b9e5f88, 0x8, 0x0, 0x1, 0x3, 0x400, 0x9, 0x0, 0x5, 0x15, 0xed7c, 0x4, 0x8, 0x5, 0x7fffffff, 0x101, 0x6, 0x6, 0xfffffffa, 0x8, 0x10000, 0x4, 0x1, 0x4, 0x3f, 0x7, 0x3, 0x3, 0x7fffffff, 0x7ff, 0xee72, 0x7, 0x3f, 0x3, 0x200, 0x6, 0xc9b3, 0x80000000, 0x0, 0x4, 0x496cfa6c, 0x6, 0x6, 0x0, 0x51ba5b4d, 0x28, 0x1000, 0x6, 0x1f, 0x2, 0x2, 0x1, 0xd6d5, 0x7, 0x1, 0x3, 0x1, 0x8001, 0x8, 0x6, 0x10000, 0x3f, 0x478f012f, 0x53c, 0x3dd09020, 0x4, 0x5, 0xb4, 0x200, 0x0, 0x200, 0x1, 0x8, 0xb9e0, 0x738b, 0x7, 0x28d8, 0x8000, 0x0, 0x5, 0x7, 0x5, 0xffffff00, 0x7fffffff, 0x47, 0x6, 0x2, 0x4, 0x8000, 0x8, 0x3, 0x3, 0x2c6, 0x1ff, 0x4, 0x0, 0x2, 0xfffffffb, 0x9, 0x8, 0x4], 0x6, 0x400, 0x10000}) [ 1418.716439][T32311] bridge0: port 3(erspan0) entered blocking state [ 1418.722935][T32311] bridge0: port 3(erspan0) entered forwarding state [ 1418.739813][T32311] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1418.747987][T32311] 8021q: adding VLAN 0 to HW filter on device bond0 10:22:09 executing program 3: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x10000}) 10:22:09 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r4, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000240)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) 10:22:09 executing program 3: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x10000}) [ 1418.778216][T32311] 8021q: adding VLAN 0 to HW filter on device team0 [ 1418.787597][T32311] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1418.816826][T32312] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 10:22:09 executing program 3: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x10000}) [ 1418.935015][T32312] bridge0: port 3(erspan0) entered disabled state 10:22:09 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1419.216529][T22089] ip6_vti0 speed is unknown, defaulting to 1000 [ 1419.252838][T32317] bridge0: port 3(erspan0) entered blocking state [ 1419.259295][T32317] bridge0: port 3(erspan0) entered forwarding state [ 1419.280611][T32317] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1419.288665][T32317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1419.297444][T32317] 8021q: adding VLAN 0 to HW filter on device team0 [ 1419.321590][T32317] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1419.353715][T32318] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1419.505185][T32318] bridge0: port 3(erspan0) entered disabled state 10:22:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1419.936707][T32319] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1419.952329][T32327] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1419.997766][T32327] infiniband syz2: set active [ 1420.003622][T32327] infiniband syz2: set active [ 1420.036301][T32327] bridge0: port 3(erspan0) entered blocking state [ 1420.042823][T32327] bridge0: port 3(erspan0) entered forwarding state [ 1420.050664][T32327] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1420.060396][T32327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1420.069159][T32327] 8021q: adding VLAN 0 to HW filter on device team0 [ 1420.081625][T32327] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1420.097485][T32328] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1420.192496][T32328] bridge0: port 3(erspan0) entered disabled state [ 1420.235610][T32328] infiniband syz2: set down 10:22:10 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r2 = getpid() fsmount(0xffffffffffffffff, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r3, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) 10:22:10 executing program 3: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x10000}) 10:22:10 executing program 3: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000000)={0x0, 0x6}) [ 1420.512798][T32338] bridge0: port 3(erspan0) entered blocking state [ 1420.519318][T32338] bridge0: port 3(erspan0) entered forwarding state [ 1420.553730][T32338] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1420.562147][T32338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1420.569713][T32338] 8021q: adding VLAN 0 to HW filter on device team0 [ 1420.578867][T32338] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1420.594819][T32344] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1420.721380][T32344] bridge0: port 3(erspan0) entered disabled state [ 1420.924554][T32345] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1420.933255][T32345] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1420.950881][T32346] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1420.979136][T32346] bridge0: port 3(erspan0) entered disabled state 10:22:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) 10:22:11 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) 10:22:11 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r4, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000240)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1421.144033][T32347] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1421.153664][ T6233] ip6_vti0 speed is unknown, defaulting to 1000 [ 1421.172704][T32352] bridge0: port 3(erspan0) entered blocking state [ 1421.179307][T32352] bridge0: port 3(erspan0) entered forwarding state [ 1421.201568][T32352] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1421.216313][T32352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1421.224593][T32352] 8021q: adding VLAN 0 to HW filter on device team0 [ 1421.233572][T32352] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1421.249020][T32353] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1421.370229][T32353] bridge0: port 3(erspan0) entered disabled state 10:22:12 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1421.977420][T32358] bridge0: port 3(erspan0) entered blocking state [ 1421.984499][T32358] bridge0: port 3(erspan0) entered forwarding state [ 1422.039855][T32358] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1422.078781][T32358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1422.090775][ T1205] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.097101][ T1205] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.124758][T32358] 8021q: adding VLAN 0 to HW filter on device team0 [ 1422.146343][T32358] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1422.185507][T32359] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1422.473623][T32359] bridge0: port 3(erspan0) entered disabled state [ 1422.814426][T32360] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1422.830697][T32365] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 10:22:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd0603"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1422.867376][T32365] infiniband syz2: set active [ 1422.877961][T32365] infiniband syz2: set active [ 1422.912134][T32365] bridge0: port 3(erspan0) entered blocking state [ 1422.918691][T32365] bridge0: port 3(erspan0) entered forwarding state [ 1422.927485][T32365] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1422.935822][T32365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1422.944652][T32365] 8021q: adding VLAN 0 to HW filter on device team0 [ 1422.958456][T32365] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1422.974882][T32368] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1423.048211][T32368] bridge0: port 3(erspan0) entered disabled state [ 1423.078752][T32368] infiniband syz2: set down 10:22:13 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r2 = getpid() fsmount(0xffffffffffffffff, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r3, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1423.307271][T23000] ip6_vti0 speed is unknown, defaulting to 1000 [ 1423.344895][T32378] bridge0: port 3(erspan0) entered blocking state [ 1423.351487][T32378] bridge0: port 3(erspan0) entered forwarding state [ 1423.360330][T32378] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1423.369476][T32378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1423.378523][T32378] 8021q: adding VLAN 0 to HW filter on device team0 [ 1423.390571][T32378] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1423.406579][T32383] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1423.520804][T32383] bridge0: port 3(erspan0) entered disabled state 10:22:14 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r4, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000240)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1423.776256][T32385] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1423.785927][T32385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1423.794441][T32385] 8021q: adding VLAN 0 to HW filter on device team0 [ 1423.803918][T32385] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1423.836185][T32386] bridge0: port 3(erspan0) entered blocking state [ 1423.842652][T32386] bridge0: port 3(erspan0) entered forwarding state [ 1423.850479][T32386] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1423.858162][T32386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1423.865994][T32386] 8021q: adding VLAN 0 to HW filter on device team0 [ 1423.874391][T32386] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1423.890474][T32387] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 1423.954470][T32388] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1423.982890][T32388] bridge0: port 3(erspan0) entered disabled state [ 1424.028089][T32389] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1424.042297][T32390] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 10:22:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) 10:22:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1424.104237][T32396] bridge0: port 3(erspan0) entered blocking state [ 1424.110845][T32396] bridge0: port 3(erspan0) entered forwarding state [ 1424.118992][T32396] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1424.127006][T32396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1424.137991][T32396] 8021q: adding VLAN 0 to HW filter on device team0 [ 1424.153532][T32396] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1424.173826][T32397] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1424.208195][T32397] bridge0: port 3(erspan0) entered disabled state 10:22:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1424.323244][T32402] bridge0: port 3(erspan0) entered blocking state [ 1424.329786][T32402] bridge0: port 3(erspan0) entered forwarding state [ 1424.337756][T32402] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1424.346627][T32402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1424.365039][T32402] 8021q: adding VLAN 0 to HW filter on device team0 [ 1424.376384][T32402] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1424.397699][T32403] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1424.564724][T32403] bridge0: port 3(erspan0) entered disabled state 10:22:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd0603"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1425.021918][T32404] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1425.038950][T21973] ip6_vti0 speed is unknown, defaulting to 1000 [ 1425.065439][T32407] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1425.083040][T32407] infiniband syz2: set active [ 1425.088752][T32407] infiniband syz2: set active [ 1425.113184][T32407] bridge0: port 3(erspan0) entered blocking state [ 1425.119693][T32407] bridge0: port 3(erspan0) entered forwarding state [ 1425.133653][T32407] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1425.145308][T32407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1425.155014][T32407] 8021q: adding VLAN 0 to HW filter on device team0 [ 1425.166819][T32407] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1425.233143][T32408] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1425.378004][T32408] bridge0: port 3(erspan0) entered disabled state [ 1425.432032][T32408] infiniband syz2: set down 10:22:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1425.674146][T32410] bridge0: port 3(erspan0) entered blocking state [ 1425.680632][T32410] bridge0: port 3(erspan0) entered forwarding state [ 1425.689264][T32410] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1425.698806][T32410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1425.712290][T32410] 8021q: adding VLAN 0 to HW filter on device team0 [ 1425.727580][T32410] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1425.747754][T32411] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1425.832826][T32411] bridge0: port 3(erspan0) entered disabled state 10:22:16 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1426.089232][T32422] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1426.097567][T32422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1426.105234][T32422] 8021q: adding VLAN 0 to HW filter on device team0 [ 1426.116009][T32422] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1426.131851][T32424] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 10:22:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1426.201380][T32426] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1426.238162][T32425] bridge0: port 3(erspan0) entered blocking state [ 1426.244736][T32425] bridge0: port 3(erspan0) entered forwarding state [ 1426.253009][T32425] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1426.261643][T32425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1426.270286][T32425] 8021q: adding VLAN 0 to HW filter on device team0 [ 1426.294034][T32425] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1426.310095][T32430] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1426.390991][T32430] bridge0: port 3(erspan0) entered disabled state [ 1426.642701][T32432] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 10:22:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1426.691428][T32433] bridge0: port 3(erspan0) entered blocking state [ 1426.697947][T32433] bridge0: port 3(erspan0) entered forwarding state [ 1426.728871][T32433] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1426.739054][T32433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1426.751459][T32433] 8021q: adding VLAN 0 to HW filter on device team0 [ 1426.774474][T32433] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1426.972942][T32435] bridge0: port 3(erspan0) entered disabled state [ 1427.395526][T31535] ip6_vti0 speed is unknown, defaulting to 1000 10:22:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c00"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1427.437258][T32440] bridge0: port 3(erspan0) entered blocking state [ 1427.443844][T32440] bridge0: port 3(erspan0) entered forwarding state [ 1427.456382][T32440] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1427.473825][T32440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1427.482280][T32440] 8021q: adding VLAN 0 to HW filter on device team0 [ 1427.493822][T32440] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1427.557596][T32441] bridge0: port 3(erspan0) entered disabled state [ 1427.820165][T32442] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1427.839351][T32445] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 10:22:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd0603"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1427.883951][T32445] infiniband syz2: set active [ 1427.898527][T32445] infiniband syz2: set active [ 1427.927723][T32445] bridge0: port 3(erspan0) entered blocking state [ 1427.934281][T32445] bridge0: port 3(erspan0) entered forwarding state [ 1427.943683][T32445] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1427.953468][T32445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1427.962833][T32445] 8021q: adding VLAN 0 to HW filter on device team0 [ 1428.054006][T32446] bridge0: port 3(erspan0) entered disabled state [ 1428.100021][T32446] infiniband syz2: set down 10:22:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1428.500635][T32450] bridge0: port 3(erspan0) entered blocking state [ 1428.507165][T32450] bridge0: port 3(erspan0) entered forwarding state [ 1428.521040][T32450] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1428.528883][T32450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1428.542675][T32450] 8021q: adding VLAN 0 to HW filter on device team0 [ 1428.558390][T32453] validate_nla: 3 callbacks suppressed [ 1428.558401][T32453] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1428.650341][T32453] bridge0: port 3(erspan0) entered disabled state 10:22:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r5, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000240)) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r6, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r5, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1428.860180][T32455] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1428.883895][T32454] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1428.893348][T32454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1428.911186][T32454] 8021q: adding VLAN 0 to HW filter on device team0 [ 1428.919858][T32454] net_ratelimit: 2 callbacks suppressed [ 1428.919867][T32454] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1428.941949][T32457] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 10:22:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1429.138024][T32458] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1429.159277][T32463] bridge0: port 3(erspan0) entered blocking state [ 1429.165763][T32463] bridge0: port 3(erspan0) entered forwarding state [ 1429.173863][T32463] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1429.181571][T32463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1429.189698][T32463] 8021q: adding VLAN 0 to HW filter on device team0 [ 1429.198685][T32463] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1429.215014][T32464] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1429.249730][T32464] bridge0: port 3(erspan0) entered disabled state [ 1429.275292][T32465] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1429.287006][T18698] ip6_vti0 speed is unknown, defaulting to 1000 10:22:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1429.316280][T32470] bridge0: port 3(erspan0) entered blocking state [ 1429.322784][T32470] bridge0: port 3(erspan0) entered forwarding state [ 1429.342351][T32470] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1429.351031][T32470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1429.358493][T32470] 8021q: adding VLAN 0 to HW filter on device team0 [ 1429.378963][T32470] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1429.397461][T32471] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1429.450364][T32471] bridge0: port 3(erspan0) entered disabled state 10:22:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c00"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1429.716046][T32472] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1429.759856][T32477] bridge0: port 3(erspan0) entered blocking state [ 1429.766371][T32477] bridge0: port 3(erspan0) entered forwarding state [ 1429.776169][T32477] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1429.786140][T32477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1429.798904][T32477] 8021q: adding VLAN 0 to HW filter on device team0 [ 1429.809104][T32477] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1429.876413][T32478] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1430.027738][T32478] bridge0: port 3(erspan0) entered disabled state [ 1430.466335][T32479] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1430.488356][T32482] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 10:22:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a00"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1430.535854][T32482] infiniband syz2: set active [ 1430.553627][T32482] infiniband syz2: set active [ 1430.566505][T32482] bridge0: port 3(erspan0) entered blocking state [ 1430.573036][T32482] bridge0: port 3(erspan0) entered forwarding state [ 1430.611498][T32482] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1430.620161][T32482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1430.627773][T32482] 8021q: adding VLAN 0 to HW filter on device team0 [ 1430.641854][T32482] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1430.664051][T32483] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1430.732914][T32483] bridge0: port 3(erspan0) entered disabled state [ 1430.768936][T32483] infiniband syz2: set down 10:22:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1430.995708][T32486] bridge0: port 3(erspan0) entered blocking state [ 1431.002230][T32486] bridge0: port 3(erspan0) entered forwarding state [ 1431.015743][T32486] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1431.025079][T32486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1431.038007][T32486] 8021q: adding VLAN 0 to HW filter on device team0 [ 1431.059886][T32486] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1431.079500][T32487] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1431.182051][T32487] bridge0: port 3(erspan0) entered disabled state [ 1431.435362][T32488] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1431.448895][ T9800] ip6_vti0 speed is unknown, defaulting to 1000 10:22:21 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c00"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1431.481975][T32492] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1431.523184][T32492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1431.534522][T32492] 8021q: adding VLAN 0 to HW filter on device team0 [ 1431.550089][T32492] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1431.566061][T32493] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 10:22:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r5, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000240)) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r6, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r5, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1431.835915][T32496] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1431.884576][T32499] bridge0: port 3(erspan0) entered blocking state [ 1431.891156][T32499] bridge0: port 3(erspan0) entered forwarding state [ 1431.900997][T32499] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1431.908831][T32499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1431.918489][T32499] 8021q: adding VLAN 0 to HW filter on device team0 [ 1431.930626][T32499] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1431.946450][T32500] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1432.033943][T32500] bridge0: port 3(erspan0) entered disabled state 10:22:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r4, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000240)) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r6, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) [ 1432.369178][T32501] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1432.392038][T32506] bridge0: port 3(erspan0) entered blocking state [ 1432.398566][T32506] bridge0: port 3(erspan0) entered forwarding state [ 1432.406730][T32506] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1432.426896][T32506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1432.434768][T32506] 8021q: adding VLAN 0 to HW filter on device team0 [ 1432.446243][T32506] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1432.463036][T32507] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 10:22:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c00"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1432.483448][T32507] bridge0: port 3(erspan0) entered disabled state [ 1432.516842][T32508] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1432.557330][T32513] bridge0: port 3(erspan0) entered blocking state [ 1432.563870][T32513] bridge0: port 3(erspan0) entered forwarding state [ 1432.577675][T32513] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1432.586799][T32513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1432.598664][T32513] 8021q: adding VLAN 0 to HW filter on device team0 [ 1432.613835][T32513] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1432.675026][T32514] bridge0: port 3(erspan0) entered disabled state 10:22:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a00"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1433.096990][T32515] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1433.113322][T32518] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1433.135846][T32518] infiniband syz2: set active [ 1433.149105][T32518] infiniband syz2: set active [ 1433.160310][T32518] bridge0: port 3(erspan0) entered blocking state [ 1433.166824][T32518] bridge0: port 3(erspan0) entered forwarding state [ 1433.175005][T32518] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1433.183428][T32518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1433.191053][T32518] 8021q: adding VLAN 0 to HW filter on device team0 [ 1433.256440][T32519] bridge0: port 3(erspan0) entered disabled state [ 1433.283975][T32519] infiniband syz2: set down 10:22:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1433.506527][ T6232] ip6_vti0 speed is unknown, defaulting to 1000 [ 1433.535894][T32523] bridge0: port 3(erspan0) entered blocking state [ 1433.542466][T32523] bridge0: port 3(erspan0) entered forwarding state [ 1433.555928][T32523] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1433.564508][T32523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1433.578053][T32523] 8021q: adding VLAN 0 to HW filter on device team0 [ 1433.594897][T32524] validate_nla: 2 callbacks suppressed [ 1433.594907][T32524] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1433.725004][T32524] bridge0: port 3(erspan0) entered disabled state 10:22:24 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r4, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000240)) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r6, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) [ 1433.953393][T32525] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1433.978253][T32529] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1433.995357][T32529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1434.007026][T32529] 8021q: adding VLAN 0 to HW filter on device team0 [ 1434.016232][T32529] net_ratelimit: 2 callbacks suppressed [ 1434.016242][T32529] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1434.037545][T32530] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 10:22:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r5, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000240)) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r6, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r5, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1434.226695][T32531] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1434.259895][T32534] bridge0: port 3(erspan0) entered blocking state [ 1434.266447][T32534] bridge0: port 3(erspan0) entered forwarding state [ 1434.274246][T32534] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1434.283145][T32534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1434.291288][T32534] 8021q: adding VLAN 0 to HW filter on device team0 [ 1434.300055][T32534] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1434.316152][T32536] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1434.375033][T32536] bridge0: port 3(erspan0) entered disabled state 10:22:24 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r4, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000240)) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r6, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) [ 1434.516468][T32537] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1434.543888][T32542] bridge0: port 3(erspan0) entered blocking state [ 1434.550530][T32542] bridge0: port 3(erspan0) entered forwarding state [ 1434.558602][T32542] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1434.574142][T32542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1434.582736][T32542] 8021q: adding VLAN 0 to HW filter on device team0 [ 1434.591546][T32542] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1434.607292][T32543] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1434.640167][T32543] bridge0: port 3(erspan0) entered disabled state [ 1434.736658][T32544] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 10:22:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1434.778878][T32549] bridge0: port 3(erspan0) entered blocking state [ 1434.785469][T32549] bridge0: port 3(erspan0) entered forwarding state [ 1434.793711][T32549] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1434.801837][T32549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1434.809207][T32549] 8021q: adding VLAN 0 to HW filter on device team0 [ 1434.819073][T32549] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1434.835388][T32550] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1434.863768][T32550] bridge0: port 3(erspan0) entered disabled state 10:22:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a00"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1435.111926][ T6277] ip6_vti0 speed is unknown, defaulting to 1000 [ 1435.133315][T32554] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1435.151386][T32554] infiniband syz2: set active [ 1435.160144][T32554] infiniband syz2: set active [ 1435.192892][T32554] bridge0: port 3(erspan0) entered blocking state [ 1435.199440][T32554] bridge0: port 3(erspan0) entered forwarding state [ 1435.208859][T32554] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1435.217015][T32554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1435.227656][T32554] 8021q: adding VLAN 0 to HW filter on device team0 [ 1435.245155][T32554] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1435.270503][T32555] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1435.418984][T32555] bridge0: port 3(erspan0) entered disabled state [ 1435.456689][T32555] infiniband syz2: set down 10:22:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1435.826808][T32557] bridge0: port 3(erspan0) entered blocking state [ 1435.833377][T32557] bridge0: port 3(erspan0) entered forwarding state [ 1435.847760][T32557] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1435.858393][T32557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1435.873104][T32557] 8021q: adding VLAN 0 to HW filter on device team0 [ 1435.889506][T32557] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1435.909136][T32562] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1435.997286][T32562] bridge0: port 3(erspan0) entered disabled state 10:22:26 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r4, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000240)) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r6, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) [ 1436.172232][T32563] __nla_validate_parse: 1 callbacks suppressed [ 1436.172250][T32563] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1436.197511][T32567] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1436.206433][T32567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1436.216216][T32567] 8021q: adding VLAN 0 to HW filter on device team0 [ 1436.232190][T32567] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1436.252467][T32568] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 10:22:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r5, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000240)) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r6, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r5, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1436.306209][T32569] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1436.353178][T32572] bridge0: port 3(erspan0) entered blocking state [ 1436.359709][T32572] bridge0: port 3(erspan0) entered forwarding state [ 1436.378040][T32572] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1436.387074][T32572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1436.394506][T32572] 8021q: adding VLAN 0 to HW filter on device team0 [ 1436.403456][T32572] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1436.424332][T32573] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1436.452396][T32573] bridge0: port 3(erspan0) entered disabled state 10:22:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r4, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000240)) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r6, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) [ 1436.488100][T32574] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1436.567144][T32579] bridge0: port 3(erspan0) entered blocking state [ 1436.573640][T32579] bridge0: port 3(erspan0) entered forwarding state [ 1436.582303][T32579] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1436.590684][T32579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1436.597920][T32579] 8021q: adding VLAN 0 to HW filter on device team0 [ 1436.606566][T32579] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1436.623128][T32580] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1436.649979][T32580] bridge0: port 3(erspan0) entered disabled state [ 1436.698032][T32581] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1436.707646][ T9799] ip6_vti0 speed is unknown, defaulting to 1000 [ 1436.728856][T32586] bridge0: port 3(erspan0) entered blocking state [ 1436.735472][T32586] bridge0: port 3(erspan0) entered forwarding state 10:22:27 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1436.743937][T32586] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1436.752196][T32586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1436.760154][T32586] 8021q: adding VLAN 0 to HW filter on device team0 [ 1436.768969][T32586] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1436.843324][T32587] bridge0: port 3(erspan0) entered disabled state 10:22:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x1, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1437.057259][T32588] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1437.076977][T32591] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1437.126559][T32591] infiniband syz2: set active [ 1437.133557][T32591] infiniband syz2: set active [ 1437.151053][T32591] bridge0: port 3(erspan0) entered blocking state [ 1437.157565][T32591] bridge0: port 3(erspan0) entered forwarding state [ 1437.167132][T32591] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1437.175281][T32591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1437.204473][T32591] 8021q: adding VLAN 0 to HW filter on device team0 [ 1437.324009][T32592] bridge0: port 3(erspan0) entered disabled state [ 1437.354345][T32592] infiniband syz2: set down 10:22:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1437.663903][T32594] bridge0: port 3(erspan0) entered blocking state [ 1437.670546][T32594] bridge0: port 3(erspan0) entered forwarding state [ 1437.711408][T32594] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1437.744095][T32594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1437.752664][T32594] 8021q: adding VLAN 0 to HW filter on device team0 [ 1437.863322][T32595] bridge0: port 3(erspan0) entered disabled state 10:22:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r4, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000240)) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r6, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) [ 1438.092444][T32596] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1438.116023][T32600] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1438.124107][T32600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1438.131631][T32600] 8021q: adding VLAN 0 to HW filter on device team0 10:22:28 executing program 3: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x10001, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x42c2, 0x42) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000001400)="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"/3584, 0xe00) sendfile(r1, r2, 0x0, 0x11f06) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000640)={{@my=0x1, 0x4}, @host, 0x0, 0x2000000, 0x0, 0x0, 0x1000000000005, 0x1}) [ 1438.327325][T32606] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1438.352209][T32605] bridge0: port 3(erspan0) entered blocking state [ 1438.358738][T32605] bridge0: port 3(erspan0) entered forwarding state [ 1438.366452][T32605] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1438.367511][ T26] audit: type=1800 audit(1679566948.598:449): pid=32634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1190 res=0 