[ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. [ 80.168056][ T8420] sshd (8420) used greatest stack depth: 3816 bytes left Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.60' (ECDSA) to the list of known hosts. 2020/07/21 18:26:45 fuzzer started 2020/07/21 18:26:46 dialing manager at 10.128.0.26:37513 2020/07/21 18:26:46 syscalls: 2969 2020/07/21 18:26:46 code coverage: enabled 2020/07/21 18:26:46 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2020/07/21 18:26:46 extra coverage: enabled 2020/07/21 18:26:46 setuid sandbox: enabled 2020/07/21 18:26:46 namespace sandbox: enabled 2020/07/21 18:26:46 Android sandbox: /sys/fs/selinux/policy does not exist 2020/07/21 18:26:46 fault injection: enabled 2020/07/21 18:26:46 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/07/21 18:26:46 net packet injection: enabled 2020/07/21 18:26:46 net device setup: enabled 2020/07/21 18:26:46 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/07/21 18:26:46 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/07/21 18:26:46 USB emulation: /dev/raw-gadget does not exist 18:30:11 executing program 0: syzkaller login: [ 297.256378][ T8464] IPVS: ftp: loaded support on port[0] = 21 [ 297.508586][ T8464] chnl_net:caif_netlink_parms(): no params data found [ 297.780766][ T8464] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.789470][ T8464] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.798852][ T8464] device bridge_slave_0 entered promiscuous mode [ 297.815800][ T8464] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.823265][ T8464] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.832709][ T8464] device bridge_slave_1 entered promiscuous mode [ 297.887293][ T8464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.904342][ T8464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.959596][ T8464] team0: Port device team_slave_0 added [ 297.972692][ T8464] team0: Port device team_slave_1 added [ 298.019642][ T8464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.026874][ T8464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.053253][ T8464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.068422][ T8464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.075471][ T8464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.103078][ T8464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.303413][ T8464] device hsr_slave_0 entered promiscuous mode [ 298.578158][ T8464] device hsr_slave_1 entered promiscuous mode [ 299.008501][ T8464] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 299.067071][ T8464] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 299.236136][ T8464] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 299.486235][ T8464] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 299.919033][ T8464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.951961][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 299.962364][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 299.995180][ T8464] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.018672][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 300.029046][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 300.039385][ T6460] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.046779][ T6460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.074748][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 300.084504][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 300.094836][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 300.104966][ T6460] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.112286][ T6460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.121333][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 300.140547][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 300.167336][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 300.181520][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 300.220676][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 300.231812][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 300.243336][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 300.253978][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 300.263978][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 300.284055][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 300.293872][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 300.314968][ T8464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 300.364810][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 300.373182][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 300.402552][ T8464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.454834][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 300.465292][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 300.515373][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 300.525873][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 300.550829][ T8464] device veth0_vlan entered promiscuous mode [ 300.569257][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 300.578605][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 300.601507][ T8464] device veth1_vlan entered promiscuous mode [ 300.659917][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 300.670060][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 300.679828][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 300.689906][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 300.708519][ T8464] device veth0_macvtap entered promiscuous mode [ 300.725753][ T8464] device veth1_macvtap entered promiscuous mode [ 300.770847][ T8464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.782911][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 300.792620][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 300.802371][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 300.812590][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 300.836608][ T8464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.847244][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 300.857583][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 18:30:15 executing program 0: 18:30:15 executing program 0: 18:30:15 executing program 0: 18:30:16 executing program 0: 18:30:16 executing program 0: 18:30:16 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000f, 0x13, r0, 0x0) r1 = socket(0x11, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x3, &(0x7f0000000000), 0x20a154cc) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x7f, 0x2, 0x40}, 0x10) 18:30:16 executing program 0: unshare(0x20040100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[r1], 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x6d, &(0x7f0000000080)={r6}, &(0x7f00000000c0)=0xfe42) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000000)={r6, 0x4, 0x20}, &(0x7f0000000080)=0xc) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @empty, @multicast1}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r7, @in6={{0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, [], 0x1e}, 0xffffff81}}, 0x7fffffff, 0x0, 0x81, 0x8, 0x5, 0x8, 0x80}, &(0x7f00000001c0)=0x9c) r8 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r8, 0x29, 0xd1, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) 18:30:17 executing program 1: acct(&(0x7f0000000000)='./file0\x00') uselib(&(0x7f0000000040)='./file0\x00') r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x200, 0x0) write$P9_RWRITE(r0, &(0x7f00000000c0)={0xb, 0x77, 0x1, 0x8001}, 0xb) clone(0x1002000, &(0x7f0000000100)="6118dd7cc89616e0eb2c994b4f20cd317134c07063fa0091d20f5e224095693569b2e44b91748d867104eb6dd5bb31ce19e0caa96f1e864fb29df2477f382f8837c92b4f4c88f23aed67ed54ed26a36e3a8475f028d49862d03edd13bf16fc80ea13541ee19ce5ba019c68daa183baba43fa1ec668ed10d9a58ebfa463e23f729a8499dfa02517783bd0b0089432939589b4a19e83c1671e0ede66816b172e62a96afa60f2f254fc2e0ba0e1eb71d660720eb86f15d1c71439b28e24a697", &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="f3ece5e292511724049bb23