errno=0 [ 1438.374189][T32605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1438.403521][ T26] audit: type=1804 audit(1679566948.628:450): pid=32634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1820934782/syzkaller.ri68Zk/697/file0" dev="sda1" ino=1190 res=1 errno=0 [ 1438.403922][T32605] 8021q: adding VLAN 0 to HW filter on device team0 10:22:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r4, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000240)) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r6, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r4, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1438.488873][T32608] bridge0: port 3(erspan0) entered disabled state 10:22:28 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r4, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000240)) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r6, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r4, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1438.650991][T32609] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1438.660593][T31526] ip6_vti0 speed is unknown, defaulting to 1000 [ 1438.688646][T32614] bridge0: port 3(erspan0) entered blocking state [ 1438.695143][T32614] bridge0: port 3(erspan0) entered forwarding state [ 1438.705982][T32614] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1438.714483][T32614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1438.721973][T32614] 8021q: adding VLAN 0 to HW filter on device team0 [ 1438.731979][T32615] validate_nla: 5 callbacks suppressed [ 1438.731988][T32615] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1438.790416][T32615] bridge0: port 3(erspan0) entered disabled state 10:22:29 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1438.934625][T32616] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1438.957205][T32621] bridge0: port 3(erspan0) entered blocking state [ 1438.963776][T32621] bridge0: port 3(erspan0) entered forwarding state [ 1438.971986][T32621] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1438.980686][T32621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1438.992016][T32621] 8021q: adding VLAN 0 to HW filter on device team0 [ 1439.002290][T32622] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1439.055278][T32622] bridge0: port 3(erspan0) entered disabled state 10:22:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x1, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1439.322675][T32623] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1439.338140][T32626] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1439.387262][T32626] infiniband syz2: set active [ 1439.405247][T32626] infiniband syz2: set active [ 1439.447899][T32626] bridge0: port 3(erspan0) entered blocking state [ 1439.454457][T32626] bridge0: port 3(erspan0) entered forwarding state [ 1439.510222][T32626] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1439.545645][T32626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1439.579928][T32626] 8021q: adding VLAN 0 to HW filter on device team0 [ 1439.627313][T32626] net_ratelimit: 6 callbacks suppressed [ 1439.627340][T32626] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1439.723670][T32627] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1439.816773][T32627] bridge0: port 3(erspan0) entered disabled state [ 1439.852898][T32627] infiniband syz2: set down 10:22:30 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1440.132624][T32629] bridge0: port 3(erspan0) entered blocking state [ 1440.139147][T32629] bridge0: port 3(erspan0) entered forwarding state [ 1440.155887][T32629] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1440.177613][T32629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1440.195867][T32629] 8021q: adding VLAN 0 to HW filter on device team0 [ 1440.211895][T32629] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1440.244462][T32630] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1440.303708][T32630] bridge0: port 3(erspan0) entered disabled state 10:22:30 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1440.456994][T32637] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1440.465321][T32637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1440.472873][T32637] 8021q: adding VLAN 0 to HW filter on device team0 [ 1440.492006][T32637] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1440.507559][T32638] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 10:22:31 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1440.890682][ T5773] ip6_vti0 speed is unknown, defaulting to 1000 [ 1440.922469][T32641] bridge0: port 3(erspan0) entered blocking state [ 1440.928994][T32641] bridge0: port 3(erspan0) entered forwarding state [ 1440.938701][T32641] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1440.947927][T32641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1440.958145][T32641] 8021q: adding VLAN 0 to HW filter on device team0 [ 1440.969947][T32641] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1440.985785][T32643] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1441.096904][T32643] bridge0: port 3(erspan0) entered disabled state 10:22:31 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r4, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000240)) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r6, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r4, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1441.308247][T32644] __nla_validate_parse: 2 callbacks suppressed [ 1441.308264][T32644] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1441.355368][T32649] bridge0: port 3(erspan0) entered blocking state [ 1441.361956][T32649] bridge0: port 3(erspan0) entered forwarding state [ 1441.373965][T32649] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1441.382726][T32649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1441.390710][T32649] 8021q: adding VLAN 0 to HW filter on device team0 [ 1441.398706][T32649] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1441.414861][T32650] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1441.467299][T32650] bridge0: port 3(erspan0) entered disabled state 10:22:31 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1441.613069][T32651] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1441.635292][T32656] bridge0: port 3(erspan0) entered blocking state [ 1441.641830][T32656] bridge0: port 3(erspan0) entered forwarding state [ 1441.649995][T32656] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1441.658196][T32656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1441.668255][T32656] 8021q: adding VLAN 0 to HW filter on device team0 [ 1441.677154][T32656] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1441.693104][T32657] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1441.748578][T32657] bridge0: port 3(erspan0) entered disabled state 10:22:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x1, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1442.015943][T32658] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1442.031812][T32661] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1442.073531][T32661] infiniband syz2: set active [ 1442.078851][T32661] infiniband syz2: set active [ 1442.108628][T32661] bridge0: port 3(erspan0) entered blocking state [ 1442.115122][T32661] bridge0: port 3(erspan0) entered forwarding state [ 1442.156801][T32661] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1442.184782][T32661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1442.212987][T32661] 8021q: adding VLAN 0 to HW filter on device team0 [ 1442.245301][T32661] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1442.303750][T32662] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1442.383804][T32662] bridge0: port 3(erspan0) entered disabled state [ 1442.420530][T32662] infiniband syz2: set down 10:22:32 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1442.700385][T32666] bridge0: port 3(erspan0) entered blocking state [ 1442.706946][T32666] bridge0: port 3(erspan0) entered forwarding state [ 1442.743052][T32666] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1442.770110][T32666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1442.797444][T32666] 8021q: adding VLAN 0 to HW filter on device team0 [ 1442.828408][T32666] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1442.873916][T32667] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1442.978831][T32667] bridge0: port 3(erspan0) entered disabled state 10:22:33 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, 0x0, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1443.136126][T32668] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1443.149651][ T5172] ip6_vti0 speed is unknown, defaulting to 1000 [ 1443.155925][ T5175] ip6_vti0 speed is unknown, defaulting to 1000 [ 1443.187006][T32671] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1443.195576][T32671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1443.203529][T32671] 8021q: adding VLAN 0 to HW filter on device team0 [ 1443.214257][T32671] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 10:22:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000000800"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1443.551716][T32673] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1443.578223][T32676] bridge0: port 3(erspan0) entered blocking state [ 1443.584735][T32676] bridge0: port 3(erspan0) entered forwarding state [ 1443.592920][T32676] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1443.611071][T32676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1443.619342][T32676] 8021q: adding VLAN 0 to HW filter on device team0 [ 1443.636745][T32676] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1443.795065][T32677] bridge0: port 3(erspan0) entered disabled state 10:22:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r4, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000240)) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r6, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r4, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1444.159010][T32678] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1444.213469][T32683] bridge0: port 3(erspan0) entered blocking state [ 1444.219980][T32683] bridge0: port 3(erspan0) entered forwarding state [ 1444.255793][T32683] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1444.295469][T32683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1444.315185][T32683] 8021q: adding VLAN 0 to HW filter on device team0 [ 1444.325151][T32684] validate_nla: 2 callbacks suppressed [ 1444.325161][T32684] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1444.493508][T32684] bridge0: port 3(erspan0) entered disabled state 10:22:34 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1444.696786][T32685] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1444.723873][T32690] bridge0: port 3(erspan0) entered blocking state [ 1444.730439][T32690] bridge0: port 3(erspan0) entered forwarding state [ 1444.743069][T32690] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1444.752341][T32690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1444.760696][T32690] 8021q: adding VLAN 0 to HW filter on device team0 [ 1444.768745][T32690] net_ratelimit: 1 callbacks suppressed [ 1444.768750][T32690] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1444.790540][T32691] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1444.851695][T32691] bridge0: port 3(erspan0) entered disabled state 10:22:35 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1445.155165][T32692] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1445.174792][T32695] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1445.217049][T32695] infiniband syz2: set active [ 1445.231920][T32695] infiniband syz2: set active [ 1445.252541][T32695] bridge0: port 3(erspan0) entered blocking state [ 1445.259017][T32695] bridge0: port 3(erspan0) entered forwarding state [ 1445.302919][T32695] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1445.338164][T32695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1445.373909][T32695] 8021q: adding VLAN 0 to HW filter on device team0 [ 1445.394382][T32695] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1445.414140][T32696] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1445.494143][T32696] bridge0: port 3(erspan0) entered disabled state [ 1445.525460][T32696] infiniband syz2: set down 10:22:36 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1445.771055][ T5173] ip6_vti0 speed is unknown, defaulting to 1000 [ 1445.813193][T32700] bridge0: port 3(erspan0) entered blocking state [ 1445.819687][T32700] bridge0: port 3(erspan0) entered forwarding state [ 1445.860086][T32700] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1445.867794][T32700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1445.876754][T32700] 8021q: adding VLAN 0 to HW filter on device team0 [ 1445.894569][T32700] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 10:22:36 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1445.914920][T32701] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1445.925327][ T9799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1445.941206][T32707] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 1445.968095][T32708] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1446.006081][T32711] bridge0: port 3(erspan0) entered blocking state 10:22:36 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1446.012721][T32711] bridge0: port 3(erspan0) entered forwarding state [ 1446.027717][T32711] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1446.036284][T32711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1446.065534][T32711] 8021q: adding VLAN 0 to HW filter on device team0 [ 1446.075542][T32711] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1446.095748][T32713] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1446.282087][T32713] bridge0: port 3(erspan0) entered disabled state 10:22:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1446.845148][T32714] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1446.902691][T32719] bridge0: port 3(erspan0) entered blocking state [ 1446.909284][T32719] bridge0: port 3(erspan0) entered forwarding state [ 1446.940462][T32719] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1446.960692][T32719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1446.968303][T32719] 8021q: adding VLAN 0 to HW filter on device team0 [ 1446.981756][T32719] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1447.009662][T32720] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1447.103496][T32720] bridge0: port 3(erspan0) entered disabled state [ 1447.393162][T32721] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1447.432106][T32726] bridge0: port 3(erspan0) entered blocking state 10:22:37 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1447.438579][T32726] bridge0: port 3(erspan0) entered forwarding state [ 1447.479657][T32726] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1447.503863][T32726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1447.512282][T32726] 8021q: adding VLAN 0 to HW filter on device team0 [ 1447.539021][T32726] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1447.560101][T32727] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1447.714547][T32727] bridge0: port 3(erspan0) entered disabled state 10:22:38 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1448.126374][T32728] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1448.140129][ T5769] ip6_vti0 speed is unknown, defaulting to 1000 [ 1448.153278][T32731] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1448.187239][T32731] infiniband syz2: set active [ 1448.209955][T32731] infiniband syz2: set active [ 1448.230725][T32731] bridge0: port 3(erspan0) entered blocking state [ 1448.237204][T32731] bridge0: port 3(erspan0) entered forwarding state [ 1448.245263][T32731] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1448.268330][T32731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1448.298535][T32731] 8021q: adding VLAN 0 to HW filter on device team0 [ 1448.330523][T32731] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1448.370521][T32732] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1448.464189][T32732] bridge0: port 3(erspan0) entered disabled state [ 1448.494245][T32732] infiniband syz2: set down 10:22:38 executing program 4: dup(0xffffffffffffffff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(0xffffffffffffffff, 0x4) r2 = getpid() fsmount(r0, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r3, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1448.695522][T32738] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1448.714521][T32738] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1448.732839][T32740] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1448.825656][T32740] bridge0: port 3(erspan0) entered disabled state [ 1449.121107][T32741] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1449.128938][T32741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1449.150304][T32741] 8021q: adding VLAN 0 to HW filter on device team0 10:22:39 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1449.170352][T32741] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1449.189673][T32742] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1449.199010][T32743] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 1449.485437][T32745] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 10:22:39 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1449.527979][T32751] bridge0: port 3(erspan0) entered blocking state [ 1449.534583][T32751] bridge0: port 3(erspan0) entered forwarding state [ 1449.549066][T32751] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1449.566570][T32751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1449.577383][T32751] 8021q: adding VLAN 0 to HW filter on device team0 [ 1449.596115][T32751] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1449.618187][T32752] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1449.752943][T32752] bridge0: port 3(erspan0) entered disabled state [ 1450.198648][T32753] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 10:22:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1450.254846][T32758] bridge0: port 3(erspan0) entered blocking state [ 1450.261380][T32758] bridge0: port 3(erspan0) entered forwarding state [ 1450.302650][T32758] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1450.315881][T32758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1450.324215][T32758] 8021q: adding VLAN 0 to HW filter on device team0 [ 1450.341230][T32758] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1450.361990][T32759] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1450.539256][T32759] bridge0: port 3(erspan0) entered disabled state [ 1450.863560][T32760] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1450.873410][T31527] ip6_vti0 speed is unknown, defaulting to 1000 10:22:41 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a015"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1450.904426][T32765] bridge0: port 3(erspan0) entered blocking state [ 1450.910945][T32765] bridge0: port 3(erspan0) entered forwarding state [ 1450.934402][T32765] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1450.945735][T32765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1450.960953][T32765] 8021q: adding VLAN 0 to HW filter on device team0 [ 1450.972080][T32765] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1450.987766][T32766] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1451.136346][T32766] bridge0: port 3(erspan0) entered disabled state 10:22:41 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1451.506130][T32767] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1451.523040][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1451.546755][ T302] infiniband syz2: set active [ 1451.573774][ T302] infiniband syz2: set active [ 1451.593453][ T302] bridge0: port 3(erspan0) entered blocking state [ 1451.599925][ T302] bridge0: port 3(erspan0) entered forwarding state [ 1451.639870][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1451.659968][ T302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1451.675834][ T302] 8021q: adding VLAN 0 to HW filter on device team0 [ 1451.709633][ T302] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1451.729537][ T303] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1451.808954][ T303] bridge0: port 3(erspan0) entered disabled state [ 1451.840311][ T303] infiniband syz2: set down 10:22:42 executing program 4: dup(0xffffffffffffffff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(0xffffffffffffffff, 0x4) r2 = getpid() fsmount(r0, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r3, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1452.095330][ T307] bridge0: port 3(erspan0) entered blocking state [ 1452.101810][ T307] bridge0: port 3(erspan0) entered forwarding state [ 1452.136608][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1452.159943][ T307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1452.167058][ T307] 8021q: adding VLAN 0 to HW filter on device team0 [ 1452.205825][ T307] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1452.249779][ T308] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1452.332325][ T308] bridge0: port 3(erspan0) entered disabled state 10:22:42 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1452.546679][ T309] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1452.572054][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1452.594739][ T314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1452.603387][ T314] 8021q: adding VLAN 0 to HW filter on device team0 [ 1452.612680][ T314] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1452.628505][ T315] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 10:22:43 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1452.943155][ T316] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1452.981839][ T321] bridge0: port 3(erspan0) entered blocking state [ 1452.988434][ T321] bridge0: port 3(erspan0) entered forwarding state [ 1452.996255][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1453.004221][ T321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1453.031901][ T321] 8021q: adding VLAN 0 to HW filter on device team0 [ 1453.045006][ T321] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1453.064909][ T322] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1453.167220][ T322] bridge0: port 3(erspan0) entered disabled state 10:22:43 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1453.459067][ T323] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1453.479602][T31747] ip6_vti0 speed is unknown, defaulting to 1000 [ 1453.485911][T18790] ip6_vti0 speed is unknown, defaulting to 1000 [ 1453.534843][ T328] bridge0: port 3(erspan0) entered blocking state [ 1453.541481][ T328] bridge0: port 3(erspan0) entered forwarding state [ 1453.581140][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1453.607257][ T328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1453.636088][ T328] 8021q: adding VLAN 0 to HW filter on device team0 [ 1453.682278][ T328] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1453.734588][ T329] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1453.875078][ T329] bridge0: port 3(erspan0) entered disabled state 10:22:44 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a015"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1454.175740][ T330] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1454.231159][ T335] bridge0: port 3(erspan0) entered blocking state [ 1454.237632][ T335] bridge0: port 3(erspan0) entered forwarding state [ 1454.278872][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1454.304524][ T335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1454.338546][ T335] 8021q: adding VLAN 0 to HW filter on device team0 [ 1454.377461][ T335] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1454.445695][ T336] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1454.591399][ T336] bridge0: port 3(erspan0) entered disabled state 10:22:45 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1454.880886][ T337] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1454.895977][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1454.943045][ T340] infiniband syz2: set active [ 1454.948002][ T340] infiniband syz2: set active [ 1454.962946][ T340] bridge0: port 3(erspan0) entered blocking state [ 1454.969491][ T340] bridge0: port 3(erspan0) entered forwarding state [ 1454.977417][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1455.001288][ T340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1455.008872][ T340] 8021q: adding VLAN 0 to HW filter on device team0 [ 1455.044863][ T340] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1455.075661][ T341] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1455.184968][ T341] bridge0: port 3(erspan0) entered disabled state [ 1455.213180][ T341] infiniband syz2: set down 10:22:45 executing program 4: dup(0xffffffffffffffff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(0xffffffffffffffff, 0x4) r2 = getpid() fsmount(r0, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r3, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1455.468846][ T345] bridge0: port 3(erspan0) entered blocking state [ 1455.475364][ T345] bridge0: port 3(erspan0) entered forwarding state [ 1455.502138][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1455.511148][ T345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1455.518684][ T345] 8021q: adding VLAN 0 to HW filter on device team0 [ 1455.532038][ T345] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1455.548105][ T346] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1455.651132][ T346] bridge0: port 3(erspan0) entered disabled state 10:22:46 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a015"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1455.870853][ T347] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1455.915273][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1455.924067][ T352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1455.932597][ T352] 8021q: adding VLAN 0 to HW filter on device team0 [ 1455.941503][ T352] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1455.957012][ T353] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 10:22:46 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1456.286482][ T354] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1456.296101][T31749] ip6_vti0 speed is unknown, defaulting to 1000 [ 1456.334833][ T360] bridge0: port 3(erspan0) entered blocking state [ 1456.341407][ T360] bridge0: port 3(erspan0) entered forwarding state [ 1456.376148][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1456.390404][ T360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1456.398090][ T360] 8021q: adding VLAN 0 to HW filter on device team0 [ 1456.408736][ T360] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1456.459298][ T361] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1456.657443][ T361] bridge0: port 3(erspan0) entered disabled state [ 1457.066982][ T362] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1457.105739][ T367] bridge0: port 3(erspan0) entered blocking state 10:22:47 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a015"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1457.112252][ T367] bridge0: port 3(erspan0) entered forwarding state [ 1457.120875][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1457.128906][ T367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1457.168577][ T367] 8021q: adding VLAN 0 to HW filter on device team0 [ 1457.178301][ T367] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1457.198323][ T368] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1457.295356][ T368] bridge0: port 3(erspan0) entered disabled state [ 1457.568710][ T369] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 10:22:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a015"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1457.611343][ T374] bridge0: port 3(erspan0) entered blocking state [ 1457.617898][ T374] bridge0: port 3(erspan0) entered forwarding state [ 1457.626280][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1457.634865][ T374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1457.645974][ T374] 8021q: adding VLAN 0 to HW filter on device team0 [ 1457.659706][ T374] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1457.676272][ T375] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1457.848133][ T375] bridge0: port 3(erspan0) entered disabled state [ 1458.256123][ T376] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1458.285991][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 10:22:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1458.317820][ T379] infiniband syz2: set active [ 1458.335272][ T379] infiniband syz2: set active [ 1458.360897][ T379] bridge0: port 3(erspan0) entered blocking state [ 1458.367409][ T379] bridge0: port 3(erspan0) entered forwarding state [ 1458.376167][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1458.385512][ T379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1458.393362][ T379] 8021q: adding VLAN 0 to HW filter on device team0 [ 1458.402759][ T379] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1458.446134][ T380] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1458.546205][ T380] bridge0: port 3(erspan0) entered disabled state [ 1458.583423][ T380] infiniband syz2: set down 10:22:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1458.842712][ T384] bridge0: port 3(erspan0) entered blocking state [ 1458.849222][ T384] bridge0: port 3(erspan0) entered forwarding state [ 1458.883890][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1458.908886][ T384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1458.930539][ T384] 8021q: adding VLAN 0 to HW filter on device team0 [ 1458.956353][ T384] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1459.001797][ T385] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1459.085998][ T385] bridge0: port 3(erspan0) entered disabled state 10:22:49 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1459.313903][ T386] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1459.333641][T22783] ip6_vti0 speed is unknown, defaulting to 1000 [ 1459.378354][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1459.386632][ T391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1459.394750][ T391] 8021q: adding VLAN 0 to HW filter on device team0 [ 1459.403702][ T391] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1459.419520][ T392] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 10:22:50 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1459.852896][ T393] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1459.890634][ T398] bridge0: port 3(erspan0) entered blocking state [ 1459.897157][ T398] bridge0: port 3(erspan0) entered forwarding state [ 1459.934045][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1459.956937][ T398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1459.996526][ T398] 8021q: adding VLAN 0 to HW filter on device team0 [ 1460.028453][ T398] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1460.081850][ T399] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1460.185305][ T399] bridge0: port 3(erspan0) entered disabled state 10:22:50 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @hyper, 0x0, 0x2000000, 0x0, 0x7fd8155fffff, 0x1000000000005}) [ 1460.569060][ T400] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 10:22:50 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1460.632355][ T405] bridge0: port 3(erspan0) entered blocking state [ 1460.638933][ T405] bridge0: port 3(erspan0) entered forwarding state [ 1460.647439][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1460.668847][ T405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1460.677500][ T405] 8021q: adding VLAN 0 to HW filter on device team0 [ 1460.702968][ T405] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1460.718692][ T406] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1460.820149][ T406] bridge0: port 3(erspan0) entered disabled state [ 1461.193562][ T407] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1461.218186][ T412] bridge0: port 3(erspan0) entered blocking state [ 1461.224732][ T412] bridge0: port 3(erspan0) entered forwarding state [ 1461.234224][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 10:22:51 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e40"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1461.242792][ T412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1461.250217][ T412] 8021q: adding VLAN 0 to HW filter on device team0 [ 1461.259162][ T412] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1461.284047][ T413] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1461.346552][ T413] bridge0: port 3(erspan0) entered disabled state [ 1461.677078][ T414] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1461.696598][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 10:22:51 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1461.723110][ T417] infiniband syz2: set active [ 1461.727931][ T417] infiniband syz2: set active [ 1461.748288][ T417] bridge0: port 3(erspan0) entered blocking state [ 1461.754851][ T417] bridge0: port 3(erspan0) entered forwarding state [ 1461.773391][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1461.787266][ T417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1461.796638][ T417] 8021q: adding VLAN 0 to HW filter on device team0 [ 1461.808649][ T417] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1461.824752][ T418] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1461.898768][ T418] bridge0: port 3(erspan0) entered disabled state [ 1461.928863][ T418] infiniband syz2: set down 10:22:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1462.159095][T22302] ip6_vti0 speed is unknown, defaulting to 1000 [ 1462.179066][ T422] bridge0: port 3(erspan0) entered blocking state [ 1462.185586][ T422] bridge0: port 3(erspan0) entered forwarding state [ 1462.239058][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1462.262513][ T422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1462.283722][ T422] 8021q: adding VLAN 0 to HW filter on device team0 [ 1462.300962][ T422] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1462.316774][ T423] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1462.423874][ T423] bridge0: port 3(erspan0) entered disabled state 10:22:52 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1462.713068][ T424] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1462.742808][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1462.752244][ T429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1462.760211][ T429] 8021q: adding VLAN 0 to HW filter on device team0 [ 1462.777876][ T429] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1462.794595][ T430] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 1463.134238][ T431] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 10:22:53 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a015"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1463.187157][ T438] bridge0: port 3(erspan0) entered blocking state [ 1463.193741][ T438] bridge0: port 3(erspan0) entered forwarding state [ 1463.224116][ T438] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1463.232306][ T438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1463.245806][ T438] 8021q: adding VLAN 0 to HW filter on device team0 [ 1463.258698][ T438] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1463.278989][ T439] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1463.434906][ T439] bridge0: port 3(erspan0) entered disabled state 10:22:54 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1463.816941][ T440] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1463.871990][ T445] bridge0: port 3(erspan0) entered blocking state [ 1463.878480][ T445] bridge0: port 3(erspan0) entered forwarding state [ 1463.913060][ T445] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1463.943558][ T445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1463.976990][ T445] 8021q: adding VLAN 0 to HW filter on device team0 [ 1464.017255][ T445] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1464.073431][ T446] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1464.226749][ T446] bridge0: port 3(erspan0) entered disabled state [ 1464.586087][ T447] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 10:22:54 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e40"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1464.644062][ T452] bridge0: port 3(erspan0) entered blocking state [ 1464.650651][ T452] bridge0: port 3(erspan0) entered forwarding state [ 1464.664436][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1464.673153][ T452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1464.689188][ T452] 8021q: adding VLAN 0 to HW filter on device team0 [ 1464.699307][ T452] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1464.719553][ T453] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1464.772821][ T453] bridge0: port 3(erspan0) entered disabled state 10:22:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1465.057760][ T454] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1465.077146][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1465.118237][ T457] infiniband syz2: set active [ 1465.132463][ T457] infiniband syz2: set active [ 1465.150219][ T457] bridge0: port 3(erspan0) entered blocking state [ 1465.156714][ T457] bridge0: port 3(erspan0) entered forwarding state [ 1465.200229][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1465.214950][ T457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1465.246101][ T457] 8021q: adding VLAN 0 to HW filter on device team0 [ 1465.275391][ T457] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1465.296034][ T6490] ip6_vti0 speed is unknown, defaulting to 1000 [ 1465.302778][ T458] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1465.419630][ T458] bridge0: port 3(erspan0) entered disabled state [ 1465.463277][ T458] infiniband syz2: set down 10:22:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1465.829325][ T462] bridge0: port 3(erspan0) entered blocking state [ 1465.835871][ T462] bridge0: port 3(erspan0) entered forwarding state [ 1465.852329][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1465.866948][ T462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1465.875303][ T462] 8021q: adding VLAN 0 to HW filter on device team0 [ 1465.884972][ T462] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1465.900816][ T463] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1465.986491][ T463] bridge0: port 3(erspan0) entered disabled state 10:22:56 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1466.125440][ T464] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1466.154401][ T469] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1466.175695][ T469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1466.184390][ T469] 8021q: adding VLAN 0 to HW filter on device team0 [ 1466.193195][ T469] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1466.208859][ T470] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 1466.536237][ T471] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 10:22:56 executing program 3: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @hyper, 0x0, 0x2000000, 0x0, 0xff600000, 0x1000000000005}) [ 1466.587011][ T476] bridge0: port 3(erspan0) entered blocking state [ 1466.593594][ T476] bridge0: port 3(erspan0) entered forwarding state [ 1466.608080][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1466.616952][ T476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1466.624724][ T476] 8021q: adding VLAN 0 to HW filter on device team0 10:22:56 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1466.646188][ T476] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1466.667155][ T477] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1466.763485][ T477] bridge0: port 3(erspan0) entered disabled state [ 1467.065199][ T478] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 10:22:57 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1467.138767][ T483] bridge0: port 3(erspan0) entered blocking state [ 1467.145327][ T483] bridge0: port 3(erspan0) entered forwarding state [ 1467.169067][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1467.182400][ T483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1467.196565][ T483] 8021q: adding VLAN 0 to HW filter on device team0 [ 1467.234083][ T483] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1467.254022][ T484] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1467.385347][ T484] bridge0: port 3(erspan0) entered disabled state 10:22:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e40"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1467.817983][ T485] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1467.858141][ T490] bridge0: port 3(erspan0) entered blocking state [ 1467.864730][ T490] bridge0: port 3(erspan0) entered forwarding state [ 1467.904435][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1467.914380][ T490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1467.927259][ T490] 8021q: adding VLAN 0 to HW filter on device team0 [ 1467.938879][ T490] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1467.975419][ T491] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1468.131702][ T491] bridge0: port 3(erspan0) entered disabled state 10:22:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1468.384230][ T9801] ip6_vti0 speed is unknown, defaulting to 1000 [ 1468.389618][ T492] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1468.406247][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1468.450940][ T495] infiniband syz2: set active [ 1468.456998][ T495] infiniband syz2: set active [ 1468.473178][ T495] bridge0: port 3(erspan0) entered blocking state [ 1468.479727][ T495] bridge0: port 3(erspan0) entered forwarding state [ 1468.488837][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1468.526527][ T495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1468.556203][ T495] 8021q: adding VLAN 0 to HW filter on device team0 [ 1468.587089][ T495] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1468.605276][ T496] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1468.776433][ T496] bridge0: port 3(erspan0) entered disabled state [ 1468.805505][ T496] infiniband syz2: set down 10:22:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(0xffffffffffffffff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1469.073948][ T500] bridge0: port 3(erspan0) entered blocking state [ 1469.080472][ T500] bridge0: port 3(erspan0) entered forwarding state [ 1469.095370][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1469.103757][ T500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1469.116955][ T500] 8021q: adding VLAN 0 to HW filter on device team0 [ 1469.128824][ T500] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1469.150188][ T501] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1469.266000][ T501] bridge0: port 3(erspan0) entered disabled state 10:22:59 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1469.417407][ T502] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1469.449351][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1469.463707][ T509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1469.477290][ T509] 8021q: adding VLAN 0 to HW filter on device team0 [ 1469.487062][ T509] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1469.503112][ T510] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 10:23:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x531d}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x7ff, 0x111080) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0xff, @private2, 0xf62d}, 0x1c) r2 = syz_open_dev$mouse(&(0x7f0000000140), 0xba, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000002000200030bd70df250220207f080000530100001e08000b0001004000000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000840) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49468ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", "685a228f", "be0ea450d5a5fd03"}, 0x38) recvfrom$inet6(r0, &(0x7f00000002c0)=""/228, 0xe4, 0x7, 0x0, 0x0) shutdown(r0, 0x0) [ 1469.828113][ T511] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1469.872778][ T516] bridge0: port 3(erspan0) entered blocking state [ 1469.879289][ T516] bridge0: port 3(erspan0) entered forwarding state 10:23:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x531d}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x7ff, 0x111080) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0xff, @private2, 0xf62d}, 0x1c) r2 = syz_open_dev$mouse(&(0x7f0000000140), 0xba, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000002000200030bd70df250220207f080000530100001e08000b0001004000000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000840) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49468ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", "685a228f", "be0ea450d5a5fd03"}, 0x38) recvfrom$inet6(r0, &(0x7f00000002c0)=""/228, 0xe4, 0x7, 0x0, 0x0) shutdown(r0, 0x0) [ 1469.914450][ T516] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1469.923089][ T516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1469.932166][ T516] 8021q: adding VLAN 0 to HW filter on device team0 [ 1469.951734][ T516] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1469.973100][ T517] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 10:23:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x531d}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x7ff, 0x111080) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0xff, @private2, 0xf62d}, 0x1c) r2 = syz_open_dev$mouse(&(0x7f0000000140), 0xba, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000002000200030bd70df250220207f080000530100001e08000b0001004000000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000840) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49468ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", "685a228f", "be0ea450d5a5fd03"}, 0x38) recvfrom$inet6(r0, &(0x7f00000002c0)=""/228, 0xe4, 0x7, 0x0, 0x0) shutdown(r0, 0x0) 10:23:00 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1470.066446][ T517] bridge0: port 3(erspan0) entered disabled state [ 1470.427885][ T518] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 10:23:00 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1470.473908][ T523] bridge0: port 3(erspan0) entered blocking state [ 1470.480469][ T523] bridge0: port 3(erspan0) entered forwarding state [ 1470.541942][ T523] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1470.559128][ T523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1470.567887][ T523] 8021q: adding VLAN 0 to HW filter on device team0 [ 1470.580003][ T523] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1470.596772][ T524] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1470.775769][ T524] bridge0: port 3(erspan0) entered disabled state 10:23:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x0) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1471.226910][ T525] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1471.241432][ T5774] ip6_vti0 speed is unknown, defaulting to 1000 [ 1471.273679][ T530] bridge0: port 3(erspan0) entered blocking state [ 1471.280226][ T530] bridge0: port 3(erspan0) entered forwarding state [ 1471.287863][ T530] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1471.298124][ T530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1471.307822][ T530] 8021q: adding VLAN 0 to HW filter on device team0 [ 1471.319785][ T530] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1471.335601][ T531] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1471.452627][ T531] bridge0: port 3(erspan0) entered disabled state 10:23:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1471.727819][ T532] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1471.747540][ T535] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1471.786747][ T535] infiniband syz2: set active [ 1471.803776][ T535] infiniband syz2: set active [ 1471.825597][ T535] bridge0: port 3(erspan0) entered blocking state [ 1471.832125][ T535] bridge0: port 3(erspan0) entered forwarding state [ 1471.844196][ T535] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1471.871824][ T535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1471.880797][ T535] 8021q: adding VLAN 0 to HW filter on device team0 [ 1471.914831][ T535] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1471.958812][ T536] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1472.085497][ T536] bridge0: port 3(erspan0) entered disabled state [ 1472.132893][ T536] infiniband syz2: set down 10:23:02 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(0xffffffffffffffff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) 10:23:02 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1472.454293][ T540] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1472.479296][ T541] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1472.488039][ T542] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1472.525593][ T556] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1472.536850][ T556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1472.545178][ T556] 8021q: adding VLAN 0 to HW filter on device team0 [ 1472.568743][ T556] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1472.591300][ T557] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 1472.942278][ T558] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1472.981466][ T563] bridge0: port 3(erspan0) entered blocking state 10:23:03 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1472.987949][ T563] bridge0: port 3(erspan0) entered forwarding state [ 1473.003413][ T563] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1473.011595][ T563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1473.032732][ T563] 8021q: adding VLAN 0 to HW filter on device team0 [ 1473.054279][ T563] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1473.074583][ T564] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1473.202632][ T564] bridge0: port 3(erspan0) entered disabled state 10:23:03 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1473.673449][ T565] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1473.689215][T23001] ip6_vti0 speed is unknown, defaulting to 1000 [ 1473.733196][ T570] bridge0: port 3(erspan0) entered blocking state [ 1473.740089][ T570] bridge0: port 3(erspan0) entered forwarding state [ 1473.776877][ T570] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1473.786019][ T570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1473.795125][ T570] 8021q: adding VLAN 0 to HW filter on device team0 [ 1473.805592][ T570] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1473.859280][ T571] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1474.035740][ T571] bridge0: port 3(erspan0) entered disabled state 10:23:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x0) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1474.318845][ T572] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1474.358478][ T577] bridge0: port 3(erspan0) entered blocking state [ 1474.365050][ T577] bridge0: port 3(erspan0) entered forwarding state [ 1474.399857][ T577] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1474.408018][ T577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1474.417016][ T577] 8021q: adding VLAN 0 to HW filter on device team0 [ 1474.432415][ T577] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1474.477116][ T578] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1474.660586][ T578] bridge0: port 3(erspan0) entered disabled state [ 1474.993912][ T579] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1475.014802][ T582] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 10:23:05 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1475.046448][ T582] infiniband syz2: set active [ 1475.051755][ T582] infiniband syz2: set active [ 1475.063685][ T582] bridge0: port 3(erspan0) entered blocking state [ 1475.070289][ T582] bridge0: port 3(erspan0) entered forwarding state [ 1475.088689][ T582] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1475.106976][ T582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1475.116714][ T582] 8021q: adding VLAN 0 to HW filter on device team0 [ 1475.131424][ T582] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1475.149481][ T585] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1475.261341][ T585] bridge0: port 3(erspan0) entered disabled state [ 1475.286395][ T585] infiniband syz2: set down 10:23:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(0xffffffffffffffff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1475.483397][ T587] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1475.497056][ T588] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1475.521761][ T589] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 10:23:05 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1475.576802][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1475.586210][ T594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1475.598992][ T594] 8021q: adding VLAN 0 to HW filter on device team0 [ 1475.614401][ T594] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1475.655250][ T595] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 1476.058165][ T596] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1476.073986][ T6279] ip6_vti0 speed is unknown, defaulting to 1000 [ 1476.096424][ T601] bridge0: port 3(erspan0) entered blocking state 10:23:06 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1476.102970][ T601] bridge0: port 3(erspan0) entered forwarding state [ 1476.151665][ T601] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1476.159329][ T601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1476.192342][ T601] 8021q: adding VLAN 0 to HW filter on device team0 [ 1476.247704][ T601] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1476.318941][ T602] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1476.544835][ T602] bridge0: port 3(erspan0) entered disabled state [ 1476.941858][ T603] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 10:23:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1477.008837][ T608] bridge0: port 3(erspan0) entered blocking state [ 1477.015392][ T608] bridge0: port 3(erspan0) entered forwarding state [ 1477.043800][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1477.065366][ T608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1477.072955][ T608] 8021q: adding VLAN 0 to HW filter on device team0 [ 1477.082255][ T608] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1477.097873][ T609] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1477.148806][ T609] bridge0: port 3(erspan0) entered disabled state 10:23:07 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x0) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1477.467468][ T610] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1477.507848][ T615] bridge0: port 3(erspan0) entered blocking state [ 1477.514399][ T615] bridge0: port 3(erspan0) entered forwarding state [ 1477.548378][ T615] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1477.564453][ T615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1477.573639][ T615] 8021q: adding VLAN 0 to HW filter on device team0 [ 1477.613007][ T615] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1477.682966][ T616] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1477.857324][ T616] bridge0: port 3(erspan0) entered disabled state 10:23:08 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1478.244576][ T617] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1478.266592][ T620] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1478.298973][ T620] infiniband syz2: set active [ 1478.318057][ T620] infiniband syz2: set active [ 1478.339722][ T620] bridge0: port 3(erspan0) entered blocking state [ 1478.346282][ T620] bridge0: port 3(erspan0) entered forwarding state [ 1478.354556][ T620] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1478.363097][ T620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1478.371010][ T620] 8021q: adding VLAN 0 to HW filter on device team0 [ 1478.379206][ T620] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1478.395120][ T621] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1478.474980][ T621] bridge0: port 3(erspan0) entered disabled state [ 1478.500092][ T621] infiniband syz2: set down 10:23:09 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) 10:23:09 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1478.778340][ T625] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1478.795854][ T627] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1478.808984][ T628] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1478.818954][T15250] ip6_vti0 speed is unknown, defaulting to 1000 [ 1478.857571][ T633] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1478.881117][ T633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1478.895769][ T633] 8021q: adding VLAN 0 to HW filter on device team0 [ 1478.907512][ T633] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1478.927650][ T634] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 10:23:09 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1479.469493][ T635] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1479.492372][ T640] bridge0: port 3(erspan0) entered blocking state [ 1479.498866][ T640] bridge0: port 3(erspan0) entered forwarding state [ 1479.507747][ T640] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1479.516465][ T640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1479.525364][ T640] 8021q: adding VLAN 0 to HW filter on device team0 [ 1479.539255][ T640] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1479.555074][ T641] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1479.607102][ T641] bridge0: port 3(erspan0) entered disabled state 10:23:10 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1479.932724][ T642] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1479.956613][ T647] bridge0: port 3(erspan0) entered blocking state [ 1479.963150][ T647] bridge0: port 3(erspan0) entered forwarding state [ 1479.974055][ T647] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1480.005632][ T647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1480.013970][ T647] 8021q: adding VLAN 0 to HW filter on device team0 [ 1480.035834][ T647] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1480.056825][ T648] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1480.180038][ T648] bridge0: port 3(erspan0) entered disabled state 10:23:10 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1480.477451][ T649] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1480.531293][ T654] bridge0: port 3(erspan0) entered blocking state [ 1480.537792][ T654] bridge0: port 3(erspan0) entered forwarding state [ 1480.588638][ T654] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1480.622222][ T654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1480.631864][ T654] 8021q: adding VLAN 0 to HW filter on device team0 [ 1480.665066][ T654] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1480.724329][ T656] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1480.943971][ T656] bridge0: port 3(erspan0) entered disabled state 10:23:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1481.263127][ T657] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1481.278287][ T660] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1481.315528][ T660] infiniband syz2: set active [ 1481.320993][ T660] infiniband syz2: set active [ 1481.332268][ T660] bridge0: port 3(erspan0) entered blocking state [ 1481.338748][ T660] bridge0: port 3(erspan0) entered forwarding state [ 1481.346670][ T660] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1481.355039][ T660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1481.362639][ T660] 8021q: adding VLAN 0 to HW filter on device team0 [ 1481.382322][ T660] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1481.398141][ T5176] ip6_vti0 speed is unknown, defaulting to 1000 [ 1481.404757][ T662] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1481.493037][ T662] bridge0: port 3(erspan0) entered disabled state [ 1481.527473][ T662] infiniband syz2: set down 10:23:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1481.843665][ T665] bridge0: port 3(erspan0) entered blocking state [ 1481.850260][ T665] bridge0: port 3(erspan0) entered forwarding state [ 1481.859981][ T665] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1481.868214][ T665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1481.876492][ T665] 8021q: adding VLAN 0 to HW filter on device team0 [ 1481.888305][ T665] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1481.904188][ T666] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1481.985297][ T666] bridge0: port 3(erspan0) entered disabled state 10:23:12 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1482.130532][ T667] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1482.183474][ T672] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1482.192254][ T672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1482.200303][ T672] 8021q: adding VLAN 0 to HW filter on device team0 [ 1482.208464][ T672] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1482.224794][ T673] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 1482.519499][ T674] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1482.551017][ T679] bridge0: port 3(erspan0) entered blocking state [ 1482.557626][ T679] bridge0: port 3(erspan0) entered forwarding state 10:23:12 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1482.565957][ T679] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1482.574507][ T679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1482.593941][ T679] 8021q: adding VLAN 0 to HW filter on device team0 [ 1482.635903][ T679] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1482.704418][ T680] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1482.867327][ T680] bridge0: port 3(erspan0) entered disabled state [ 1483.346551][ T681] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 10:23:13 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1483.416712][ T686] bridge0: port 3(erspan0) entered blocking state [ 1483.423397][ T686] bridge0: port 3(erspan0) entered forwarding state [ 1483.496206][ T686] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1483.530726][ T1205] ieee802154 phy0 wpan0: encryption failed: -22 [ 1483.537037][ T1205] ieee802154 phy1 wpan1: encryption failed: -22 [ 1483.551801][ T686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1483.559298][ T686] 8021q: adding VLAN 0 to HW filter on device team0 [ 1483.618625][ T686] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1483.689470][ T687] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1483.989800][ T687] bridge0: port 3(erspan0) entered disabled state 10:23:14 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1484.294630][ T688] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1484.304414][T31901] ip6_vti0 speed is unknown, defaulting to 1000 [ 1484.333134][ T694] bridge0: port 3(erspan0) entered blocking state [ 1484.339655][ T694] bridge0: port 3(erspan0) entered forwarding state [ 1484.347451][ T694] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1484.356035][ T694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1484.363896][ T694] 8021q: adding VLAN 0 to HW filter on device team0 [ 1484.373158][ T694] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1484.388955][ T695] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1484.485610][ T695] bridge0: port 3(erspan0) entered disabled state 10:23:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1484.808241][ T697] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1484.828054][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1484.868321][ T701] infiniband syz2: set active [ 1484.883357][ T701] infiniband syz2: set active [ 1484.905570][ T701] bridge0: port 3(erspan0) entered blocking state [ 1484.912061][ T701] bridge0: port 3(erspan0) entered forwarding state [ 1484.925092][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1484.967417][ T701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1484.992165][ T701] 8021q: adding VLAN 0 to HW filter on device team0 [ 1485.005700][ T701] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1485.021510][ T702] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1485.093058][ T702] bridge0: port 3(erspan0) entered disabled state [ 1485.140346][ T702] infiniband syz2: set down 10:23:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1485.447249][ T709] bridge0: port 3(erspan0) entered blocking state [ 1485.453859][ T709] bridge0: port 3(erspan0) entered forwarding state [ 1485.464733][ T709] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1485.472899][ T709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1485.482460][ T709] 8021q: adding VLAN 0 to HW filter on device team0 [ 1485.492865][ T709] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1485.509253][ T710] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1485.541897][ T710] bridge0: port 3(erspan0) entered disabled state 10:23:15 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1485.695240][ T711] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1485.728516][ T716] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1485.736969][ T716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1485.744908][ T716] 8021q: adding VLAN 0 to HW filter on device team0 [ 1485.756842][ T716] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1485.777741][ T717] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 10:23:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1486.200894][ T718] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1486.233423][ T723] bridge0: port 3(erspan0) entered blocking state [ 1486.239965][ T723] bridge0: port 3(erspan0) entered forwarding state [ 1486.248318][ T723] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1486.257216][ T723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1486.275295][ T723] 8021q: adding VLAN 0 to HW filter on device team0 [ 1486.287286][ T723] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1486.303617][ T725] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1486.452453][ T725] bridge0: port 3(erspan0) entered disabled state 10:23:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1486.672271][T31750] ip6_vti0 speed is unknown, defaulting to 1000 [ 1486.717908][ T729] bridge0: port 3(erspan0) entered blocking state [ 1486.724469][ T729] bridge0: port 3(erspan0) entered forwarding state [ 1486.737776][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1486.748854][ T729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1486.757579][ T729] 8021q: adding VLAN 0 to HW filter on device team0 [ 1486.770903][ T729] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1486.787005][ T730] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1486.987509][ T730] bridge0: port 3(erspan0) entered disabled state [ 1487.398709][ T731] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1487.408279][ T736] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1487.422460][ T737] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:23:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1487.446161][ T740] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 10:23:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1487.486176][ T740] infiniband syz2: set active [ 1487.496885][ T740] infiniband syz2: set active [ 1487.527855][ T740] bridge0: port 3(erspan0) entered blocking state [ 1487.534389][ T740] bridge0: port 3(erspan0) entered forwarding state [ 1487.548868][ T740] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1487.557839][ T740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1487.565770][ T740] 8021q: adding VLAN 0 to HW filter on device team0 [ 1487.574325][ T740] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1487.590128][ T741] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1487.726503][ T741] bridge0: port 3(erspan0) entered disabled state [ 1487.771839][ T741] infiniband syz2: set down 10:23:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1488.211767][ T754] bridge0: port 3(erspan0) entered blocking state [ 1488.218308][ T754] bridge0: port 3(erspan0) entered forwarding state [ 1488.266623][ T754] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1488.305387][ T754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1488.346858][ T754] 8021q: adding VLAN 0 to HW filter on device team0 [ 1488.371856][ T754] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1488.392620][ T755] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1488.492747][ T755] bridge0: port 3(erspan0) entered disabled state 10:23:18 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(0xffffffffffffffff, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, 0x0) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340), 0xffffffffffff7fff) [ 1488.652642][ T756] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1488.662830][ T761] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 1488.671384][ T762] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1488.681157][T31751] ip6_vti0 speed is unknown, defaulting to 1000 [ 1488.687588][ T770] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 10:23:18 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{0x0}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) 10:23:18 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1488.706823][ T771] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1488.718485][ T779] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1488.777848][ T780] bridge0: port 3(erspan0) entered blocking state [ 1488.784447][ T780] bridge0: port 3(erspan0) entered forwarding state [ 1488.813189][ T780] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1488.823116][ T780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1488.832332][ T780] 8021q: adding VLAN 0 to HW filter on device team0 [ 1488.850323][ T780] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1488.920369][ T782] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1489.420148][ T782] bridge0: port 3(erspan0) entered disabled state 10:23:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1489.804853][ T781] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1489.822892][ T784] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1489.842993][ T787] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 10:23:20 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x0, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1489.897639][ T787] infiniband syz2: set active [ 1489.922176][ T787] infiniband syz2: set active [ 1489.963767][ T787] bridge0: port 3(erspan0) entered blocking state [ 1489.970318][ T787] bridge0: port 3(erspan0) entered forwarding state [ 1489.993615][ T787] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1490.030205][ T787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1490.042340][ T787] 8021q: adding VLAN 0 to HW filter on device team0 [ 1490.052218][ T787] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1490.190251][ T788] bridge0: port 3(erspan0) entered disabled state [ 1490.242576][ T788] infiniband syz2: set down 10:23:20 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1490.601814][T31900] ip6_vti0 speed is unknown, defaulting to 1000 [ 1490.608260][T22779] ip6_vti0 speed is unknown, defaulting to 1000 [ 1490.628312][ T797] bridge0: port 3(erspan0) entered blocking state [ 1490.634828][ T797] bridge0: port 3(erspan0) entered forwarding state [ 1490.642935][ T797] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1490.650735][ T797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1490.658193][ T797] 8021q: adding VLAN 0 to HW filter on device team0 [ 1490.667523][ T797] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1490.827456][ T799] bridge0: port 3(erspan0) entered disabled state 10:23:21 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(0xffffffffffffffff, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, 0x0) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340), 0xffffffffffff7fff) [ 1491.048624][ T802] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1491.084391][ T801] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1491.096366][ T801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1491.106842][ T801] 8021q: adding VLAN 0 to HW filter on device team0 [ 1491.118184][ T801] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1491.134523][ T803] validate_nla: 2 callbacks suppressed [ 1491.134541][ T803] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 10:23:21 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1491.149771][ T805] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1491.159243][ T806] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1491.168906][ T809] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1491.182737][ T816] netlink: 'syz-executor.0': attribute type 27 has an invalid length. 10:23:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{0x0}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1491.425010][ T818] bridge0: port 3(erspan0) entered blocking state [ 1491.431616][ T818] bridge0: port 3(erspan0) entered forwarding state [ 1491.761433][ T818] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1491.773231][ T818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1491.782198][ T818] 8021q: adding VLAN 0 to HW filter on device team0 [ 1491.791957][ T818] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1491.846379][ T819] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1491.865844][ T820] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 10:23:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1492.024447][ T820] bridge0: port 3(erspan0) entered disabled state 10:23:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x0, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1492.519555][ T6231] ip6_vti0 speed is unknown, defaulting to 1000 [ 1492.532944][ T828] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1492.590994][ T828] infiniband syz2: set active [ 1492.612548][ T828] infiniband syz2: set active [ 1492.664097][ T828] bridge0: port 3(erspan0) entered blocking state [ 1492.670644][ T828] bridge0: port 3(erspan0) entered forwarding state [ 1492.715116][ T828] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1492.761307][ T828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1492.797785][ T828] 8021q: adding VLAN 0 to HW filter on device team0 [ 1492.847220][ T828] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1492.906532][ T829] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1493.050971][ T829] bridge0: port 3(erspan0) entered disabled state [ 1493.084891][ T829] infiniband syz2: set down 10:23:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1493.277778][ T837] bridge0: port 3(erspan0) entered blocking state [ 1493.284329][ T837] bridge0: port 3(erspan0) entered forwarding state [ 1493.292264][ T837] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1493.299946][ T837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1493.307390][ T837] 8021q: adding VLAN 0 to HW filter on device team0 [ 1493.318878][ T837] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1493.334767][ T841] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1493.463035][ T841] bridge0: port 3(erspan0) entered disabled state 10:23:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(0xffffffffffffffff, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, 0x0) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340), 0xffffffffffff7fff) [ 1493.622710][ T850] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1493.635004][ T861] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 10:23:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1493.666662][ T861] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1493.683734][ T862] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 10:23:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{0x0}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1494.615241][ T867] __nla_validate_parse: 3 callbacks suppressed [ 1494.615257][ T867] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1494.633318][ T872] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1494.653937][ T873] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:23:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1494.665555][ T6278] ip6_vti0 speed is unknown, defaulting to 1000 [ 1494.690340][ T878] bridge0: port 3(erspan0) entered blocking state [ 1494.696841][ T878] bridge0: port 3(erspan0) entered forwarding state [ 1494.708849][ T878] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1494.734867][ T878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1494.754965][ T878] 8021q: adding VLAN 0 to HW filter on device team0 [ 1494.777512][ T878] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1494.799776][ T879] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1494.942464][ T879] bridge0: port 3(erspan0) entered disabled state 10:23:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x0, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1495.390338][ T880] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1495.411522][ T887] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1495.455487][ T887] infiniband syz2: set active [ 1495.476384][ T887] infiniband syz2: set active [ 1495.519454][ T887] bridge0: port 3(erspan0) entered blocking state [ 1495.525995][ T887] bridge0: port 3(erspan0) entered forwarding state [ 1495.563019][ T887] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1495.589062][ T887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1495.602287][ T887] 8021q: adding VLAN 0 to HW filter on device team0 [ 1495.616282][ T887] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1495.637462][ T888] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1495.772614][ T888] bridge0: port 3(erspan0) entered disabled state [ 1495.806380][ T888] infiniband syz2: set down 10:23:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1496.103810][ T894] bridge0: port 3(erspan0) entered blocking state [ 1496.110337][ T894] bridge0: port 3(erspan0) entered forwarding state [ 1496.117955][ T894] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1496.125705][ T894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1496.133217][ T894] 8021q: adding VLAN 0 to HW filter on device team0 [ 1496.147603][ T894] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1496.163264][ T896] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1496.260576][ T896] bridge0: port 3(erspan0) entered disabled state 10:23:26 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) 10:23:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1496.484390][ T897] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1496.505163][ T898] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1496.514074][T31971] ip6_vti0 speed is unknown, defaulting to 1000 [ 1496.550354][ T906] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1496.558362][ T906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1496.574613][ T906] 8021q: adding VLAN 0 to HW filter on device team0 [ 1496.586982][ T906] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1496.608797][ T909] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 10:23:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1497.123583][ T908] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1497.144546][ T912] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1497.158504][ T910] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:23:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1497.211884][ T918] bridge0: port 3(erspan0) entered blocking state [ 1497.218397][ T918] bridge0: port 3(erspan0) entered forwarding state [ 1497.266005][ T918] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1497.300785][ T918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1497.308423][ T918] 8021q: adding VLAN 0 to HW filter on device team0 [ 1497.327422][ T918] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1497.376896][ T919] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1497.673027][ T919] bridge0: port 3(erspan0) entered disabled state 10:23:28 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, 0x0) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1498.179716][ T920] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1498.204119][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1498.243427][ T926] infiniband syz2: set active [ 1498.248387][ T926] infiniband syz2: set active [ 1498.292351][ T926] bridge0: port 3(erspan0) entered blocking state [ 1498.298857][ T926] bridge0: port 3(erspan0) entered forwarding state [ 1498.306873][ T926] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1498.315148][ T926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1498.323021][ T926] 8021q: adding VLAN 0 to HW filter on device team0 [ 1498.332072][ T926] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1498.365731][ T923] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1498.468096][ T923] bridge0: port 3(erspan0) entered disabled state [ 1498.493721][ T923] infiniband syz2: set down 10:23:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1498.739677][T31994] ip6_vti0 speed is unknown, defaulting to 1000 [ 1498.746022][T32029] ip6_vti0 speed is unknown, defaulting to 1000 [ 1498.768305][ T934] bridge0: port 3(erspan0) entered blocking state [ 1498.774853][ T934] bridge0: port 3(erspan0) entered forwarding state [ 1498.783322][ T934] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1498.795310][ T934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1498.803834][ T934] 8021q: adding VLAN 0 to HW filter on device team0 [ 1498.819026][ T934] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1498.877851][ T935] bridge0: port 3(erspan0) entered blocking state [ 1498.884385][ T935] bridge0: port 3(erspan0) entered forwarding state [ 1498.893490][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1498.908830][ T935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1498.924176][ T935] 8021q: adding VLAN 0 to HW filter on device team0 [ 1498.938838][ T935] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1498.959208][ T936] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1499.010709][ T936] bridge0: port 3(erspan0) entered disabled state [ 1499.152155][ T937] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1499.202678][ T937] bridge0: port 3(erspan0) entered disabled state 10:23:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1499.341686][ T938] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1499.351146][ T939] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 10:23:29 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1499.382091][ T952] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1499.390625][ T952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1499.403511][ T952] 8021q: adding VLAN 0 to HW filter on device team0 [ 1499.417076][ T952] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1499.433744][ T951] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1499.443093][ T953] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 1500.028881][ T955] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1500.040766][ T956] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 10:23:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) 10:23:30 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1500.105617][ T967] bridge0: port 3(erspan0) entered blocking state [ 1500.112277][ T967] bridge0: port 3(erspan0) entered forwarding state [ 1500.148887][ T967] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1500.191208][ T967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1500.223900][ T967] 8021q: adding VLAN 0 to HW filter on device team0 [ 1500.253734][ T967] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1500.477588][ T969] bridge0: port 3(erspan0) entered disabled state [ 1500.952073][ T970] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1500.975562][T32030] ip6_vti0 speed is unknown, defaulting to 1000 [ 1501.006737][ T978] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 10:23:31 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, 0x0) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1501.049972][ T978] infiniband syz2: set active [ 1501.057331][ T978] infiniband syz2: set active [ 1501.091155][ T978] bridge0: port 3(erspan0) entered blocking state [ 1501.097698][ T978] bridge0: port 3(erspan0) entered forwarding state [ 1501.110805][ T978] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1501.118899][ T978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1501.132179][ T978] 8021q: adding VLAN 0 to HW filter on device team0 [ 1501.145971][ T978] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1501.267615][ T976] bridge0: port 3(erspan0) entered disabled state [ 1501.308553][ T976] infiniband syz2: set down 10:23:31 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1501.609496][ T987] validate_nla: 2 callbacks suppressed [ 1501.609511][ T987] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1501.690142][ T988] bridge0: port 3(erspan0) entered blocking state [ 1501.696690][ T988] bridge0: port 3(erspan0) entered forwarding state [ 1501.739044][ T988] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1501.762623][ T988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1501.771808][ T988] 8021q: adding VLAN 0 to HW filter on device team0 10:23:32 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1501.781270][ T988] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1501.797148][ T989] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1501.811269][ T990] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1501.947118][ T990] bridge0: port 3(erspan0) entered disabled state 10:23:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1502.133125][ T992] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1502.142923][ T1000] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1502.167851][ T1001] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1502.177725][ T1001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1502.188715][ T1001] 8021q: adding VLAN 0 to HW filter on device team0 [ 1502.198511][ T1001] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1502.216287][ T1002] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:23:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1502.227343][ T1003] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 1502.750967][ T1005] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1502.768770][T32000] ip6_vti0 speed is unknown, defaulting to 1000 10:23:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1502.792160][ T1010] bridge0: port 3(erspan0) entered blocking state [ 1502.798669][ T1010] bridge0: port 3(erspan0) entered forwarding state [ 1502.819984][ T1010] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1502.846298][ T1010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1502.860046][ T1010] 8021q: adding VLAN 0 to HW filter on device team0 [ 1502.874249][ T1010] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1502.899550][ T1011] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1503.050792][ T1011] bridge0: port 3(erspan0) entered disabled state [ 1503.348220][ T1012] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1503.367169][ T1017] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 10:23:33 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, 0x0) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1503.398592][ T1017] infiniband syz2: set active [ 1503.403811][ T1017] infiniband syz2: set active [ 1503.432431][ T1017] bridge0: port 3(erspan0) entered blocking state [ 1503.438977][ T1017] bridge0: port 3(erspan0) entered forwarding state [ 1503.449134][ T1017] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1503.460004][ T1017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1503.469029][ T1017] 8021q: adding VLAN 0 to HW filter on device team0 [ 1503.480734][ T1017] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1503.496926][ T1015] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1503.596703][ T1015] bridge0: port 3(erspan0) entered disabled state [ 1503.664249][ T1015] infiniband syz2: set down 10:23:34 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(0x0, 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1504.053241][ T1021] bridge0: port 3(erspan0) entered blocking state [ 1504.059792][ T1021] bridge0: port 3(erspan0) entered forwarding state [ 1504.070730][ T1021] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1504.080523][ T1021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1504.087900][ T1021] 8021q: adding VLAN 0 to HW filter on device team0 [ 1504.096626][ T1021] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1504.112525][ T1019] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1504.164783][ T1019] bridge0: port 3(erspan0) entered disabled state 10:23:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, 0x0) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1504.296050][ T1027] bridge0: port 3(erspan0) entered blocking state [ 1504.302596][ T1027] bridge0: port 3(erspan0) entered forwarding state [ 1504.311633][ T1027] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1504.319563][ T1027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1504.327595][ T1027] 8021q: adding VLAN 0 to HW filter on device team0 [ 1504.336662][ T1027] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1504.352959][ T1029] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1504.383472][ T1029] bridge0: port 3(erspan0) entered disabled state [ 1504.779155][ T1030] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1504.788056][ T1031] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1504.797954][ T1032] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1504.813282][T32026] ip6_vti0 speed is unknown, defaulting to 1000 10:23:35 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1504.835321][ T1038] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1504.844656][ T1038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1504.852883][ T1038] 8021q: adding VLAN 0 to HW filter on device team0 [ 1504.864096][ T1038] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 10:23:35 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1504.894776][ T1039] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 1505.583606][ T1040] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 10:23:35 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1505.630220][ T1045] bridge0: port 3(erspan0) entered blocking state [ 1505.636756][ T1045] bridge0: port 3(erspan0) entered forwarding state [ 1505.655277][ T1045] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1505.681830][ T1045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1505.690892][ T1045] 8021q: adding VLAN 0 to HW filter on device team0 [ 1505.707028][ T1045] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1505.842800][ T1046] bridge0: port 3(erspan0) entered disabled state 10:23:36 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1506.143077][ T1047] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1506.163324][ T1050] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1506.195636][ T1050] infiniband syz2: set active [ 1506.201039][ T1050] infiniband syz2: set active [ 1506.217727][ T1050] bridge0: port 3(erspan0) entered blocking state [ 1506.224242][ T1050] bridge0: port 3(erspan0) entered forwarding state [ 1506.237263][ T1050] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1506.246638][ T1050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1506.259206][ T1050] 8021q: adding VLAN 0 to HW filter on device team0 [ 1506.276605][ T1050] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1506.374361][ T1051] bridge0: port 3(erspan0) entered disabled state [ 1506.411800][ T1051] infiniband syz2: set down 10:23:36 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(0x0, 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1506.701589][ T1061] bridge0: port 3(erspan0) entered blocking state [ 1506.708143][ T1061] bridge0: port 3(erspan0) entered forwarding state [ 1506.747446][ T1061] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1506.771037][ T1061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1506.778227][ T1061] 8021q: adding VLAN 0 to HW filter on device team0 [ 1506.801959][ T1061] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1506.818619][ T1062] validate_nla: 2 callbacks suppressed [ 1506.818633][ T1062] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1506.956017][ T1062] bridge0: port 3(erspan0) entered disabled state 10:23:37 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1507.156943][ T1063] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1507.166520][T32069] ip6_vti0 speed is unknown, defaulting to 1000 [ 1507.173409][ T1071] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1507.199070][ T1072] bridge0: port 3(erspan0) entered blocking state [ 1507.205625][ T1072] bridge0: port 3(erspan0) entered forwarding state [ 1507.214174][ T1072] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1507.223678][ T1072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1507.233381][ T1072] 8021q: adding VLAN 0 to HW filter on device team0 10:23:37 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1507.243292][ T1072] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1507.260341][ T1073] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1507.270112][ T1074] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1507.347252][ T1074] bridge0: port 3(erspan0) entered disabled state [ 1507.773214][ T1076] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 10:23:38 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(0xffffffffffffffff, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0xffffffffffff7fff) [ 1507.851373][ T1081] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1507.898328][ T1081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1507.932426][ T1081] 8021q: adding VLAN 0 to HW filter on device team0 [ 1507.982203][ T1081] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1508.011596][ T1082] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 10:23:39 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(0xffffffffffffffff, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0xffffffffffff7fff) [ 1508.896958][ T1083] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1508.924279][ T1089] bridge0: port 3(erspan0) entered blocking state [ 1508.930831][ T1089] bridge0: port 3(erspan0) entered forwarding state [ 1508.938978][ T1089] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1508.948254][ T1089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1508.955674][ T1089] 8021q: adding VLAN 0 to HW filter on device team0 [ 1508.963984][ T1089] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1508.979892][ T1090] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1509.066788][ T1090] bridge0: port 3(erspan0) entered disabled state [ 1509.321130][ T1091] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1509.355544][ T1094] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 10:23:39 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1509.492802][ T1094] infiniband syz2: set active [ 1509.564195][ T1094] infiniband syz2: set active [ 1509.578546][ T1094] bridge0: port 3(erspan0) entered blocking state [ 1509.585084][ T1094] bridge0: port 3(erspan0) entered forwarding state [ 1509.593365][ T1094] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1509.601793][ T1094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1509.609333][ T1094] 8021q: adding VLAN 0 to HW filter on device team0 [ 1509.617874][ T1094] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1509.633832][ T1095] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1509.698947][ T1095] bridge0: port 3(erspan0) entered disabled state [ 1509.733833][ T1095] infiniband syz2: set down 10:23:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(0x0, 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1509.930411][T31748] ip6_vti0 speed is unknown, defaulting to 1000 [ 1509.939529][ T1101] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1509.948026][ T1103] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1509.975108][ T1104] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1509.990511][ T1106] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:23:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1510.022590][ T1112] bridge0: port 3(erspan0) entered blocking state [ 1510.030553][ T1112] bridge0: port 3(erspan0) entered forwarding state [ 1510.038297][ T1112] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1510.046248][ T1112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1510.053885][ T1112] 8021q: adding VLAN 0 to HW filter on device team0 10:23:40 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1510.065144][ T1112] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1510.080693][ T1113] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1510.222171][ T1113] bridge0: port 3(erspan0) entered disabled state [ 1510.707080][ T1114] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 10:23:41 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7ab, &(0x7f0000000640)={{@my=0x1}, @hyper, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}) [ 1510.750495][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1510.758485][ T1119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1510.765965][ T1119] 8021q: adding VLAN 0 to HW filter on device team0 [ 1510.777575][ T1119] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 10:23:41 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(0xffffffffffffffff, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0xffffffffffff7fff) [ 1510.793698][ T1120] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 10:23:42 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(0xffffffffffffffff, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0xffffffffffff7fff) [ 1511.806514][ T1123] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1511.855375][ T1136] bridge0: port 3(erspan0) entered blocking state [ 1511.861915][ T1136] bridge0: port 3(erspan0) entered forwarding state [ 1511.874219][ T1136] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1511.883029][ T1136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1511.890460][ T1136] 8021q: adding VLAN 0 to HW filter on device team0 [ 1511.898788][ T1136] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1511.914970][ T1137] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1512.476159][ T1137] bridge0: port 3(erspan0) entered disabled state 10:23:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1512.621381][ T1138] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1512.631101][T32070] ip6_vti0 speed is unknown, defaulting to 1000 [ 1512.643912][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1512.661856][ T1141] infiniband syz2: set active [ 1512.666742][ T1141] infiniband syz2: set active [ 1512.679858][ T1141] bridge0: port 3(erspan0) entered blocking state [ 1512.686347][ T1141] bridge0: port 3(erspan0) entered forwarding state [ 1512.703895][ T1141] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1512.712422][ T1141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1512.720808][ T1141] 8021q: adding VLAN 0 to HW filter on device team0 [ 1512.728797][ T1141] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1512.744918][ T1142] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1512.827121][ T1142] bridge0: port 3(erspan0) entered disabled state [ 1512.870201][ T1142] infiniband syz2: set down 10:23:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1513.174943][ T1149] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1513.211899][ T1150] bridge0: port 3(erspan0) entered blocking state [ 1513.218428][ T1150] bridge0: port 3(erspan0) entered forwarding state [ 1513.233024][ T1150] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1513.245351][ T1150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1513.255018][ T1150] 8021q: adding VLAN 0 to HW filter on device team0 [ 1513.266083][ T1150] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 10:23:43 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1513.282497][ T1151] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1513.292040][ T1152] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1513.361962][ T1152] bridge0: port 3(erspan0) entered disabled state 10:23:43 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(0xffffffffffffffff, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1513.664643][ T1154] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1513.686697][ T1161] bridge0: port 3(erspan0) entered blocking state [ 1513.693234][ T1161] bridge0: port 3(erspan0) entered forwarding state [ 1513.701065][ T1161] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1513.709077][ T1161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1513.716728][ T1161] 8021q: adding VLAN 0 to HW filter on device team0 [ 1513.728383][ T1161] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1513.744226][ T1162] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1514.376310][ T1162] bridge0: port 3(erspan0) entered disabled state 10:23:44 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(0xffffffffffffffff, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0xffffffffffff7fff) [ 1514.554441][ T1163] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1514.591617][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1514.599607][ T1168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1514.606709][ T1168] 8021q: adding VLAN 0 to HW filter on device team0 [ 1514.615415][ T1168] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1514.631251][ T1169] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 10:23:45 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(0xffffffffffffffff, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0xffffffffffff7fff) [ 1515.353629][ T1170] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1515.374350][T31932] ip6_vti0 speed is unknown, defaulting to 1000 [ 1515.393520][ T1175] bridge0: port 3(erspan0) entered blocking state [ 1515.400070][ T1175] bridge0: port 3(erspan0) entered forwarding state [ 1515.410770][ T1175] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1515.419211][ T1175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1515.426744][ T1175] 8021q: adding VLAN 0 to HW filter on device team0 [ 1515.435826][ T1175] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1515.451766][ T1176] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1516.019837][ T1176] bridge0: port 3(erspan0) entered disabled state 10:23:46 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, 0x0, 0xffffffffffff7fff) [ 1516.138853][ T1177] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1516.158894][ T1180] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1516.198491][ T1180] infiniband syz2: set active [ 1516.203679][ T1180] infiniband syz2: set active [ 1516.215266][ T1180] bridge0: port 3(erspan0) entered blocking state [ 1516.221766][ T1180] bridge0: port 3(erspan0) entered forwarding state [ 1516.230185][ T1180] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1516.247578][ T1180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1516.256387][ T1180] 8021q: adding VLAN 0 to HW filter on device team0 [ 1516.269582][ T1180] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1516.285672][ T1182] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1516.372159][ T1182] bridge0: port 3(erspan0) entered disabled state [ 1516.407424][ T1182] infiniband syz2: set down 10:23:46 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1516.692667][ T1186] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1516.709007][ T1187] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:23:46 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1516.736816][ T1193] bridge0: port 3(erspan0) entered blocking state [ 1516.743406][ T1193] bridge0: port 3(erspan0) entered forwarding state [ 1516.751447][ T1193] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1516.759127][ T1193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1516.766674][ T1193] 8021q: adding VLAN 0 to HW filter on device team0 [ 1516.788003][ T1193] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1516.804465][ T1194] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1516.914300][ T1194] bridge0: port 3(erspan0) entered disabled state 10:23:47 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(0xffffffffffffffff, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1517.166989][ T1196] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1517.188768][ T1201] bridge0: port 3(erspan0) entered blocking state [ 1517.195288][ T1201] bridge0: port 3(erspan0) entered forwarding state [ 1517.203248][ T1201] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1517.211011][ T1201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1517.218454][ T1201] 8021q: adding VLAN 0 to HW filter on device team0 [ 1517.228920][ T1201] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1517.244782][ T1202] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1517.875152][ T1202] bridge0: port 3(erspan0) entered disabled state 10:23:48 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(0xffffffffffffffff, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0xffffffffffff7fff) [ 1518.105190][ T1203] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1518.114733][ T7] ip6_vti0 speed is unknown, defaulting to 1000 [ 1518.127381][ T1107] ip6_vti0 speed is unknown, defaulting to 1000 [ 1518.147663][ T1210] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1518.156831][ T1210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1518.164270][ T1210] 8021q: adding VLAN 0 to HW filter on device team0 [ 1518.174776][ T1210] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1518.190374][ T1211] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 10:23:49 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1518.888972][ T1212] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1518.919097][ T1217] bridge0: port 3(erspan0) entered blocking state [ 1518.925688][ T1217] bridge0: port 3(erspan0) entered forwarding state [ 1518.934300][ T1217] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1518.944113][ T1217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1518.951459][ T1217] 8021q: adding VLAN 0 to HW filter on device team0 [ 1518.961226][ T1217] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1518.976778][ T1218] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1519.046934][ T1218] bridge0: port 3(erspan0) entered disabled state 10:23:49 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, 0x0, 0xffffffffffff7fff) [ 1519.280339][ T1219] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1519.300663][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1519.334637][ T1222] infiniband syz2: set active [ 1519.339526][ T1222] infiniband syz2: set active [ 1519.351834][ T1222] bridge0: port 3(erspan0) entered blocking state [ 1519.358314][ T1222] bridge0: port 3(erspan0) entered forwarding state [ 1519.366815][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1519.375712][ T1222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1519.384302][ T1222] 8021q: adding VLAN 0 to HW filter on device team0 [ 1519.415866][ T1222] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1519.440740][ T1225] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1519.553411][ T1225] bridge0: port 3(erspan0) entered disabled state [ 1519.602307][ T1225] infiniband syz2: set down 10:23:50 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1519.891280][ T1228] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1519.917048][ T1229] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1519.929257][ T1230] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1519.961241][ T1235] bridge0: port 3(erspan0) entered blocking state [ 1519.967752][ T1235] bridge0: port 3(erspan0) entered forwarding state [ 1519.975573][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1519.983433][ T1235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1519.990931][ T1235] 8021q: adding VLAN 0 to HW filter on device team0 10:23:50 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1520.000592][ T1235] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1520.016176][ T1236] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1520.168892][ T1236] bridge0: port 3(erspan0) entered disabled state 10:23:50 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(0xffffffffffffffff, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1520.478522][ T1237] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1520.514117][ T1242] bridge0: port 3(erspan0) entered blocking state [ 1520.520737][ T1242] bridge0: port 3(erspan0) entered forwarding state [ 1520.528457][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1520.536323][ T1242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1520.543970][ T1242] 8021q: adding VLAN 0 to HW filter on device team0 [ 1520.552973][T31997] ip6_vti0 speed is unknown, defaulting to 1000 [ 1520.560081][ T1242] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1520.575777][ T1244] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1521.188932][ T1244] bridge0: port 3(erspan0) entered disabled state 10:23:51 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(0xffffffffffffffff, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1521.418343][ T1245] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1521.468931][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1521.477152][ T1250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1521.485801][ T1250] 8021q: adding VLAN 0 to HW filter on device team0 [ 1521.494226][ T1250] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1521.509929][ T1251] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 10:23:52 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(0xffffffffffffffff, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, 0x0) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1522.196388][ T1252] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1522.221611][ T1257] bridge0: port 3(erspan0) entered blocking state [ 1522.228314][ T1257] bridge0: port 3(erspan0) entered forwarding state [ 1522.237014][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1522.245989][ T1257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1522.253636][ T1257] 8021q: adding VLAN 0 to HW filter on device team0 [ 1522.263347][ T1257] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1522.278828][ T1258] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1522.298517][ T1258] bridge0: port 3(erspan0) entered disabled state [ 1522.325288][ T1259] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1522.451900][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1522.670825][ T1262] infiniband syz2: set active 10:23:52 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, 0x0, 0xffffffffffff7fff) [ 1522.768136][ T1262] infiniband syz2: set active [ 1522.877113][ T1262] bridge0: port 3(erspan0) entered blocking state [ 1522.883678][ T1262] bridge0: port 3(erspan0) entered forwarding state [ 1522.899310][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1522.907523][ T1262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1522.915251][ T1262] 8021q: adding VLAN 0 to HW filter on device team0 [ 1522.923807][ T1262] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1522.939885][ T1265] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1523.016763][ T1265] bridge0: port 3(erspan0) entered disabled state [ 1523.043849][ T1265] infiniband syz2: set down 10:23:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, 0x0, 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1523.299768][ T1267] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1523.315459][ T1268] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1523.334333][ T1269] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:23:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1523.350645][ T5448] ip6_vti0 speed is unknown, defaulting to 1000 [ 1523.362800][ T1274] bridge0: port 3(erspan0) entered blocking state [ 1523.369283][ T1274] bridge0: port 3(erspan0) entered forwarding state [ 1523.376885][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1523.384607][ T1274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1523.392057][ T1274] 8021q: adding VLAN 0 to HW filter on device team0 [ 1523.409595][ T1274] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1523.425474][ T1275] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1523.535618][ T1275] bridge0: port 3(erspan0) entered disabled state 10:23:54 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1523.831434][ T1276] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1523.867997][ T1281] bridge0: port 3(erspan0) entered blocking state [ 1523.874577][ T1281] bridge0: port 3(erspan0) entered forwarding state [ 1523.882475][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1523.890183][ T1281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1523.897656][ T1281] 8021q: adding VLAN 0 to HW filter on device team0 [ 1523.906753][ T1281] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1523.922633][ T1282] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1524.061708][ T1282] bridge0: port 3(erspan0) entered disabled state 10:23:54 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(0xffffffffffffffff, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1524.318997][ T1283] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1524.363927][ T1291] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1524.371941][ T1291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1524.379270][ T1291] 8021q: adding VLAN 0 to HW filter on device team0 [ 1524.389256][ T1291] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1524.405175][ T1292] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 10:23:55 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(0xffffffffffffffff, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, 0x0) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1525.310530][ T1293] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1525.364816][ T1298] bridge0: port 3(erspan0) entered blocking state [ 1525.371478][ T1298] bridge0: port 3(erspan0) entered forwarding state [ 1525.380402][ T1298] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1525.389290][ T1298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1525.397971][ T1298] 8021q: adding VLAN 0 to HW filter on device team0 [ 1525.406938][ T1298] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1525.422696][ T1299] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1525.446947][ T1299] bridge0: port 3(erspan0) entered disabled state 10:23:56 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340), 0xffffffffffff7fff) [ 1526.068365][ T1300] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1526.077941][T32073] ip6_vti0 speed is unknown, defaulting to 1000 [ 1526.096205][ T1303] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1526.117700][ T1303] infiniband syz2: set active [ 1526.122803][ T1303] infiniband syz2: set active [ 1526.134690][ T1303] bridge0: port 3(erspan0) entered blocking state [ 1526.141179][ T1303] bridge0: port 3(erspan0) entered forwarding state [ 1526.148556][ T1303] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1526.157054][ T1303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1526.164594][ T1303] 8021q: adding VLAN 0 to HW filter on device team0 [ 1526.173924][ T1303] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1526.196714][ T1306] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1526.283692][ T1306] bridge0: port 3(erspan0) entered disabled state [ 1526.315248][ T1306] infiniband syz2: set down 10:23:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, 0x0, 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1526.579681][ T1308] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1526.589454][ T1309] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1526.599867][ T1310] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1526.618675][ T1315] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 10:23:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1526.635089][ T1316] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1526.647186][ T1317] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1526.691156][ T1322] bridge0: port 3(erspan0) entered blocking state [ 1526.697649][ T1322] bridge0: port 3(erspan0) entered forwarding state [ 1526.705207][ T1322] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1526.712882][ T1322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1526.720327][ T1322] 8021q: adding VLAN 0 to HW filter on device team0 [ 1526.729303][ T1322] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 10:23:57 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, 0x0, 0xffffffffffff7fff) [ 1526.853860][ T1323] bridge0: port 3(erspan0) entered disabled state 10:23:57 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(0xffffffffffffffff, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1527.257107][ T1324] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1527.294931][ T1334] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1527.302948][ T1334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1527.310383][ T1334] 8021q: adding VLAN 0 to HW filter on device team0 [ 1527.319267][ T1334] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1527.335188][ T1335] validate_nla: 1 callbacks suppressed [ 1527.335199][ T1335] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 10:23:58 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(0xffffffffffffffff, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, 0x0) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1528.341476][ T1336] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1528.358216][T22881] ip6_vti0 speed is unknown, defaulting to 1000 [ 1528.377360][ T1341] bridge0: port 3(erspan0) entered blocking state [ 1528.383953][ T1341] bridge0: port 3(erspan0) entered forwarding state [ 1528.392739][ T1341] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1528.402063][ T1341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1528.409297][ T1341] 8021q: adding VLAN 0 to HW filter on device team0 [ 1528.418093][ T1341] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1528.434073][ T1342] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1528.989789][ T1342] bridge0: port 3(erspan0) entered disabled state 10:23:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340), 0xffffffffffff7fff) [ 1529.110543][ T1343] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1529.153896][ T1346] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1529.174665][ T1346] infiniband syz2: set active [ 1529.179696][ T1346] infiniband syz2: set active [ 1529.189938][ T1346] bridge0: port 3(erspan0) entered blocking state [ 1529.196406][ T1346] bridge0: port 3(erspan0) entered forwarding state [ 1529.204136][ T1346] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1529.212617][ T1346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1529.230461][ T1346] 8021q: adding VLAN 0 to HW filter on device team0 [ 1529.238476][ T1346] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1529.254127][ T1349] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1529.327580][ T1349] bridge0: port 3(erspan0) entered disabled state [ 1529.358520][ T1349] infiniband syz2: set down 10:23:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, 0x0, 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1529.608334][ T1353] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1529.624588][ T1355] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1529.654977][ T1356] bridge0: port 3(erspan0) entered blocking state [ 1529.661502][ T1356] bridge0: port 3(erspan0) entered forwarding state [ 1529.675801][ T1356] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1529.684548][ T1356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1529.692633][ T1356] 8021q: adding VLAN 0 to HW filter on device team0 10:23:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1529.705191][ T1356] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1529.721138][ T1357] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1529.733424][ T1358] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1529.860169][ T1358] bridge0: port 3(erspan0) entered disabled state [ 1530.165001][ T1360] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1530.188085][ T1365] bridge0: port 3(erspan0) entered blocking state [ 1530.194625][ T1365] bridge0: port 3(erspan0) entered forwarding state [ 1530.202240][ T1365] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 10:24:00 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(0xffffffffffffffff, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x0, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1530.210090][ T1365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1530.217510][ T1365] 8021q: adding VLAN 0 to HW filter on device team0 [ 1530.230624][ T1365] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1530.246224][ T1366] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1530.378945][ T1366] bridge0: port 3(erspan0) entered disabled state 10:24:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(0xffffffffffffffff, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x0, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1531.113929][T22303] ip6_vti0 speed is unknown, defaulting to 1000 [ 1531.132231][ T1372] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1531.140395][ T1372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1531.148299][ T1372] 8021q: adding VLAN 0 to HW filter on device team0 [ 1531.157847][ T1372] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1531.173764][ T1373] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 10:24:02 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(0xffffffffffffffff, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, 0x0) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1531.867658][ T1374] __nla_validate_parse: 1 callbacks suppressed [ 1531.867675][ T1374] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1531.907018][ T1379] bridge0: port 3(erspan0) entered blocking state [ 1531.913525][ T1379] bridge0: port 3(erspan0) entered forwarding state [ 1531.921669][ T1379] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1531.930280][ T1379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1531.937464][ T1379] 8021q: adding VLAN 0 to HW filter on device team0 [ 1531.946542][ T1379] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1531.962631][ T1380] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1532.055044][ T1380] bridge0: port 3(erspan0) entered disabled state [ 1532.326420][ T1381] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1532.361485][ T1384] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 10:24:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340), 0xffffffffffff7fff) [ 1532.556806][ T1384] infiniband syz2: set active [ 1532.561864][ T1384] infiniband syz2: set active [ 1532.574222][ T1384] bridge0: port 3(erspan0) entered blocking state [ 1532.580737][ T1384] bridge0: port 3(erspan0) entered forwarding state [ 1532.588721][ T1384] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1532.596864][ T1384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1532.604903][ T1384] 8021q: adding VLAN 0 to HW filter on device team0 [ 1532.613675][ T1384] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1532.629186][ T1385] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1532.682420][ T1385] bridge0: port 3(erspan0) entered disabled state [ 1532.707605][ T1385] infiniband syz2: set down 10:24:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r2 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r3, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1532.927663][ T1389] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1532.946567][ T1390] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1532.955580][ T1391] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1532.981833][ T1396] bridge0: port 3(erspan0) entered blocking state [ 1532.988317][ T1396] bridge0: port 3(erspan0) entered forwarding state [ 1532.996054][ T1396] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1533.003820][ T1396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1533.011502][ T1396] 8021q: adding VLAN 0 to HW filter on device team0 10:24:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1533.020453][ T1396] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1533.036342][ T1397] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1533.166732][ T1397] bridge0: port 3(erspan0) entered disabled state [ 1533.437514][ T1398] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 10:24:03 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(0xffffffffffffffff, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x0, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1533.482634][ T1403] bridge0: port 3(erspan0) entered blocking state [ 1533.489143][ T1403] bridge0: port 3(erspan0) entered forwarding state [ 1533.496892][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1533.504716][ T1403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1533.512270][ T1403] 8021q: adding VLAN 0 to HW filter on device team0 [ 1533.521473][ T6583] ip6_vti0 speed is unknown, defaulting to 1000 [ 1533.532816][ T1403] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1533.548374][ T1404] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1534.173895][ T1404] bridge0: port 3(erspan0) entered disabled state 10:24:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(0xffffffffffffffff, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x0, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1534.375062][ T1405] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1534.398492][ T1410] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1534.406677][ T1410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1534.415269][ T1410] 8021q: adding VLAN 0 to HW filter on device team0 [ 1534.425927][ T1410] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1534.441519][ T1411] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 10:24:05 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1535.203394][ T1412] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1535.245518][ T1419] bridge0: port 3(erspan0) entered blocking state [ 1535.252071][ T1419] bridge0: port 3(erspan0) entered forwarding state [ 1535.261518][ T1419] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1535.269680][ T1419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1535.277018][ T1419] 8021q: adding VLAN 0 to HW filter on device team0 [ 1535.286724][ T1419] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1535.302913][ T1420] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1535.332411][ T1420] bridge0: port 3(erspan0) entered disabled state [ 1535.417231][ T1421] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1535.437850][ T1424] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1535.486529][ T1424] infiniband syz2: set active 10:24:05 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0x0) [ 1535.516110][ T1424] infiniband syz2: set active [ 1535.547816][ T1424] bridge0: port 3(erspan0) entered blocking state [ 1535.554361][ T1424] bridge0: port 3(erspan0) entered forwarding state [ 1535.568505][ T1424] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1535.577765][ T1424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1535.591921][ T1424] 8021q: adding VLAN 0 to HW filter on device team0 [ 1535.610199][ T1424] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1535.635387][ T1425] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1535.751231][ T1425] bridge0: port 3(erspan0) entered disabled state [ 1535.813783][ T1425] infiniband syz2: set down 10:24:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r2 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r3, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1536.231452][ T1429] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1536.246465][ T1430] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1536.273716][ T1431] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1536.304484][ T1436] bridge0: port 3(erspan0) entered blocking state [ 1536.311048][ T1436] bridge0: port 3(erspan0) entered forwarding state 10:24:06 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1536.318586][ T1436] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1536.326354][ T1436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1536.334403][ T1436] 8021q: adding VLAN 0 to HW filter on device team0 [ 1536.346473][T32072] ip6_vti0 speed is unknown, defaulting to 1000 [ 1536.354219][ T1436] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1536.370001][ T1437] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1536.466666][ T1437] bridge0: port 3(erspan0) entered disabled state 10:24:06 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(0xffffffffffffffff, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x0, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1536.708104][ T1443] bridge0: port 3(erspan0) entered blocking state [ 1536.714666][ T1443] bridge0: port 3(erspan0) entered forwarding state [ 1536.722410][ T1443] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1536.730241][ T1443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1536.737761][ T1443] 8021q: adding VLAN 0 to HW filter on device team0 [ 1536.747347][ T1443] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1536.763103][ T1444] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1537.384157][ T1444] bridge0: port 3(erspan0) entered disabled state 10:24:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(0xffffffffffffffff, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x0, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1537.627371][ T1445] __nla_validate_parse: 1 callbacks suppressed [ 1537.627387][ T1445] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1537.653455][ T1451] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1537.663221][ T1454] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 10:24:07 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1537.672032][ T1457] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1537.714598][ T1460] bridge0: port 3(erspan0) entered blocking state [ 1537.721162][ T1460] bridge0: port 3(erspan0) entered forwarding state [ 1537.729929][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1537.738261][ T1460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1537.745905][ T1460] 8021q: adding VLAN 0 to HW filter on device team0 [ 1537.759110][ T1460] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1537.841316][ T1486] bridge0: port 3(erspan0) entered blocking state [ 1537.847859][ T1486] bridge0: port 3(erspan0) entered forwarding state [ 1537.857832][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1537.866560][ T1486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1537.875791][ T1486] 8021q: adding VLAN 0 to HW filter on device team0 [ 1537.891014][ T1486] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1537.907108][ T1461] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1538.190055][ T1461] bridge0: port 3(erspan0) entered disabled state [ 1538.384713][ T1462] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1538.398679][T31533] ip6_vti0 speed is unknown, defaulting to 1000 [ 1538.409610][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1538.435019][ T1465] infiniband syz2: set active [ 1538.440114][ T1465] infiniband syz2: set active [ 1538.452866][ T1465] bridge0: port 3(erspan0) entered blocking state [ 1538.459476][ T1465] bridge0: port 3(erspan0) entered forwarding state 10:24:08 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0x0) [ 1538.498062][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1538.507108][ T1465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1538.535533][ T1465] 8021q: adding VLAN 0 to HW filter on device team0 [ 1538.551433][ T1465] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1538.572143][ T1468] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1538.648819][ T1468] bridge0: port 3(erspan0) entered disabled state [ 1538.697922][ T1468] infiniband syz2: set down 10:24:09 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r2 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r3, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1538.907093][ T1470] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1538.923765][ T1471] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1538.938362][ T1472] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:24:09 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1538.974861][ T1477] bridge0: port 3(erspan0) entered blocking state [ 1538.981393][ T1477] bridge0: port 3(erspan0) entered forwarding state [ 1538.989007][ T1477] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1538.996847][ T1477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1539.004403][ T1477] 8021q: adding VLAN 0 to HW filter on device team0 [ 1539.019805][ T1477] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1539.035480][ T1478] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1539.168646][ T1478] bridge0: port 3(erspan0) entered disabled state 10:24:09 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1539.480606][ T1479] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1539.506779][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1539.533349][ T1488] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1539.703483][ T1488] bridge0: port 3(erspan0) entered disabled state 10:24:10 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r2 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r3, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1540.075441][ T1486] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1540.099179][ T1489] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 10:24:10 executing program 3: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @hyper, 0x0, 0x2000000, 0x8000000, 0x0, 0x1000000000005}) [ 1540.131527][ T1491] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 1540.145909][ T1492] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1540.165920][ T5169] ip6_vti0 speed is unknown, defaulting to 1000 10:24:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(0xffffffffffffffff, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x0, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1540.201783][ T1499] bridge0: port 3(erspan0) entered blocking state [ 1540.208349][ T1499] bridge0: port 3(erspan0) entered forwarding state [ 1540.248219][ T1499] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1540.272137][ T1499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1540.280324][ T1499] 8021q: adding VLAN 0 to HW filter on device team0 [ 1540.292625][ T1499] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1540.308580][ T1500] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1540.913435][ T1500] bridge0: port 3(erspan0) entered disabled state 10:24:11 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0x0) [ 1541.134427][ T1504] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1541.151902][ T1504] infiniband syz2: set active [ 1541.156735][ T1504] infiniband syz2: set active [ 1541.170353][ T1504] bridge0: port 3(erspan0) entered blocking state [ 1541.176839][ T1504] bridge0: port 3(erspan0) entered forwarding state [ 1541.184302][ T1504] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1541.192395][ T1504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1541.200016][ T1504] 8021q: adding VLAN 0 to HW filter on device team0 [ 1541.208078][ T1504] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1541.224927][ T1507] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1541.310212][ T1507] bridge0: port 3(erspan0) entered disabled state [ 1541.348841][ T1507] infiniband syz2: set down 10:24:11 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) 10:24:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1541.657623][ T1510] netlink: 'syz-executor.0': attribute type 27 has an invalid length. 10:24:11 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(0xffffffffffffffff, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x0, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1541.717789][ T1521] bridge0: port 3(erspan0) entered blocking state [ 1541.724351][ T1521] bridge0: port 3(erspan0) entered forwarding state [ 1541.734189][ T1521] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1541.742136][ T1521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1541.749847][ T1521] 8021q: adding VLAN 0 to HW filter on device team0 [ 1541.763696][ T1521] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1541.810986][T21853] ip6_vti0 speed is unknown, defaulting to 1000 [ 1541.817307][T32028] ip6_vti0 speed is unknown, defaulting to 1000 [ 1542.449039][ T1523] bridge0: port 3(erspan0) entered disabled state 10:24:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49468ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", "685a228f", "be0ea450d5a5fd03"}, 0x38) recvfrom$inet6(r0, &(0x7f00000002c0)=""/228, 0xe4, 0x7, 0x0, 0x0) shutdown(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = open(&(0x7f0000000300)='./file0\x00', 0x42c2, 0x42) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x400000, 0x0) write(r2, &(0x7f0000001400)="bb8f9f640903127a53527c6fbfe65d43b0e0586f2d40c7e7df58cac83420e83662d6e39bb6d5430622431454eedeeaee423d8f210bc3525fa7927c18d5fbc91ab13c2041136047d8da9375934d00f325499bfe7712208d387d41c31821c2a22d1325b556528e9b790b74053d1ed631c6ec8126d37c87216173138c00cef396868029af5b76bebac5e38b74d8bbc6ae66b6e202b6d505710377710ea7d43edf00e1a4c1c670bb4c263ce777da81abdd5ba5a5c82f67232f9b4d6f21b2e6afa8b38e4642b0daa2acbc0478d89b88e8b2094d4248855e5e81992e60be3afff0f3c3799350615489a901a659abdeca0c615a622ebf64175f990320e0356d4a11ed62eff72b709c23dd65942e8b534d7d775d370c1e435654a2634e6ee3649c4c3bcbe39e866f1eb9972af1a9cef42e701798a53dc92a242aadbac343e1765cf8ea5665e22deda69777e52b1e9e5d3edc022256939e1eee013448294911139d5b9c6241049fecdf9b31f4cdf6cff65d71b5071ef70e1798347c8846aa5b905e83050e3e606986ed3f603d18c5cdeb11cda1ce3abddea9376231af130e19fc7601ec1ab8cb5a7de9e2174547f18225b09a54fc8720dbb91eb69c1be88e601c3c9df4f2758f39a5151951b9c6dbb419ffd783a34c9fad10f201b8724d31865e2fc1fcf48db2be713053b43a0e3943c1e2b08e8a26e946c439d891db2a80b5ffa054bc8d0177d3214056250c61a537d2ec7630fb90395df2cd6aa9c5e573365db580520bdc3f1c6b2be992e1516a4b810a11935dc780699e461d9715f70c6d103ff49bf168f3cff4c0d0d6ba5671fcd2975450b0e1a3474139cb0f2d3476fcd87a8bccbeb2f5f8a821017b879aa5b9d1fafa9f4c429a74cd2da782114d97bf031746a817dd0293c4eddc3a9ecb5afe496f4971474ccd827449409f07cf94dda2e7dbe8520b5afff10a7e3b0b4289a167fc692635b5b7426d9e771b95860b09a3e752c867213c772e48ba30a78feecc7ff26e63e1749c62b52d377ac5cc52db830c965e04ccfcfb24ceacc69cfdc2094124dd27b2d68f699476a2562bab1de117ffc2b0702ee8b0b77f85fecec3a25b37ab7eb06232c9a73b4470f1727c82581d81942abf42d3ea37957927ad3dbd0ebe46678a9f4d25c47acaac83c14210a54b71fed40df017e2be27f01e3e6ea3ea381ca14efd202858e6535ad4f79a8cdf47e385b740a70c14e3651731a45cc0ca4a56f2e903cad0384efcc364caf67e09551d35c682ebc90a9286c4d274ba1b8ced742ede4e55a62db7ef9a96fde2add05b41599fd72a79ba280cc125cb266ef21b7eeafe3ee6aa78eef33fc66454549c3ec298cb683a55a32208cf6ce88b560166159d59e65f30540f62c5437652ea7f2a02f87ca242dd2250f58e75938a9a3ded51ae6598c2aba53287ff5cdaab17be7f4310f8e07e310d52778de79e1c2e4391b254be38910aa1cf6e1ca0e75d24be97d59f7025f16c6fbd549529b74e319c58f50438765ef0e3dc394eeb75dec41b3d80435b17520c97f5cd7ee692fb86d188fb0089fbf737dc1b96b9cc49be23a38a8cd92e5075f349993d7866369dd25eccbe1481477a05fee14e0edd1617921d7fcaa8fdc642e63b64388fa5b63442ff1466b1938d02546750b01ed9c980282ccbe10f204741249aed88c555ed6fdf7f68af9209807a71bbf4f31bef5a4223466da74ba8b034df529aef6ec6610a0d25973961e50e02af22d0ca8be1b9804a5918acbdb536e8f2f441ec9d640ed15133ee747440c86fc4526c9195954528673d25c8390170f3c19cb0b0c30b9e634c7ebae96946ae97c19eabca92226da925d22be37abbe0740938ea899ec42fd529a3b1063981e4c154219df5cf5af60a29b5a8ee530905725a14b28900eae937e705401ba8f632a7bca00d9724a992afdc9ed14aac71b8e3a7ee5ca095888feb195b4e083c3b611a1c2f8d092febe3b9f5f0df61e8d3c31a643c935b76bc1ad4265164e755484beb06610510bc51e8c6da8d71123bbe83a5e4128f41cf5c486d6a60496c300c406f990bee485cbdef794f2663ee66d2b18d8e55210c25c04b1a0c6d9c5f904e72806d2d4f5e5439bcdf146343cdffe4d0d70d42a9959cff9bd50c37cd478b0b0add16aae4dc839b46bca2ac7547144b6a422aed5e2db661bcb31a82bc0fc678e71a6cb090ef772860f3008b4152b5d281033be4a77b367baec3ab8ce7c83c601b11c8199bafcd15161a5454a6a982dbc3c2e3a5172b6a63e4904817075754eccbb0188c9cb2e5da9600f567485014887463b40f189b7ec3c5c0f36d502509e402c285765c78417ce6b3aab130ee79622dcd8ada842233e73a14554ee5e4995e32b3fe4075e247eb9bdeef64d1a7436c9b5782fb2f84f74e4c6e976289729c37b5bb8200a9480d181a6b11f5ec229b818134b8334967ae935ac1d81be4776fae4cb68b6fa330e93bd8de388b38455d569159bcd166df030a6dfedf28caf4608de7243f5df2c76f6680c301d819dc67d24d2f780432a931700a253b0a5b075195c6dbfd1fe17a1c11a3dffa872a07b877adc66d069fffb6d8326e1998c5a337c3d530250cae335ceffcf81dc438a47e73490d050a053813dbe6674e42c91ae94b4a88144f36adc1b08b4bcd6ddf4058c4e08d4dc83d5fbd843ee27eaf50b297c220350260d9abbeeb6deb921e50cae0ea590cfb6f00fb3c71520f565bb769705e2481ef27cf537d29f163c9fe3d39ed9fd18dc8b0c976cd302283e430807a9d751357f89092532d89fe280c69ad36e3541b5da9dea13fd19d0434c760fe295dfd9b9e63453c7853914c50b1b77ccd4b33c8b1f31fcb1aec040ffe2f9d728d8ea84297bac2e22230ebd1488c503b05b2e433cc37ce9fc123b7d3eb244b4549e9a841e73b664c8f6621ea5a4c9ff9c1da032255311f2c063a682baf4c97e7ba552bf71af4bd64f43872b846d15c65c487089be272cfa24a33f8c50930ea0bc4b089505fb8e97ded0e7e64a5ce897da6b940df4c3dddb8b4871d773f6ebf02058518c55c19aadb0f266caf18777ae68d2bfcfb2225961fcd10538ba664fd053a443320072707533ab761b9397bd0559126b84fe9196463ae50633017ea2d80940311d9c867102b1017f34af1965d8eb61be616a0d40656e2bbb750aee6f74f788c8acb2578e8686f5f8da6a19e979c152b7ee7c7f16902120588e2ff630144b5f929ffc593e946d9717c5968aa16c2d73d689fb5cce117acda3e23e5e0116de1cb6bddfa1a84cefb22c1e2c3753017696f27b9aec5d44f15411247643b84dd4410e784b4eb5b9c68fea671976f9b51c6526e2ddb40659611b0b3bcc7e249c77396fdb8c864ea9318f9de7fd3936fcbdc732c2f8b9556ec9afeb15d5e2df890351d66074d53dddc6e8dba8c91d733623ac95a49eb69c7de37ff2364ccddb01f6500750a012c2acf32a9f6bbd9e92d17ef858fbc34575db414ea42ad87a65b11ae5506469db256c421328f45aec73bdf18562447dc2840bbe9fc84dedd0fe6276fa174f21210d40193530ec7a70a9e60bfd6b00cba4d483be59950f16fa0dbd089b5fd0bb078badfcf42270cc62fe37be22b0d81f755263d74636fa466d2574ca62b58c649936d21e949de73ea45df3acade6609413f56fc218d6f11947bf1fd629d38d8acce90ee3c1a51117601ae126bec537e3e76ce7ecc53cfeefee8aaa104aa853a65aadf27bac9849ee0122793b11cd8e4f32fb07afa39e439cb738c30a6df958160aac15c26032a61aaf614b2e6601581fb0ab8d115e045005dee3df8ea42643cbcbb0b111130c42c94b7e874cfee50d5c2eb13b3a38c417fce9d740b7d43120431a7d44bc3934ee87b112401cbee3553837b6a0b4b3faaceb46eca4064301c8060870350e256ac9d5557f674536b9d9717a82fa211e7dfb52ca410d8a4f2f6b733c2a082f247538a6c40f56cf64204e62515db692f32733ff6f4b0787ef305d5e80881375467ae603ac3600e688c42f89a4fea4fdda09a8d59e19457c654a98c8129a8c65bae3310af2b170729e18400c915d0a2f4c4fc51747846630b95ec181228bda7ef48ad389815aa82de6c4a3b0746c28c01f9ec697ff17f095e1cf9d2fe78fdab9cbb1ca7aefc8af6a0cd98444735fad79e394a8f9c2fd358c3cde4ca6d57a620d0bb52dc6ff93f034b596f407c21511cc2c5ec8b0ede7f5c0acca61939ac7f2cad820c15133e69507eaa739e9a88936f4a74f0ad1574a1591f31f582a76157d89805cb3ba5e8d10509bf7a08e928653b4f05ba797a06765b74c8759fc34178624c08a2b99e59bcff5d33af2b0f9176b56c35f4da31c751a4c2fd88a1997cd9fc9bbf78220731d4c8cea23be1fd29c36b34d8458b7021ebcfafdc7e54096e517da3eb684298f742532d776164d9c9658e5faca0a3b08afca1bc27ed357884f49fe51bd0c38057f4288f1917e36e3865310b5eed140aef6150ae363293cf7467abd5e06cd7af5e2c49e7c5253a1155741e380bccb023a0faed93d9a64512d72436f1ef4ac0904a413e45164c23413bd57274a0a951c41a9a43aed094d4ea5c480ce64663cc9d36723179e2b19a48e9277a6591bbd888a06e0f2f142cd4495be4ba7274d69ba32a2788b935b2f18c5f336cb9de062829e2e0bb476efb36c3f53a766c14314f31637a464ac59d378ad7f51bef8d88715613653a427038e0d3e4dc3948bb1d70eb55c91c92f7510b1c0387253b458d2c90d17238f9eb239c680179a6c1e0759be367963e3b4d7395fd3911626582a094e6a8d0e746242f94267a4c57d5b2360ce3a6f7f3e3c10e124a54ed24d1585bc7b731cf731c94ee00ebf070b999b9bf28d76bfec9dcf12fcce2b9c4444c706ec6b943b5f39e9151a764ba1cd0cd6c1c7cdc3aa824cf17da705be27a18fbee41be39d6ae4dd4312f5f4bfee2c5bb21d941666f9d79b0f80c9b1bace84a05d2b0e3be1c3fd04d72b4b0124595c435813969d413960fddc858730a433383f3bc0472cb7683ea569e001f00"/3584, 0xe00) sendfile(r2, r3, 0x0, 0x11f06) write$UHID_INPUT(r2, &(0x7f0000000700)={0x8, {"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", 0x1000}}, 0x1006) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x300, 0x190, 0x0, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x10001}, @window={0x3, 0x7, 0x4}, @sack_perm, @sack_perm], 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49468ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", "685a228f", "be0ea450d5a5fd03"}, 0x38) recvfrom$inet6(r4, &(0x7f00000002c0)=""/228, 0xe4, 0x7, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x300, 0x190, 0x0, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) shutdown(r4, 0xe2bc84d436f38c44) creat(&(0x7f00000001c0)='./file0\x00', 0x42) setsockopt$inet6_tcp_int(r4, 0x6, 0x10, &(0x7f00000000c0)=0x7, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x9, &(0x7f0000000040)=[{0xbb, 0x2}, {0x80, 0x4, 0xd2, 0xff}, {0x3, 0x1, 0x62, 0x5}, {0xfffb, 0x1, 0xe1, 0x5}, {0x6, 0x80, 0x5, 0x5}, {0xffff, 0x0, 0x0, 0x746}, {0x9, 0x3f, 0x7, 0x800}, {0xc1, 0x3, 0x5, 0x4}, {0x91d6, 0x40, 0x8, 0x1}]}, 0x10) [ 1542.717163][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1542.725338][ T1528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1542.732981][ T1528] 8021q: adding VLAN 0 to HW filter on device team0 [ 1542.745548][ T1528] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1542.761278][ T1529] validate_nla: 2 callbacks suppressed [ 1542.761291][ T1529] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 1542.860056][ T26] audit: type=1800 audit(1679567053.088:451): pid=1558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=1195 res=0 errno=0 [ 1542.865589][ T1558] Cannot find add_set index 0 as target [ 1542.948164][ T1560] Cannot find add_set index 0 as target 10:24:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49468ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", "685a228f", "be0ea450d5a5fd03"}, 0x38) recvfrom$inet6(r0, &(0x7f00000002c0)=""/228, 0xe4, 0x7, 0x0, 0x0) shutdown(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = open(&(0x7f0000000300)='./file0\x00', 0x42c2, 0x42) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x400000, 0x0) write(r2, &(0x7f0000001400)="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"/3584, 0xe00) sendfile(r2, r3, 0x0, 0x11f06) write$UHID_INPUT(r2, &(0x7f0000000700)={0x8, {"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", 0x1000}}, 0x1006) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x300, 0x190, 0x0, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x10001}, @window={0x3, 0x7, 0x4}, @sack_perm, @sack_perm], 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49468ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", "685a228f", "be0ea450d5a5fd03"}, 0x38) recvfrom$inet6(r4, &(0x7f00000002c0)=""/228, 0xe4, 0x7, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x300, 0x190, 0x0, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) shutdown(r4, 0xe2bc84d436f38c44) creat(&(0x7f00000001c0)='./file0\x00', 0x42) setsockopt$inet6_tcp_int(r4, 0x6, 0x10, &(0x7f00000000c0)=0x7, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x9, &(0x7f0000000040)=[{0xbb, 0x2}, {0x80, 0x4, 0xd2, 0xff}, {0x3, 0x1, 0x62, 0x5}, {0xfffb, 0x1, 0xe1, 0x5}, {0x6, 0x80, 0x5, 0x5}, {0xffff, 0x0, 0x0, 0x746}, {0x9, 0x3f, 0x7, 0x800}, {0xc1, 0x3, 0x5, 0x4}, {0x91d6, 0x40, 0x8, 0x1}]}, 0x10) [ 1543.045286][ T1530] __nla_validate_parse: 5 callbacks suppressed [ 1543.045303][ T1530] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1543.083351][ T1536] bridge0: port 3(erspan0) entered blocking state [ 1543.089868][ T1536] bridge0: port 3(erspan0) entered forwarding state [ 1543.097866][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1543.106816][ T1536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1543.114410][ T1536] 8021q: adding VLAN 0 to HW filter on device team0 [ 1543.123793][ T1536] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1543.136465][ T26] audit: type=1800 audit(1679567053.348:452): pid=1562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1190 res=0 errno=0 [ 1543.140670][ T1537] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1543.170667][ T1562] Cannot find add_set index 0 as target [ 1543.216822][ T1537] bridge0: port 3(erspan0) entered disabled state [ 1543.234662][ T1564] Cannot find add_set index 0 as target [ 1543.374401][ T1538] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1543.390944][ T1543] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 10:24:13 executing program 2: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @hyper, 0x0, 0x2000000, 0x3000000, 0x0, 0x1000000000005}) 10:24:13 executing program 2: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @hyper, 0x0, 0x2000000, 0x1200000, 0x0, 0x1000000000005}) 10:24:13 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1543.417219][ T1543] infiniband syz2: set active [ 1543.423399][ T1543] infiniband syz2: set active [ 1543.436511][ T1543] bridge0: port 3(erspan0) entered blocking state [ 1543.443042][ T1543] bridge0: port 3(erspan0) entered forwarding state [ 1543.451992][ T1543] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1543.460988][ T1543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1543.468503][ T1543] 8021q: adding VLAN 0 to HW filter on device team0 [ 1543.478487][ T1543] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1543.495157][ T1547] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1543.537016][ T1547] bridge0: port 3(erspan0) entered disabled state [ 1543.557172][ T1547] infiniband syz2: set down 10:24:13 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) 10:24:14 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1543.848277][ T1550] bridge0: port 3(erspan0) entered blocking state [ 1543.854843][ T1550] bridge0: port 3(erspan0) entered forwarding state [ 1543.862758][ T1550] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1543.870557][ T1550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1543.878141][ T1550] 8021q: adding VLAN 0 to HW filter on device team0 [ 1543.888062][T12615] ip6_vti0 speed is unknown, defaulting to 1000 10:24:14 executing program 3: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @hyper, 0x0, 0x2000000, 0x2001, 0x0, 0x1000000000005}) [ 1543.896037][ T1550] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1543.912370][ T1548] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1543.922876][ T1552] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 10:24:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r1 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000080)={0x8, 'veth0_to_hsr\x00', {'virt_wifi0\x00'}, 0x454}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49468ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", "685a228f", "be0ea450d5a5fd03"}, 0x38) recvfrom$inet6(r0, &(0x7f00000002c0)=""/228, 0xe4, 0x7, 0x0, 0x0) shutdown(r0, 0x0) [ 1544.082041][ T1552] bridge0: port 3(erspan0) entered disabled state 10:24:14 executing program 3: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7ab, &(0x7f0000000640)={{@my=0x1}, @hyper, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}) [ 1544.612884][ T1551] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1544.621787][ T1553] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1544.644523][ T1554] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:24:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) 10:24:14 executing program 3: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7ab, &(0x7f0000000640)={{@my=0x1}, @hyper, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}) 10:24:14 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) 10:24:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1544.681180][ T1572] bridge0: port 3(erspan0) entered blocking state [ 1544.687848][ T1572] bridge0: port 3(erspan0) entered forwarding state [ 1544.696469][ T1572] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1544.715903][ T1572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1544.753850][ T1572] 8021q: adding VLAN 0 to HW filter on device team0 [ 1544.763143][ T1572] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1544.782763][ T1573] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1544.895588][ T1573] bridge0: port 3(erspan0) entered disabled state [ 1544.970966][ T1205] ieee802154 phy0 wpan0: encryption failed: -22 [ 1544.977312][ T1205] ieee802154 phy1 wpan1: encryption failed: -22 10:24:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1545.713567][ T1576] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1545.731979][ T5171] ip6_vti0 speed is unknown, defaulting to 1000 [ 1545.749957][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1545.814776][ T1581] infiniband syz2: set active [ 1545.835243][ T1581] infiniband syz2: set active [ 1545.885634][ T1581] bridge0: port 3(erspan0) entered blocking state [ 1545.892191][ T1581] bridge0: port 3(erspan0) entered forwarding state [ 1545.947434][ T1581] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1545.987869][ T1581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1546.018861][ T1581] 8021q: adding VLAN 0 to HW filter on device team0 [ 1546.064350][ T1581] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1546.183397][ T1579] bridge0: port 3(erspan0) entered blocking state [ 1546.189926][ T1579] bridge0: port 3(erspan0) entered forwarding state [ 1546.230525][ T1579] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1546.240144][ T1579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1546.247782][ T1579] 8021q: adding VLAN 0 to HW filter on device team0 [ 1546.301737][ T1579] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1546.334174][ T1583] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1546.418350][ T1583] bridge0: port 3(erspan0) entered disabled state [ 1546.462029][ T1583] infiniband syz2: set down 10:24:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1546.638035][ T1582] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1546.705757][ T1582] bridge0: port 3(erspan0) entered disabled state 10:24:17 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1546.846353][ T1586] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1546.876839][ T1605] bridge0: port 3(erspan0) entered blocking state [ 1546.883375][ T1605] bridge0: port 3(erspan0) entered forwarding state [ 1546.897455][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1546.905579][ T1605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1546.913917][ T1605] 8021q: adding VLAN 0 to HW filter on device team0 [ 1546.922749][ T1605] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1546.938618][ T1607] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1546.948278][ T1608] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1547.041387][ T1608] bridge0: port 3(erspan0) entered disabled state 10:24:17 executing program 3: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7ab, &(0x7f0000000640)={{@my=0x1}, @hyper, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}) [ 1547.333011][ T1609] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1547.342351][ T1611] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1547.356183][ T1612] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1547.375465][T32159] ip6_vti0 speed is unknown, defaulting to 1000 10:24:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) 10:24:17 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x1, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1547.414479][ T1620] bridge0: port 3(erspan0) entered blocking state [ 1547.421019][ T1620] bridge0: port 3(erspan0) entered forwarding state 10:24:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x1, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1547.457817][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1547.494417][ T1620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1547.517200][ T1620] 8021q: adding VLAN 0 to HW filter on device team0 [ 1547.530012][ T1620] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1547.916180][ T1621] bridge0: port 3(erspan0) entered disabled state [ 1548.423759][ T1622] __nla_validate_parse: 1 callbacks suppressed [ 1548.423775][ T1622] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 10:24:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x1, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1548.464757][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1548.519084][ T1625] infiniband syz2: set active [ 1548.534373][ T1625] infiniband syz2: set active [ 1548.567507][ T1625] bridge0: port 3(erspan0) entered blocking state [ 1548.574073][ T1625] bridge0: port 3(erspan0) entered forwarding state [ 1548.609714][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1548.634818][ T1625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1548.658722][ T1625] 8021q: adding VLAN 0 to HW filter on device team0 [ 1548.682610][ T1625] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1548.724270][ T1626] validate_nla: 2 callbacks suppressed [ 1548.724347][ T1626] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1548.876082][ T1626] bridge0: port 3(erspan0) entered disabled state [ 1548.916240][ T1626] infiniband syz2: set down 10:24:19 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1549.193755][ T1630] bridge0: port 3(erspan0) entered blocking state [ 1549.200283][ T1630] bridge0: port 3(erspan0) entered forwarding state [ 1549.208869][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1549.218948][ T1630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1549.227738][ T1630] 8021q: adding VLAN 0 to HW filter on device team0 [ 1549.243029][ T1630] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1549.263110][ T1631] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1549.376559][ T1631] bridge0: port 3(erspan0) entered disabled state 10:24:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x1, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1549.548159][ T1632] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1549.557797][T23098] ip6_vti0 speed is unknown, defaulting to 1000 [ 1549.574637][ T1646] bridge0: port 3(erspan0) entered blocking state [ 1549.581233][ T1646] bridge0: port 3(erspan0) entered forwarding state [ 1549.589627][ T1646] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1549.597327][ T1646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1549.605316][ T1646] 8021q: adding VLAN 0 to HW filter on device team0 [ 1549.614722][ T1646] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1549.643758][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1549.651752][ T1647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1549.658985][ T1647] 8021q: adding VLAN 0 to HW filter on device team0 [ 1549.668143][ T1647] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1549.684916][ T1648] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1549.811884][ T1648] bridge0: port 3(erspan0) entered disabled state [ 1550.177785][ T1649] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1550.186788][ T1650] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 10:24:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) 10:24:20 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a00"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) 10:24:20 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(0xffffffffffffffff, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1550.409191][ T1651] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1550.423080][ T1652] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1550.432581][ T1653] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1550.505862][ T1660] bridge0: port 3(erspan0) entered blocking state [ 1550.512497][ T1660] bridge0: port 3(erspan0) entered forwarding state [ 1550.520950][ T1660] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1550.530060][ T1660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1550.537558][ T1660] 8021q: adding VLAN 0 to HW filter on device team0 [ 1550.545792][ T1660] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1550.562427][ T1661] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1551.255354][ T1661] bridge0: port 3(erspan0) entered disabled state 10:24:21 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49468ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", "685a228f", "be0ea450d5a5fd03"}, 0x38) recvfrom$inet6(r0, &(0x7f00000002c0)=""/228, 0xe4, 0x7, 0x0, 0x0) shutdown(r0, 0x0) r1 = socket(0x10, 0x400000000080803, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x3) write$binfmt_script(r2, &(0x7f0000000380)=ANY=[], 0x191) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x3c, &(0x7f0000000400)=[@in={0x2, 0x0, @dev}, @in6={0xa, 0x0, 0x0, @loopback}, @in={0x2, 0x0, @loopback}]}, &(0x7f0000000600)=0x10) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000001c00)={r7}, &(0x7f0000009040)=0x14) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000000)={r7, 0x0, 0x800, 0x4, 0x3, 0x8000}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000200)={0x80, 0xb, 0x32, 0x9, r7}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000740)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], &(0x7f0000000380)=0xff) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={r7, 0x7}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={r7, 0x3}, &(0x7f0000000100)=0x8) [ 1551.676575][ T1662] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1551.702782][ T1665] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1551.725017][ T1665] infiniband syz2: set active [ 1551.730051][ T1665] infiniband syz2: set active [ 1551.739063][ T1665] bridge0: port 3(erspan0) entered blocking state [ 1551.745591][ T1665] bridge0: port 3(erspan0) entered forwarding state [ 1551.753794][ T1665] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1551.761785][ T1665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1551.769056][ T1665] 8021q: adding VLAN 0 to HW filter on device team0 10:24:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(0xffffffffffffffff, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1551.778221][ T1665] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1551.795266][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1551.803961][ T1666] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1551.837252][ T1666] bridge0: port 3(erspan0) entered disabled state [ 1551.853336][ T1666] infiniband syz2: set down 10:24:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1552.453455][T32075] ip6_vti0 speed is unknown, defaulting to 1000 [ 1552.478311][ T1670] bridge0: port 3(erspan0) entered blocking state [ 1552.484863][ T1670] bridge0: port 3(erspan0) entered forwarding state [ 1552.492732][ T1670] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1552.500850][ T1670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1552.508195][ T1670] 8021q: adding VLAN 0 to HW filter on device team0 [ 1552.516935][ T1670] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1552.533155][ T1671] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1552.555817][ T1671] bridge0: port 3(erspan0) entered disabled state [ 1552.588871][ T1672] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 10:24:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd0603"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1552.611423][ T1682] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1552.619579][ T1682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1552.627013][ T1682] 8021q: adding VLAN 0 to HW filter on device team0 [ 1552.679488][ T1682] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1552.695221][ T1684] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 10:24:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(0xffffffffffffffff, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1553.000791][ T1686] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1553.060599][ T1687] bridge0: port 3(erspan0) entered blocking state [ 1553.067146][ T1687] bridge0: port 3(erspan0) entered forwarding state [ 1553.085231][ T1687] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1553.096207][ T1687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1553.107675][ T1687] 8021q: adding VLAN 0 to HW filter on device team0 [ 1553.120684][ T1687] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1553.136805][ T1689] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1553.147742][ T1691] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1553.701696][ T1691] bridge0: port 3(erspan0) entered disabled state 10:24:24 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(0xffffffffffffffff, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c00"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) 10:24:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000000800"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1553.847360][ T1690] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1553.874691][ T1707] bridge0: port 3(erspan0) entered blocking state [ 1553.881251][ T1707] bridge0: port 3(erspan0) entered forwarding state [ 1553.889236][ T1707] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1553.897339][ T1707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1553.905155][ T1707] 8021q: adding VLAN 0 to HW filter on device team0 [ 1553.915288][ T1707] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1553.931395][ T1708] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1553.994982][ T1708] bridge0: port 3(erspan0) entered disabled state 10:24:25 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = socket(0x10, 0x400000000080803, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x8, 0x1, 0x3ed, 0x8, {{0x13, 0x4, 0x0, 0x2, 0x4c, 0x66, 0x0, 0x7, 0x29, 0x0, @multicast1, @multicast1, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x34, 0x7c, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@multicast1, 0x200}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@multicast2, 0x6}, {@private=0xa010101, 0x2}, {@loopback, 0xfffffff9}]}]}}}}}) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49468ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", "685a228f", "be0ea450d5a5fd03"}, 0x38) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f00000001c0)=0x200, 0x4) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r4}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)) r6 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0) splice(0xffffffffffffffff, &(0x7f0000000dc0)=0x3, 0xffffffffffffffff, &(0x7f0000000e40)=0x2, 0x4, 0x8) r7 = open(&(0x7f0000000300)='./file0\x00', 0x42c2, 0x42) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r7, &(0x7f0000001400)="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"/3584, 0xe00) sendfile(r7, r8, 0x0, 0x11f06) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x10, r7, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000006c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x24000091, 0x1, {0x0, r9}}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000d80)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r2, 0x0, &(0x7f0000000d40)={&(0x7f00000003c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000440)=""/113, 0x71}, {&(0x7f00000007c0)=""/6, 0x6}, {&(0x7f0000000800)=""/87, 0x57}, {&(0x7f0000000880)=""/72, 0x48}, {&(0x7f0000000900)=""/247, 0xf7}, {&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/235, 0xeb}, {&(0x7f0000000b80)=""/56, 0x38}], 0x8, &(0x7f0000000c40)=""/225, 0xe1}, 0x0, 0x2, 0x0, {0x0, r9}}, 0x6) recvfrom$inet6(r0, &(0x7f00000002c0)=""/228, 0xe4, 0x7, 0x0, 0x0) shutdown(r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r10 = syz_open_dev$audion(&(0x7f0000000080), 0xe3, 0x400200) setsockopt$inet6_mtu(r10, 0x29, 0x17, &(0x7f0000000100)=0x3, 0x4) [ 1554.841401][ T1709] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1554.850923][T22782] ip6_vti0 speed is unknown, defaulting to 1000 [ 1554.870331][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1554.893255][ T1712] infiniband syz2: set active [ 1554.898355][ T1712] infiniband syz2: set active [ 1554.915469][ T1712] bridge0: port 3(erspan0) entered blocking state [ 1554.922019][ T1712] bridge0: port 3(erspan0) entered forwarding state [ 1554.934966][ T1712] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1554.943496][ T1712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1554.955266][ T1712] 8021q: adding VLAN 0 to HW filter on device team0 [ 1554.965710][ T1712] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1554.987295][ T1713] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1555.010918][ T1713] bridge0: port 3(erspan0) entered disabled state [ 1555.025942][ T1713] infiniband syz2: set down [ 1555.067649][ T26] audit: type=1800 audit(1679567065.288:453): pid=1746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1168 res=0 errno=0 [ 1555.088786][ T26] audit: type=1804 audit(1679567065.288:454): pid=1746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3311786872/syzkaller.zJXpwY/753/file0" dev="sda1" ino=1168 res=1 errno=0 10:24:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1555.329875][ T1717] bridge0: port 3(erspan0) entered blocking state [ 1555.336395][ T1717] bridge0: port 3(erspan0) entered forwarding state [ 1555.344500][ T1717] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1555.352480][ T1717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1555.361830][ T1717] 8021q: adding VLAN 0 to HW filter on device team0 [ 1555.370502][ T1717] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1555.385987][ T1718] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1555.409679][ T1718] bridge0: port 3(erspan0) entered disabled state 10:24:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1555.560574][ T1719] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1555.583867][ T1724] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1555.591930][ T1724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1555.599302][ T1724] 8021q: adding VLAN 0 to HW filter on device team0 [ 1555.612031][ T1724] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1555.627759][ T1725] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 10:24:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d370000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1555.904456][ T1726] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1555.941900][ T1734] bridge0: port 3(erspan0) entered blocking state [ 1555.948406][ T1734] bridge0: port 3(erspan0) entered forwarding state [ 1555.956167][ T1734] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1555.963910][ T1734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1555.971401][ T1734] 8021q: adding VLAN 0 to HW filter on device team0 [ 1555.983306][ T1734] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1555.999137][ T1736] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1556.141007][ T1736] bridge0: port 3(erspan0) entered disabled state 10:24:26 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d370000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1556.667170][ T1737] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1556.676748][ T1738] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1556.693535][ T1740] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:24:26 executing program 2: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7ab, &(0x7f0000000640)={{@my=0x1}, @hyper, 0x0, 0x0, 0x0, 0x3}) [ 1556.718687][T32161] ip6_vti0 speed is unknown, defaulting to 1000 10:24:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000000800"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) 10:24:27 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1556.759986][ T1749] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1556.797269][ T1749] infiniband syz2: set active [ 1556.802231][ T1749] infiniband syz2: set active [ 1556.828642][ T1749] bridge0: port 3(erspan0) entered blocking state [ 1556.835230][ T1749] bridge0: port 3(erspan0) entered forwarding state [ 1556.896381][ T1749] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1556.927696][ T1749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1556.984646][ T1749] 8021q: adding VLAN 0 to HW filter on device team0 [ 1557.025535][ T1749] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1557.078586][ T1750] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1557.301174][ T1750] bridge0: port 3(erspan0) entered disabled state [ 1557.378033][ T1750] infiniband syz2: set down 10:24:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{0x0}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1557.931166][ T1756] bridge0: port 3(erspan0) entered blocking state [ 1557.937700][ T1756] bridge0: port 3(erspan0) entered forwarding state [ 1557.968756][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1557.985318][ T1756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1558.002369][ T1756] 8021q: adding VLAN 0 to HW filter on device team0 [ 1558.019711][ T1756] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1558.035421][ T1757] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1558.096041][ T1757] bridge0: port 3(erspan0) entered disabled state 10:24:28 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d370000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1558.225523][ T1758] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1558.267655][ T1763] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1558.276176][ T1763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1558.284247][ T1763] 8021q: adding VLAN 0 to HW filter on device team0 [ 1558.293132][ T1763] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1558.309228][ T1764] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 10:24:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d370000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1558.673718][ T1765] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1558.687680][T22089] ip6_vti0 speed is unknown, defaulting to 1000 [ 1558.707465][ T1774] bridge0: port 3(erspan0) entered blocking state [ 1558.714018][ T1774] bridge0: port 3(erspan0) entered forwarding state [ 1558.722097][ T1774] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1558.744721][ T1774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1558.764238][ T1774] 8021q: adding VLAN 0 to HW filter on device team0 [ 1558.778148][ T1774] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1558.798262][ T1777] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1558.933593][ T1777] bridge0: port 3(erspan0) entered disabled state 10:24:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d370000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1559.308201][ T1781] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1559.366128][ T1782] bridge0: port 3(erspan0) entered blocking state [ 1559.372655][ T1782] bridge0: port 3(erspan0) entered forwarding state [ 1559.386170][ T1782] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1559.395433][ T1782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1559.403136][ T1782] 8021q: adding VLAN 0 to HW filter on device team0 [ 1559.414144][ T1782] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1559.463801][ T1785] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1559.606574][ T1785] bridge0: port 3(erspan0) entered disabled state [ 1559.928114][ T1784] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1559.937690][ T1786] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1559.953035][ T1787] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 10:24:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000000800"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) 10:24:30 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000000800"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1559.974448][ T1791] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1560.035500][ T1791] infiniband syz2: set active [ 1560.040590][ T1791] infiniband syz2: set active [ 1560.058800][ T1791] bridge0: port 3(erspan0) entered blocking state [ 1560.065755][ T1791] bridge0: port 3(erspan0) entered forwarding state [ 1560.074399][ T1791] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1560.084734][ T1791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1560.092238][ T1791] 8021q: adding VLAN 0 to HW filter on device team0 [ 1560.103101][ T1791] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1560.179035][ T1792] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1560.389482][ T1792] bridge0: port 3(erspan0) entered disabled state [ 1560.449539][ T1792] infiniband syz2: set down 10:24:31 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{0x0}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1560.895199][ T1797] bridge0: port 3(erspan0) entered blocking state [ 1560.902349][ T1797] bridge0: port 3(erspan0) entered forwarding state [ 1560.936219][ T1797] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1560.957142][ T1797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1560.971718][ T1797] 8021q: adding VLAN 0 to HW filter on device team0 [ 1560.995489][ T1797] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1561.032840][ T1798] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1561.109125][ T1798] bridge0: port 3(erspan0) entered disabled state 10:24:31 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d370000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1561.282507][ T1799] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1561.292195][T32414] ip6_vti0 speed is unknown, defaulting to 1000 [ 1561.312352][ T1804] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1561.322494][ T1804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1561.334154][ T1804] 8021q: adding VLAN 0 to HW filter on device team0 [ 1561.343415][ T1804] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1561.363489][ T1805] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 10:24:31 executing program 3: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7ab, &(0x7f0000000640)={{@my=0x1}, @hyper, 0x0, 0x0, 0xff000000}) [ 1561.663728][ T1806] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 10:24:31 executing program 3: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @hyper, 0x6, 0x2000000, 0x0, 0x0, 0x1000000000005}) 10:24:31 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(0xffffffffffffffff, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1561.709736][ T1811] bridge0: port 3(erspan0) entered blocking state [ 1561.716276][ T1811] bridge0: port 3(erspan0) entered forwarding state [ 1561.754807][ T1811] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1561.777420][ T1811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1561.790392][ T1811] 8021q: adding VLAN 0 to HW filter on device team0 [ 1561.801274][ T1811] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1561.817131][ T1812] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1562.408386][ T1812] bridge0: port 3(erspan0) entered disabled state 10:24:32 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7ab, &(0x7f0000000640)={{@my=0x1}, @hyper, 0x0, 0x0, 0x1000000}) [ 1562.637455][ T1813] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1562.647910][ T1823] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1562.656657][ T1824] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1562.665588][ T1825] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1562.675246][ T1826] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:24:32 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @hyper, 0x2, 0x2000000, 0x0, 0x0, 0x1000000000005}) 10:24:32 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) 10:24:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1562.697234][ T1830] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 10:24:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1562.745042][ T1830] infiniband syz2: set active [ 1562.779254][ T1830] infiniband syz2: set active [ 1562.792395][ T1830] bridge0: port 3(erspan0) entered blocking state [ 1562.798842][ T1830] bridge0: port 3(erspan0) entered forwarding state [ 1562.806729][ T1830] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1562.814945][ T1830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1562.822336][ T1830] 8021q: adding VLAN 0 to HW filter on device team0 [ 1562.831200][ T1830] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1562.942041][ T1831] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1563.150021][ T1831] bridge0: port 3(erspan0) entered disabled state [ 1563.225397][ T1831] infiniband syz2: set down 10:24:33 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{0x0}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1563.749122][T31973] ip6_vti0 speed is unknown, defaulting to 1000 [ 1563.781467][ T1835] bridge0: port 3(erspan0) entered blocking state [ 1563.787977][ T1835] bridge0: port 3(erspan0) entered forwarding state [ 1563.814414][ T1835] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1563.831125][ T1835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1563.846403][ T1835] 8021q: adding VLAN 0 to HW filter on device team0 [ 1563.867352][ T1835] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1563.904509][ T1836] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1564.033718][ T1836] bridge0: port 3(erspan0) entered disabled state 10:24:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1564.168888][ T1837] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1564.192763][ T1846] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1564.200734][ T1846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1564.208115][ T1846] 8021q: adding VLAN 0 to HW filter on device team0 [ 1564.217116][ T1846] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 10:24:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, 0x0, 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1564.546356][ T1862] bridge0: port 3(erspan0) entered blocking state [ 1564.553107][ T1862] bridge0: port 3(erspan0) entered forwarding state [ 1564.562270][ T1862] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1564.576915][ T1862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1564.586651][ T1862] 8021q: adding VLAN 0 to HW filter on device team0 [ 1564.603776][ T1862] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1564.658888][ T1864] bridge0: port 3(erspan0) entered blocking state [ 1564.665436][ T1864] bridge0: port 3(erspan0) entered forwarding state [ 1564.681213][ T1864] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1564.694024][ T1864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1564.702923][ T1864] 8021q: adding VLAN 0 to HW filter on device team0 [ 1564.718518][ T1864] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1564.742311][ T1863] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1564.755052][ T1865] validate_nla: 1 callbacks suppressed [ 1564.755065][ T1865] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1564.916739][ T1865] bridge0: port 3(erspan0) entered disabled state [ 1565.285980][ T1866] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1565.299296][ T1867] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1565.411969][ T1867] bridge0: port 3(erspan0) entered disabled state 10:24:35 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1565.606817][ T1868] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1565.617055][ T1869] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1565.632123][ T1870] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1565.645964][T21973] ip6_vti0 speed is unknown, defaulting to 1000 10:24:35 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, 0x0, 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) 10:24:35 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, 0x0, 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1565.672705][ T1875] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1565.703969][ T1875] infiniband syz2: set active [ 1565.709093][ T1875] infiniband syz2: set active [ 1565.728168][ T1875] bridge0: port 3(erspan0) entered blocking state [ 1565.734643][ T1875] bridge0: port 3(erspan0) entered forwarding state [ 1565.783883][ T1875] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1565.820550][ T1875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1565.843000][ T1875] 8021q: adding VLAN 0 to HW filter on device team0 [ 1565.882775][ T1875] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1565.948408][ T1876] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1566.112399][ T1876] bridge0: port 3(erspan0) entered disabled state [ 1566.169862][ T1876] infiniband syz2: set down 10:24:36 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1566.745632][ T1880] bridge0: port 3(erspan0) entered blocking state [ 1566.752204][ T1880] bridge0: port 3(erspan0) entered forwarding state [ 1566.766220][ T1880] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1566.767919][ T1880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1566.781223][ T1880] 8021q: adding VLAN 0 to HW filter on device team0 [ 1566.785227][ T1880] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1566.785287][ T1881] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1566.938382][ T1881] bridge0: port 3(erspan0) entered disabled state 10:24:37 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7ab, &(0x7f0000000640)={{@my=0x1}, @hyper, 0x0, 0x500000000000000}) [ 1567.087114][ T1882] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1567.116768][ T1887] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1567.129100][ T1887] 8021q: adding VLAN 0 to HW filter on device bond0 10:24:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1567.137661][ T1887] 8021q: adding VLAN 0 to HW filter on device team0 [ 1567.164974][ T1887] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1567.181120][ T1888] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 1567.504407][ T1889] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1567.522703][T32071] ip6_vti0 speed is unknown, defaulting to 1000 [ 1567.528959][T32375] ip6_vti0 speed is unknown, defaulting to 1000 [ 1567.535337][ T1899] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 10:24:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(0xffffffffffffffff, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, 0x0}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1567.558303][ T1901] bridge0: port 3(erspan0) entered blocking state [ 1567.564831][ T1901] bridge0: port 3(erspan0) entered forwarding state [ 1567.580885][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1567.589306][ T1901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1567.605332][ T1901] 8021q: adding VLAN 0 to HW filter on device team0 [ 1567.625353][ T1901] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1567.677487][ T1902] bridge0: port 3(erspan0) entered blocking state [ 1567.684028][ T1902] bridge0: port 3(erspan0) entered forwarding state [ 1567.718882][ T1902] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1567.758725][ T1902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1567.871537][ T1902] 8021q: adding VLAN 0 to HW filter on device team0 [ 1568.083253][ T1902] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1568.195886][ T1903] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1568.204787][ T1904] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1568.275588][ T1904] bridge0: port 3(erspan0) entered disabled state 10:24:38 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1568.460438][ T1905] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1568.470114][ T1906] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1568.542444][ T1906] bridge0: port 3(erspan0) entered disabled state 10:24:39 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(0xffffffffffffffff, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, 0x0}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) 10:24:39 executing program 2: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @hyper=0x700, 0x0, 0x2000000, 0x0, 0x0, 0x1000000000005}) [ 1568.750795][ T1907] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1568.760472][ T1909] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1568.780863][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 10:24:39 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1568.850621][ T1914] infiniband syz2: set active [ 1568.858552][ T1914] infiniband syz2: set active [ 1568.899243][ T1914] bridge0: port 3(erspan0) entered blocking state [ 1568.905803][ T1914] bridge0: port 3(erspan0) entered forwarding state [ 1568.934900][ T1914] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1568.997343][ T1914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1569.065679][ T1914] 8021q: adding VLAN 0 to HW filter on device team0 [ 1569.186557][ T1914] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1569.411924][ T1915] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1569.468154][ T1915] bridge0: port 3(erspan0) entered disabled state [ 1569.491987][ T1915] infiniband syz2: set down 10:24:39 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1569.702029][ T1921] bridge0: port 3(erspan0) entered blocking state [ 1569.708547][ T1921] bridge0: port 3(erspan0) entered forwarding state [ 1569.716617][ T1921] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1569.724932][ T1921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1569.732990][ T1921] 8021q: adding VLAN 0 to HW filter on device team0 [ 1569.741761][ T1921] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1569.799347][ T1922] bridge0: port 3(erspan0) entered disabled state 10:24:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1569.933960][ T1923] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1569.943616][T32160] ip6_vti0 speed is unknown, defaulting to 1000 [ 1569.961615][ T1929] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1569.969983][ T1929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1569.977344][ T1929] 8021q: adding VLAN 0 to HW filter on device team0 [ 1569.987371][ T1929] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1570.003211][ T1930] validate_nla: 1 callbacks suppressed [ 1570.003222][ T1930] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 10:24:40 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(0xffffffffffffffff, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, 0x0, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1570.301896][ T1935] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1570.322135][ T1936] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1570.334136][ T1937] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:24:40 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1570.357582][ T1947] bridge0: port 3(erspan0) entered blocking state [ 1570.364073][ T1947] bridge0: port 3(erspan0) entered forwarding state [ 1570.371784][ T1947] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1570.379465][ T1947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1570.386890][ T1947] 8021q: adding VLAN 0 to HW filter on device team0 [ 1570.396179][ T1947] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1570.412012][ T1949] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1571.079017][ T1949] bridge0: port 3(erspan0) entered disabled state 10:24:41 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(0xffffffffffffffff, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, 0x0}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1571.521006][ T1948] bridge0: port 3(erspan0) entered blocking state [ 1571.527644][ T1948] bridge0: port 3(erspan0) entered forwarding state [ 1571.562638][ T1948] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1571.580156][ T1948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1571.587526][ T1948] 8021q: adding VLAN 0 to HW filter on device team0 [ 1571.629684][ T1948] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1571.652410][ T1946] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1572.122661][ T1946] bridge0: port 3(erspan0) entered disabled state 10:24:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(0xffffffffffffffff, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, 0x0, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1572.267846][ T1951] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1572.287241][ T1954] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1572.310944][ T1954] infiniband syz2: set active [ 1572.315895][ T1954] infiniband syz2: set active [ 1572.327057][ T1954] bridge0: port 3(erspan0) entered blocking state [ 1572.333553][ T1954] bridge0: port 3(erspan0) entered forwarding state [ 1572.341190][ T1954] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1572.349580][ T1954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1572.356706][ T1954] 8021q: adding VLAN 0 to HW filter on device team0 [ 1572.365293][ T1954] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1572.381635][ T1955] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1572.796333][ T1955] bridge0: port 3(erspan0) entered disabled state [ 1572.894909][ T1955] infiniband syz2: set down 10:24:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1573.009700][T32372] ip6_vti0 speed is unknown, defaulting to 1000 [ 1573.031745][ T1959] bridge0: port 3(erspan0) entered blocking state [ 1573.038267][ T1959] bridge0: port 3(erspan0) entered forwarding state [ 1573.048762][ T1959] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1573.057066][ T1959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1573.066131][ T1959] 8021q: adding VLAN 0 to HW filter on device team0 [ 1573.075279][ T1959] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1573.091113][ T1960] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1573.114342][ T1960] bridge0: port 3(erspan0) entered disabled state 10:24:43 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1573.276942][ T1961] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1573.300381][ T1969] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1573.308363][ T1969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1573.315889][ T1969] 8021q: adding VLAN 0 to HW filter on device team0 [ 1573.327075][ T1969] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1573.343204][ T1971] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 10:24:43 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r2 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r5, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000240)) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r6, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r5, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1573.669663][ T1970] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1573.682517][ T1972] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:24:43 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1573.712361][ T1978] bridge0: port 3(erspan0) entered blocking state [ 1573.718853][ T1978] bridge0: port 3(erspan0) entered forwarding state [ 1573.726407][ T1978] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1573.734122][ T1978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1573.741647][ T1978] 8021q: adding VLAN 0 to HW filter on device team0 [ 1573.756893][ T1978] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1573.772826][ T1979] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1573.907648][ T1979] bridge0: port 3(erspan0) entered disabled state 10:24:44 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(0xffffffffffffffff, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, 0x0}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1574.425941][ T1988] bridge0: port 3(erspan0) entered blocking state [ 1574.432478][ T1988] bridge0: port 3(erspan0) entered forwarding state [ 1574.440146][ T1988] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1574.448142][ T1988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1574.456006][ T1988] 8021q: adding VLAN 0 to HW filter on device team0 [ 1574.466948][ T1988] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1574.482736][ T1989] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1575.166538][ T1989] bridge0: port 3(erspan0) entered disabled state 10:24:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(0xffffffffffffffff, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, 0x0, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1575.494041][T22953] ip6_vti0 speed is unknown, defaulting to 1000 [ 1575.503777][ T1992] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1575.540313][ T1992] infiniband syz2: set active [ 1575.545114][ T1992] infiniband syz2: set active [ 1575.563434][ T1992] bridge0: port 3(erspan0) entered blocking state [ 1575.569978][ T1992] bridge0: port 3(erspan0) entered forwarding state [ 1575.579120][ T1992] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1575.588613][ T1992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1575.622274][ T1992] 8021q: adding VLAN 0 to HW filter on device team0 [ 1575.680533][ T1992] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1575.728304][ T1993] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1576.084418][ T1993] bridge0: port 3(erspan0) entered disabled state [ 1576.103372][ T1993] infiniband syz2: set down 10:24:46 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1576.242142][ T2002] bridge0: port 3(erspan0) entered blocking state [ 1576.248719][ T2002] bridge0: port 3(erspan0) entered forwarding state [ 1576.257461][ T2002] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1576.266645][ T2002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1576.274598][ T2002] 8021q: adding VLAN 0 to HW filter on device team0 [ 1576.283634][ T2002] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1576.299244][ T2003] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 1576.360350][ T2003] bridge0: port 3(erspan0) entered disabled state 10:24:46 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) [ 1576.499141][ T2004] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1576.519105][ T2012] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1576.527591][ T2012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1576.537160][ T2012] 8021q: adding VLAN 0 to HW filter on device team0 [ 1576.546432][ T2012] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1576.564696][ T2013] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 1576.578233][ T2014] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 10:24:47 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(0xffffffffffffffff, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd7000000100000800000000000000080000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1576.768066][ T2018] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1576.777635][ T2020] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 10:24:47 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ftruncate(r0, 0x4) r3 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1576.811069][ T2026] bridge0: port 3(erspan0) entered blocking state [ 1576.817681][ T2026] bridge0: port 3(erspan0) entered forwarding state [ 1576.825302][ T2026] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1576.833355][ T2026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1576.841125][ T2026] 8021q: adding VLAN 0 to HW filter on device team0 [ 1576.850923][ T2026] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1576.866413][ T2027] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 1577.458113][ T2027] bridge0: port 3(erspan0) entered disabled state 10:24:47 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r2 = getpid() fsmount(r1, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r5, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000240)) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r6, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3000000013000100ffffffff00000000080000000000000014001c000000000000000021000000000000000104000000e5f2a0150e4072"], 0x30}], 0x1}, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r5, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1577.615899][ T2035] bridge0: port 3(erspan0) entered blocking state [ 1577.622412][ T2035] bridge0: port 3(erspan0) entered forwarding state [ 1577.630085][ T2035] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1577.637737][ T2035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1577.644827][ T2035] 8021q: adding VLAN 0 to HW filter on device team0 [ 1577.659206][T32415] ip6_vti0 speed is unknown, defaulting to 1000 [ 1577.668268][ T2035] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1577.683826][ T2036] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1577.738970][ T2036] bridge0: port 3(erspan0) entered disabled state 10:24:48 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(r0, 0x4) r3 = getpid() fsmount(0xffffffffffffffff, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000005600)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000002900d86d37000057d49c629ad0ea99a3fd06037a0000"], 0x18}}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000240)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0) sendmsg$netlink(r8, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000010025bd700000010000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000010c000000fdffffffffffffff"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r7, 0x0, 0x4000) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) sendfile(0xffffffffffffffff, r6, &(0x7f0000000340)=0x2, 0xffffffffffff7fff) [ 1577.998478][ T2039] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1578.031272][ T2039] infiniband syz2: set active [ 1578.036430][ T2039] infiniband syz2: set active [ 1578.053351][ T2039] bridge0: port 3(erspan0) entered blocking state [ 1578.059936][ T2039] bridge0: port 3(erspan0) entered forwarding state [ 1578.068020][ T2039] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1578.078259][ T2039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1578.088333][ T2039] 8021q: adding VLAN 0 to HW filter on device team0 [ 1578.106117][ T2039] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1578.122638][ T2040] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 1578.250727][ T27] INFO: task kworker/0:11:6230 blocked for more than 143 seconds. [ 1578.285949][ T27] Not tainted 6.3.0-rc3-syzkaller-00026-gfff5a5e7f528 #0 [ 1578.369241][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1578.463166][ T27] task:kworker/0:11 state:D stack:24680 pid:6230 ppid:2 flags:0x00004000 [ 1578.567203][ T27] Workqueue: infiniband ib_cache_event_task [ 1578.596781][ T27] Call Trace: [ 1578.603704][ T27] [ 1578.609066][ T27] __schedule+0xc91/0x5770 [ 1578.620015][ T27] ? io_schedule_timeout+0x150/0x150 [ 1578.627482][ T27] ? io_schedule_timeout+0x150/0x150 [ 1578.635009][ T27] ? preempt_schedule_common+0x45/0xb0 [ 1578.642690][ T27] schedule+0xde/0x1a0 [ 1578.647438][ T27] schedule_preempt_disabled+0x13/0x20 [ 1578.656993][ T27] __mutex_lock+0xa3b/0x1350 [ 1578.662682][ T27] ? rxe_query_port+0x12d/0x2d0 [ 1578.667732][ T27] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 1578.677367][ T27] ? __kmem_cache_alloc_node+0x48/0x320 [ 1578.683919][ T27] rxe_query_port+0x12d/0x2d0 [ 1578.688787][ T27] ib_query_port+0x427/0x8f0 [ 1578.697196][ T27] ib_cache_update.part.0+0xcf/0x920 [ 1578.703882][ T27] ? __ib_cache_gid_add+0x3b0/0x3b0 [ 1578.709264][ T27] ? lock_release+0x670/0x670 [ 1578.717899][ T27] ? lock_downgrade+0x690/0x690 [ 1578.723779][ T27] ? do_raw_spin_lock+0x124/0x2b0 [ 1578.728987][ T27] ib_cache_event_task+0x1b1/0x270 [ 1578.738294][ T27] process_one_work+0x991/0x15c0 [ 1578.744261][ T27] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1578.753608][ T27] ? spin_bug+0x1c0/0x1c0 [ 1578.758127][ T27] ? _raw_spin_lock_irq+0x45/0x50 [ 1578.764569][ T27] worker_thread+0x669/0x1090 [ 1578.772990][ T27] ? __kthread_parkme+0x163/0x220 [ 1578.778084][ T27] ? process_one_work+0x15c0/0x15c0 [ 1578.783566][ T27] kthread+0x2e8/0x3a0 [ 1578.787777][ T27] ? kthread_complete_and_exit+0x40/0x40 [ 1578.793872][ T27] ret_from_fork+0x1f/0x30 [ 1578.798339][ T27] [ 1578.808824][ T27] [ 1578.808824][ T27] Showing all locks held in the system: [ 1578.817407][ T27] 3 locks held by kworker/0:0/7: [ 1578.822512][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1578.833335][ T27] #1: ffffc900000c7da8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1578.844829][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1578.854826][ T27] 1 lock held by rcu_tasks_kthre/12: [ 1578.860227][ T27] #0: ffffffff8c794b70 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x31/0xd80 [ 1578.872374][ T27] 1 lock held by rcu_tasks_trace/13: [ 1578.878021][ T27] #0: ffffffff8c794870 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x31/0xd80 [ 1578.889149][ T27] 3 locks held by kworker/0:1/14: [ 1578.894506][ T27] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1578.904991][ T27] #1: ffffc90000137da8 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1578.917261][ T27] #2: ffff88803d00f240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x1d5/0x24a0 [ 1578.928276][ T27] 1 lock held by khungtaskd/27: [ 1578.933966][ T27] #0: ffffffff8c7956c0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x340 [ 1578.944077][ T27] 2 locks held by getty/4761: [ 1578.948802][ T27] #0: ffff88802c7ac098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x26/0x80 [ 1578.958826][ T27] #1: ffffc900015b02f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xef4/0x13e0 [ 1578.969101][ T27] 3 locks held by kworker/1:3/5169: [ 1578.974531][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1578.985371][ T27] #1: ffffc9000430fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1578.996814][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1579.006802][ T27] 3 locks held by kworker/1:4/5170: [ 1579.012043][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1579.022799][ T27] #1: ffffc9000431fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1579.034276][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1579.044053][ T27] 3 locks held by kworker/1:5/5171: [ 1579.049244][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1579.060255][ T27] #1: ffffc9000432fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1579.075017][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1579.084763][ T27] 3 locks held by kworker/1:6/5172: [ 1579.090170][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1579.100973][ T27] #1: ffffc9000433fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1579.112487][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1579.122362][ T27] 3 locks held by kworker/1:7/5173: [ 1579.127730][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1579.138489][ T27] #1: ffffc9000434fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1579.149958][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1579.159699][ T27] 3 locks held by kworker/0:4/5174: [ 1579.164898][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1579.175670][ T27] #1: ffffc9000435fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1579.187078][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1579.196922][ T27] 3 locks held by kworker/1:8/5175: [ 1579.202318][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1579.213078][ T27] #1: ffffc9000457fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1579.224574][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1579.234278][ T27] 3 locks held by kworker/0:5/5176: [ 1579.239505][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1579.250290][ T27] #1: ffffc9000458fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1579.261645][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1579.271359][ T27] 3 locks held by kworker/0:6/5181: [ 1579.276551][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1579.287383][ T27] #1: ffffc9000459fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1579.298860][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1579.308697][ T27] 3 locks held by kworker/1:9/5769: [ 1579.313954][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1579.324753][ T27] #1: ffffc900064b7da8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1579.336305][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1579.346137][ T27] 3 locks held by kworker/1:10/5773: [ 1579.351595][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1579.362407][ T27] #1: ffffc9000adf7da8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1579.373855][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1579.383583][ T27] 3 locks held by kworker/1:11/5774: [ 1579.388864][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1579.399632][ T27] #1: ffffc9000af07da8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1579.411134][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1579.420858][ T27] 3 locks held by kworker/0:10/6229: [ 1579.426134][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1579.436872][ T27] #1: ffffc9000521fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1579.448323][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1579.458076][ T27] 3 locks held by kworker/0:11/6230: [ 1579.463532][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1579.474280][ T27] #1: ffffc90004bbfda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1579.485797][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1579.495497][ T27] 3 locks held by kworker/0:12/6231: [ 1579.500800][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1579.511664][ T27] #1: ffffc90004e3fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1579.523138][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1579.533009][ T27] 3 locks held by kworker/0:13/6232: [ 1579.538307][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1579.549039][ T27] #1: ffffc900051efda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1579.560488][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1579.570199][ T27] 3 locks held by kworker/0:14/6233: [ 1579.575475][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1579.586249][ T27] #1: ffffc900056efda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1579.597634][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1579.607476][ T27] 3 locks held by kworker/1:13/6277: [ 1579.612896][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1579.623696][ T27] #1: ffffc900059cfda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1579.635100][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1579.644820][ T27] 3 locks held by kworker/1:14/6278: [ 1579.650154][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1579.660947][ T27] #1: ffffc900056c7da8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1579.672424][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1579.682149][ T27] 3 locks held by kworker/1:15/6279: [ 1579.687427][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1579.698144][ T27] #1: ffffc90004ecfda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1579.709519][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1579.719222][ T27] 3 locks held by kworker/0:15/6487: [ 1579.724541][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1579.735297][ T27] #1: ffffc9000338fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1579.746719][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1579.756961][ T27] 3 locks held by kworker/0:16/6490: [ 1579.762291][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1579.773129][ T27] #1: ffffc9000327fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1579.784672][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1579.794420][ T27] 3 locks held by kworker/1:16/6583: [ 1579.801060][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1579.811933][ T27] #1: ffffc9000398fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1579.823524][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1579.833404][ T27] 3 locks held by kworker/1:17/9799: [ 1579.838775][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1579.849668][ T27] #1: ffffc9000ae77da8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1579.861223][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1579.870986][ T27] 3 locks held by kworker/1:18/9800: [ 1579.876265][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1579.887003][ T27] #1: ffffc9000add7da8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1579.898686][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1579.908778][ T27] 3 locks held by kworker/1:19/9801: [ 1579.914197][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1579.925415][ T27] #1: ffffc9000ae87da8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1579.936882][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1579.946666][ T27] 3 locks held by kworker/1:21/15250: [ 1579.952092][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1579.962878][ T27] #1: ffffc900158afda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1579.974224][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1579.983934][ T27] 3 locks held by kworker/1:22/17496: [ 1579.989406][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1580.000248][ T27] #1: ffffc90005fa7da8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1580.011765][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1580.021501][ T27] 3 locks held by kworker/1:23/18698: [ 1580.026922][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1580.037757][ T27] #1: ffffc9000382fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1580.049140][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1580.058894][ T27] 3 locks held by kworker/1:24/18790: [ 1580.064296][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1580.075165][ T27] #1: ffffc90003befda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1580.086611][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1580.096316][ T27] 3 locks held by kworker/1:26/21853: [ 1580.101720][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1580.112655][ T27] #1: ffffc90014797da8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1580.124034][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1580.133869][ T27] 3 locks held by kworker/1:27/21973: [ 1580.139229][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1580.150068][ T27] #1: ffffc900032afda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1580.161446][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1580.171243][ T27] 3 locks held by kworker/1:28/22089: [ 1580.176612][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1580.187360][ T27] #1: ffffc9000351fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1580.198746][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1580.208565][ T27] 3 locks held by kworker/1:29/22302: [ 1580.213962][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1580.224916][ T27] #1: ffffc9000465fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1580.236828][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1580.246623][ T27] 3 locks held by kworker/1:30/22303: [ 1580.252056][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1580.262916][ T27] #1: ffffc9000466fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1580.274472][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1580.284240][ T27] 3 locks held by kworker/1:32/22779: [ 1580.289744][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1580.300464][ T27] #1: ffffc9000b07fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1580.311859][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1580.321575][ T27] 3 locks held by kworker/1:35/22782: [ 1580.326948][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1580.337902][ T27] #1: ffffc9000b0bfda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1580.349413][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1580.359147][ T27] 3 locks held by kworker/1:36/22783: [ 1580.364588][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1580.375407][ T27] #1: ffffc9000b0cfda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1580.386879][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1580.396597][ T27] 3 locks held by kworker/1:37/22881: [ 1580.401997][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1580.412768][ T27] #1: ffffc9000b13fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1580.424138][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1580.433856][ T27] 3 locks held by kworker/1:38/22882: [ 1580.439221][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1580.450084][ T27] #1: ffffc90014687da8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1580.461424][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1580.471221][ T27] 3 locks held by kworker/0:2/22952: [ 1580.476493][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1580.487216][ T27] #1: ffffc9000b06fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1580.498606][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1580.508636][ T27] 2 locks held by kworker/0:17/22953: [ 1580.514031][ T27] #0: ffff888012472538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1580.526686][ T27] #1: ffffc90014657da8 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1580.538131][ T27] 3 locks held by kworker/1:39/23000: [ 1580.543516][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1580.554352][ T27] #1: ffffc90014c3fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1580.565912][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1580.575632][ T27] 3 locks held by kworker/1:40/23001: [ 1580.581042][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1580.591837][ T27] #1: ffffc900146dfda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1580.603197][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1580.613010][ T27] 3 locks held by kworker/0:19/23097: [ 1580.618379][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1580.629127][ T27] #1: ffffc9001558fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1580.640538][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1580.650365][ T27] 5 locks held by kworker/u4:12/29179: [ 1580.655916][ T27] 3 locks held by kworker/0:3/31526: [ 1580.661235][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1580.680170][ T27] #1: ffffc90016db7da8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1580.691597][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1580.701359][ T27] 3 locks held by kworker/0:7/31527: [ 1580.706664][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1580.717409][ T27] #1: ffffc9001751fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1580.728771][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1580.738485][ T27] 3 locks held by kworker/0:18/31528: [ 1580.743869][ T27] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1580.754257][ T27] #1: ffffc9000320fda8 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1580.766310][ T27] #2: ffff88803db7f240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x1d5/0x24a0 [ 1580.776458][ T27] 3 locks held by kworker/0:21/31529: [ 1580.781935][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1580.792655][ T27] #1: ffffc9000321fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1580.804004][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1580.815422][ T27] 3 locks held by kworker/0:22/31530: [ 1580.820846][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1580.831636][ T27] #1: ffffc9000322fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1580.843038][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1580.852835][ T27] 3 locks held by kworker/0:23/31531: [ 1580.858215][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1580.869004][ T27] #1: ffffc9000323fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1580.880403][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1580.890423][ T27] 3 locks held by kworker/0:24/31532: [ 1580.895804][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1580.906588][ T27] #1: ffffc9000325fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1580.917958][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1580.927678][ T27] 3 locks held by kworker/0:25/31533: [ 1580.933104][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1580.943859][ T27] #1: ffffc900030ffda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1580.955249][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1580.965022][ T27] 3 locks held by kworker/0:26/31534: [ 1580.970410][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1580.981585][ T27] #1: ffffc9000328fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1580.992990][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1581.002835][ T27] 3 locks held by kworker/0:27/31535: [ 1581.008224][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1581.018958][ T27] #1: ffffc9000329fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1581.030315][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1581.040036][ T27] 3 locks held by kworker/0:28/31536: [ 1581.045415][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1581.056147][ T27] #1: ffffc900032bfda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1581.067531][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1581.078461][ T27] 3 locks held by kworker/1:0/31747: [ 1581.084596][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1581.095541][ T27] #1: ffffc9000360fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1581.106973][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1581.116866][ T27] 3 locks held by kworker/1:1/31748: [ 1581.122210][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1581.132959][ T27] #1: ffffc900036afda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1581.144337][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1581.154057][ T27] 3 locks held by kworker/1:12/31749: [ 1581.159509][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1581.170304][ T27] #1: ffffc900039dfda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1581.181675][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1581.191414][ T27] 3 locks held by kworker/1:25/31750: [ 1581.196782][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1581.207636][ T27] #1: ffffc900039efda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1581.219086][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1581.229010][ T27] 3 locks held by kworker/1:31/31751: [ 1581.234765][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1581.245550][ T27] #1: ffffc900039ffda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1581.257164][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1581.267092][ T27] 3 locks held by kworker/1:33/31900: [ 1581.272611][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1581.283397][ T27] #1: ffffc900045ffda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1581.294911][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1581.306601][ T27] 3 locks held by kworker/1:34/31901: [ 1581.312073][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1581.322993][ T27] #1: ffffc90003fffda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1581.334427][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1581.344258][ T27] 3 locks held by kworker/1:41/31932: [ 1581.349758][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1581.360964][ T27] #1: ffffc900047bfda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1581.372480][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1581.382351][ T27] 3 locks held by kworker/1:42/31971: [ 1581.387813][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1581.398695][ T27] #1: ffffc9000407fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1581.410255][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1581.420062][ T27] 3 locks held by kworker/0:29/31972: [ 1581.425463][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1581.436254][ T27] #1: ffffc90004e5fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1581.447769][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1581.457711][ T27] 3 locks held by kworker/0:30/31973: [ 1581.463764][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1581.474705][ T27] #1: ffffc90004eefda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1581.486158][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1581.495899][ T27] 3 locks held by kworker/1:43/31994: [ 1581.501319][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1581.512084][ T27] #1: ffffc90004d87da8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1581.523479][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1581.533232][ T27] 3 locks held by kworker/1:44/31997: [ 1581.538581][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1581.549519][ T27] #1: ffffc90004e2fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1581.560999][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1581.570742][ T27] 3 locks held by kworker/1:45/32000: [ 1581.576127][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1581.586904][ T27] #1: ffffc9000509fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1581.598291][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1581.608053][ T27] 3 locks held by kworker/1:46/32026: [ 1581.613518][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1581.624246][ T27] #1: ffffc9000506fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1581.635626][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1581.645311][ T27] 3 locks held by kworker/1:47/32027: [ 1581.650722][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1581.661643][ T27] #1: ffffc900050dfda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1581.673086][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1581.682824][ T27] 3 locks held by kworker/1:48/32028: [ 1581.688181][ T27] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1581.698590][ T27] #1: ffffc90005487da8 ((work_completion)(&smcibdev->port_event_work)){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1581.711129][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1581.721039][ T27] 3 locks held by kworker/1:49/32029: [ 1581.726431][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1581.737221][ T27] #1: ffffc900056ffda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1581.748587][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1581.758298][ T27] 3 locks held by kworker/1:50/32030: [ 1581.763699][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1581.774598][ T27] #1: ffffc9000579fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1581.786007][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1581.795735][ T27] 3 locks held by kworker/1:51/32069: [ 1581.801130][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1581.812003][ T27] #1: ffffc900057afda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1581.823383][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1581.833097][ T27] 3 locks held by kworker/1:52/32070: [ 1581.838446][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1581.849207][ T27] #1: ffffc900058a7da8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1581.860695][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1581.870493][ T27] 3 locks held by kworker/1:54/32072: [ 1581.875855][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1581.886781][ T27] #1: ffffc900059efda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1581.898155][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1581.907882][ T27] 3 locks held by kworker/1:55/32073: [ 1581.913270][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1581.924023][ T27] #1: ffffc900059ffda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1581.935374][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1581.945113][ T27] 3 locks held by kworker/1:56/32075: [ 1581.950512][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1581.961252][ T27] #1: ffffc90005a0fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1581.972600][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1581.982350][ T27] 3 locks held by kworker/1:57/32159: [ 1581.987814][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1581.998746][ T27] #1: ffffc9000616fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1582.010186][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1582.019943][ T27] 3 locks held by kworker/1:58/32160: [ 1582.025316][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1582.036026][ T27] #1: ffffc9000617fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1582.047397][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1582.057166][ T27] 3 locks held by kworker/1:59/32161: [ 1582.062577][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1582.073297][ T27] #1: ffffc9000646fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1582.084648][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1582.094448][ T27] 3 locks held by kworker/1:60/32369: [ 1582.100021][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1582.110862][ T27] #1: ffffc9000ae07da8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1582.122249][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1582.132192][ T27] 3 locks held by kworker/1:61/32370: [ 1582.137557][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1582.148311][ T27] #1: ffffc9000b24fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1582.159783][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1582.169552][ T27] 4 locks held by kworker/1:62/32371: [ 1582.174927][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1582.185735][ T27] #1: ffffc9000ed77da8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1582.197104][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1582.206788][ T27] #3: ffffffff8e0fc788 (rtnl_mutex){+.+.}-{3:3}, at: ib_get_eth_speed+0x102/0x620 [ 1582.216262][ T27] 3 locks held by kworker/1:63/32372: [ 1582.221696][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1582.232448][ T27] #1: ffffc9000ed87da8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1582.243997][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1582.253889][ T27] 3 locks held by kworker/1:64/32373: [ 1582.259395][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1582.270349][ T27] #1: ffffc9000ed97da8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1582.281752][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1582.291483][ T27] 3 locks held by kworker/1:65/32374: [ 1582.296854][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1582.307603][ T27] #1: ffffc9000eda7da8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1582.318964][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1582.328829][ T27] 3 locks held by kworker/1:66/32375: [ 1582.334241][ T27] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1582.344752][ T27] #1: ffffc9000edb7da8 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1582.355255][ T27] #2: ffffffff8e0fc788 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xf/0x70 [ 1582.364289][ T27] 3 locks held by kworker/1:67/32412: [ 1582.369785][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1582.380578][ T27] #1: ffffc90014667da8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1582.391983][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1582.401815][ T27] 3 locks held by kworker/1:68/32413: [ 1582.407180][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1582.418103][ T27] #1: ffffc9000b15fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1582.429614][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1582.439299][ T27] 3 locks held by kworker/1:70/32415: [ 1582.444916][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1582.455741][ T27] #1: ffffc90014767da8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1582.467116][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1582.476814][ T27] 3 locks held by kworker/1:71/32416: [ 1582.482198][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1582.492943][ T27] #1: ffffc90014777da8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1582.504309][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1582.513997][ T27] 3 locks held by kworker/1:72/32417: [ 1582.519391][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1582.530167][ T27] #1: ffffc90014787da8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1582.541659][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1582.551388][ T27] 3 locks held by kworker/1:73/32535: [ 1582.556767][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1582.567562][ T27] #1: ffffc90014b2fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1582.578919][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1582.588616][ T27] 3 locks held by kworker/1:74/32558: [ 1582.594018][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1582.604844][ T27] #1: ffffc90014affda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1582.616289][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1582.626086][ T27] 3 locks held by kworker/1:75/32559: [ 1582.631515][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1582.642241][ T27] #1: ffffc9001470fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1582.653727][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1582.663417][ T27] 3 locks held by kworker/1:76/32560: [ 1582.668786][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1582.679550][ T27] #1: ffffc90014fa7da8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1582.690987][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1582.700779][ T27] 3 locks held by kworker/1:77/32561: [ 1582.706170][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1582.717118][ T27] #1: ffffc90014fb7da8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1582.728726][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1582.743795][ T27] 3 locks held by kworker/1:78/32601: [ 1582.749164][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1582.760289][ T27] #1: ffffc90015337da8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1582.771674][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1582.781442][ T27] 3 locks held by kworker/1:79/32602: [ 1582.786830][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1582.797688][ T27] #1: ffffc90015347da8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1582.809216][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1582.818986][ T27] 3 locks held by kworker/1:80/655: [ 1582.824541][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1582.835346][ T27] #1: ffffc900174efda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1582.846876][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1582.856733][ T27] 3 locks held by kworker/1:81/693: [ 1582.861987][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1582.872923][ T27] #1: ffffc9000317fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1582.884439][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1582.894251][ T27] 3 locks held by kworker/1:82/696: [ 1582.899488][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1582.910643][ T27] #1: ffffc900175ffda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1582.922075][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1582.931971][ T27] 3 locks held by kworker/1:83/698: [ 1582.937149][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1582.948170][ T27] #1: ffffc900031afda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1582.959640][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1582.969579][ T27] 3 locks held by kworker/1:84/703: [ 1582.974784][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1582.985688][ T27] #1: ffffc900175afda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1582.997116][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1583.006941][ T27] 3 locks held by kworker/0:31/704: [ 1583.012164][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1583.022938][ T27] #1: ffffc900031efda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1583.034398][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1583.044124][ T27] 3 locks held by kworker/1:85/743: [ 1583.049407][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1583.060373][ T27] #1: ffffc9001769fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1583.071754][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1583.081534][ T27] 3 locks held by kworker/1:86/744: [ 1583.086834][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1583.097773][ T27] #1: ffffc900032cfda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1583.109203][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1583.118916][ T27] 3 locks held by kworker/1:87/745: [ 1583.124244][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1583.135120][ T27] #1: ffffc900033efda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1583.146523][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1583.156412][ T27] 3 locks held by kworker/1:88/746: [ 1583.161673][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1583.172514][ T27] #1: ffffc900033ffda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1583.184008][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1583.193757][ T27] 3 locks held by kworker/1:89/747: [ 1583.198952][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1583.209939][ T27] #1: ffffc9000340fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1583.221363][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1583.231119][ T27] 3 locks held by kworker/1:90/748: [ 1583.236320][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1583.247217][ T27] #1: ffffc9000341fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1583.258625][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1583.268340][ T27] 3 locks held by kworker/1:91/749: [ 1583.273682][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1583.284466][ T27] #1: ffffc9000342fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1583.295871][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1583.305715][ T27] 3 locks held by kworker/1:92/750: [ 1583.310966][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1583.321847][ T27] #1: ffffc9000343fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1583.333326][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1583.343045][ T27] 3 locks held by kworker/1:93/764: [ 1583.348337][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1583.359148][ T27] #1: ffffc9000350fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1583.370658][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1583.380405][ T27] 3 locks held by kworker/1:94/765: [ 1583.385594][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1583.396313][ T27] #1: ffffc9000353fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1583.407834][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1583.417543][ T27] 3 locks held by kworker/1:95/766: [ 1583.422760][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1583.433605][ T27] #1: ffffc9000354fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1583.445077][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1583.455131][ T27] 3 locks held by kworker/0:33/882: [ 1583.460398][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1583.471604][ T27] #1: ffffc9000380fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1583.486960][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1583.496714][ T27] 3 locks held by kworker/0:34/883: [ 1583.502019][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1583.512799][ T27] #1: ffffc900035cfda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1583.524204][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1583.534068][ T27] 3 locks held by kworker/0:35/884: [ 1583.539291][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1583.550137][ T27] #1: ffffc9000387fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1583.561474][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1583.571218][ T27] 3 locks held by kworker/0:36/885: [ 1583.576420][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1583.587188][ T27] #1: ffffc9000388fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1583.598556][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1583.608290][ T27] 3 locks held by kworker/1:96/971: [ 1583.613507][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1583.624227][ T27] #1: ffffc900038afda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1583.635773][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1583.645613][ T27] 3 locks held by kworker/1:97/1058: [ 1583.650936][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1583.663762][ T27] #1: ffffc9000409fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1583.675120][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1583.685121][ T27] 3 locks held by kworker/1:98/1060: [ 1583.690491][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1583.701294][ T27] #1: ffffc90003b8fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1583.712812][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1583.722558][ T27] 3 locks held by kworker/1:99/1121: [ 1583.727935][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1583.738787][ T27] #1: ffffc9000478fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1583.750663][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1583.760447][ T27] 3 locks held by kworker/1:101/1124: [ 1583.765815][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1583.776550][ T27] #1: ffffc900047cfda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1583.787994][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1583.797691][ T27] 3 locks held by kworker/1:102/1127: [ 1583.803086][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1583.813832][ T27] #1: ffffc900047efda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1583.825217][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1583.834988][ T27] 3 locks held by kworker/1:103/1129: [ 1583.840400][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1583.851437][ T27] #1: ffffc9000480fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1583.863006][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1583.872843][ T27] 3 locks held by kworker/1:104/1130: [ 1583.878211][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1583.889037][ T27] #1: ffffc9000481fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1583.900494][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1583.910196][ T27] 3 locks held by kworker/1:105/1287: [ 1583.915563][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1583.926298][ T27] #1: ffffc900045afda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1583.937658][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1583.947459][ T27] 3 locks held by kworker/1:106/1288: [ 1583.952966][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1583.963697][ T27] #1: ffffc9000519fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1583.975247][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1583.985247][ T27] 3 locks held by kworker/1:107/1289: [ 1583.990819][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1584.001904][ T27] #1: ffffc9000582fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1584.013528][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1584.023449][ T27] 3 locks held by kworker/1:109/1330: [ 1584.028903][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1584.039655][ T27] #1: ffffc900058c7da8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1584.051032][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1584.060754][ T27] 3 locks held by kworker/1:110/1331: [ 1584.066120][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1584.076962][ T27] #1: ffffc90005a3fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1584.088460][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1584.098213][ T27] 3 locks held by kworker/1:111/1332: [ 1584.103641][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1584.114490][ T27] #1: ffffc90005a4fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1584.125848][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1584.135575][ T27] 3 locks held by kworker/1:112/1333: [ 1584.141070][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1584.151962][ T27] #1: ffffc90005a5fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1584.163325][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1584.173067][ T27] 3 locks held by kworker/1:113/1413: [ 1584.178444][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1584.189193][ T27] #1: ffffc90004f3fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1584.200664][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1584.210384][ T27] 3 locks held by kworker/1:114/1414: [ 1584.215752][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1584.226649][ T27] #1: ffffc900060a7da8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1584.238032][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1584.247785][ T27] 3 locks held by kworker/1:115/1493: [ 1584.253203][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1584.264046][ T27] #1: ffffc9000abe7da8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1584.275415][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1584.285175][ T27] 3 locks held by kworker/1:116/1495: [ 1584.290596][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1584.301330][ T27] #1: ffffc9000ac07da8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1584.312827][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1584.322523][ T27] 3 locks held by kworker/1:117/1699: [ 1584.327894][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1584.338674][ T27] #1: ffffc9000ede7da8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1584.350079][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1584.359801][ T27] 3 locks held by kworker/1:118/1700: [ 1584.365167][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1584.375929][ T27] #1: ffffc900146ffda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1584.387290][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1584.396970][ T27] 3 locks held by kworker/1:119/1701: [ 1584.402363][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1584.413946][ T27] #1: ffffc900147b7da8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1584.425396][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1584.435185][ T27] 3 locks held by kworker/1:120/1702: [ 1584.440602][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1584.451467][ T27] #1: ffffc900147c7da8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1584.462945][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1584.472679][ T27] 3 locks held by kworker/1:121/1703: [ 1584.478068][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1584.488782][ T27] #1: ffffc900147e7da8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1584.500258][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1584.509958][ T27] 3 locks held by kworker/1:122/1704: [ 1584.515328][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1584.526044][ T27] #1: ffffc900147f7da8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1584.537500][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1584.547181][ T27] 3 locks held by kworker/1:123/1705: [ 1584.552565][ T27] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1584.562974][ T27] #1: ffffc90014807da8 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1584.573391][ T27] #2: ffffffff8e0fc788 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 1584.583840][ T27] 3 locks held by kworker/1:124/1751: [ 1584.589341][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1584.600140][ T27] #1: ffffc90014847da8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1584.611528][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1584.621337][ T27] 3 locks held by kworker/1:125/1752: [ 1584.626728][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1584.637550][ T27] #1: ffffc9000edc7da8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1584.649076][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1584.658776][ T27] 2 locks held by syz-executor.4/2040: [ 1584.664280][ T27] #0: ffffffff8e0fc788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3e8/0xd50 [ 1584.673729][ T27] #1: ffffffff8c7a09b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x64a/0x770 [ 1584.684733][ T27] 1 lock held by syz-executor.5/2042: [ 1584.690149][ T27] #0: ffffffff8e0fc788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3e8/0xd50 [ 1584.699622][ T27] 1 lock held by syz-executor.5/2046: [ 1584.705454][ T27] #0: ffffffff8e0fc788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3e8/0xd50 [ 1584.717640][ T27] 3 locks held by kworker/1:127/2043: [ 1584.725041][ T27] #0: ffff888018007538 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1584.738059][ T27] #1: ffffc9001588fda8 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1584.750982][ T27] #2: ffff88807bc3d148 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x12d/0x2d0 [ 1584.763326][ T27] 3 locks held by kworker/1:129/2045: [ 1584.768692][ T27] #0: ffff888027855d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 1584.779728][ T27] #1: ffffc90015987da8 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 1584.792077][ T27] #2: ffffffff8e0fc788 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xa7/0x1390 [ 1584.801537][ T27] 1 lock held by syz-executor.3/2055: [ 1584.806923][ T27] #0: ffffffff8e0fc788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3e8/0xd50 [ 1584.816367][ T27] 1 lock held by syz-executor.3/2057: [ 1584.821775][ T27] #0: ffffffff8e0fc788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3e8/0xd50 [ 1584.831315][ T27] 1 lock held by syz-executor.3/2059: [ 1584.836680][ T27] #0: ffffffff8e0fc788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3e8/0xd50 [ 1584.846108][ T27] 1 lock held by syz-executor.0/2056: [ 1584.851531][ T27] #0: ffffffff8e0fc788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3e8/0xd50 [ 1584.861151][ T27] 1 lock held by syz-executor.0/2058: [ 1584.866517][ T27] #0: ffffffff8e0fc788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3e8/0xd50 [ 1584.875955][ T27] 1 lock held by syz-executor.1/2068: [ 1584.881355][ T27] #0: ffffffff8e0fc788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3e8/0xd50 [ 1584.890882][ T27] 1 lock held by syz-executor.1/2069: [ 1584.896248][ T27] #0: ffffffff8e0fc788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3e8/0xd50 [ 1584.905773][ T27] 1 lock held by syz-executor.1/2070: [ 1584.911174][ T27] #0: ffffffff8e0fc788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3e8/0xd50 [ 1584.920668][ T27] 1 lock held by syz-executor.2/2075: [ 1584.926400][ T27] #0: ffffffff8e0fc788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3e8/0xd50 [ 1584.935860][ T27] 1 lock held by syz-executor.2/2076: [ 1584.941250][ T27] #0: ffffffff8e0fc788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3e8/0xd50 [ 1584.950781][ T27] 2 locks held by dhcpcd/2082: [ 1584.955561][ T27] #0: ffff88803c6e2130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2f/0xe30 [ 1584.965245][ T27] #1: ffffffff8c7a09b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3e8/0x770 [ 1584.976304][ T27] [ 1584.976468][ T2040] bridge0: port 3(erspan0) entered disabled state [ 1584.978724][ T27] ============================================= [ 1584.978724][ T27] [ 1584.995358][ T27] NMI backtrace for cpu 1 [ 1584.999689][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.3.0-rc3-syzkaller-00026-gfff5a5e7f528 #0 [ 1585.009482][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1585.019523][ T27] Call Trace: [ 1585.022796][ T27] [ 1585.025720][ T27] dump_stack_lvl+0xd9/0x150 [ 1585.030314][ T27] nmi_cpu_backtrace+0x29c/0x350 [ 1585.035245][ T27] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 1585.040437][ T27] nmi_trigger_cpumask_backtrace+0x2a4/0x300 [ 1585.046413][ T27] watchdog+0xe16/0x1090 [ 1585.050645][ T27] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 1585.056615][ T27] kthread+0x2e8/0x3a0 [ 1585.060674][ T27] ? kthread_complete_and_exit+0x40/0x40 [ 1585.066301][ T27] ret_from_fork+0x1f/0x30 [ 1585.070720][ T27] [ 1585.074130][ T27] Sending NMI from CPU 1 to CPUs 0: [ 1585.079605][ C0] NMI backtrace for cpu 0 [ 1585.079612][ C0] CPU: 0 PID: 22953 Comm: kworker/0:17 Not tainted 6.3.0-rc3-syzkaller-00026-gfff5a5e7f528 #0 [ 1585.079626][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1585.079634][ C0] Workqueue: events delayed_vfree_work [ 1585.079655][ C0] RIP: 0010:write_comp_data+0xf/0x90 [ 1585.079676][ C0] Code: 65 48 8b 04 25 80 b8 03 00 48 8b 80 68 15 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 65 8b 05 81 d8 80 7e 49 89 f1 89 c6 49 89 d2 <81> e6 00 01 00 00 49 89 f8 65 48 8b 14 25 80 b8 03 00 a9 00 01 ff [ 1585.079686][ C0] RSP: 0018:ffffc90014657c48 EFLAGS: 00000246 [ 1585.079695][ C0] RAX: 0000000080000000 RBX: 0000000000000001 RCX: ffffffff81c6af88 [ 1585.079709][ C0] RDX: 0000000000000001 RSI: 0000000080000000 RDI: 0000000000000005 [ 1585.079716][ C0] RBP: ffffea0001f79340 R08: 0000000000000007 R09: 0000000000000000 [ 1585.079723][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 00000000ffffffff [ 1585.079730][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888145e9b780 [ 1585.079739][ C0] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 1585.079751][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1585.079758][ C0] CR2: 000000c01fa05008 CR3: 000000000c571000 CR4: 0000000000350ef0 [ 1585.079766][ C0] Call Trace: [ 1585.079768][ C0] [ 1585.079772][ C0] mod_memcg_page_state.part.0.constprop.0+0x238/0x690 [ 1585.079791][ C0] vfree+0x16d/0x7e0 [ 1585.079808][ C0] delayed_vfree_work+0x57/0x70 [ 1585.079824][ C0] process_one_work+0x991/0x15c0 [ 1585.079841][ C0] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1585.079857][ C0] ? spin_bug+0x1c0/0x1c0 [ 1585.079869][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 1585.079889][ C0] worker_thread+0x669/0x1090 [ 1585.079904][ C0] ? __kthread_parkme+0x163/0x220 [ 1585.079915][ C0] ? process_one_work+0x15c0/0x15c0 [ 1585.079930][ C0] kthread+0x2e8/0x3a0 [ 1585.079940][ C0] ? kthread_complete_and_exit+0x40/0x40 [ 1585.079953][ C0] ret_from_fork+0x1f/0x30 [ 1585.079973][ C0] [ 1585.091024][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 1585.091035][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.3.0-rc3-syzkaller-00026-gfff5a5e7f528 #0 [ 1585.091052][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 1585.091061][ T27] Call Trace: [ 1585.091066][ T27] [ 1585.091071][ T27] dump_stack_lvl+0xd9/0x150 [ 1585.091094][ T27] panic+0x688/0x730 [ 1585.091115][ T27] ? panic_smp_self_stop+0x90/0x90 [ 1585.091136][ T27] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 1585.091152][ T27] ? preempt_schedule_thunk+0x1a/0x20 [ 1585.091178][ T27] ? watchdog+0xbe8/0x1090 [ 1585.091197][ T27] watchdog+0xbf9/0x1090 [ 1585.091220][ T27] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 1585.091238][ T27] kthread+0x2e8/0x3a0 [ 1585.091254][ T27] ? kthread_complete_and_exit+0x40/0x40 [ 1585.091272][ T27] ret_from_fork+0x1f/0x30 [ 1585.091301][ T27] [ 1585.093737][ T27] Kernel Offset: disabled [ 1585.379612][ T27] Rebooting in 86400 seconds..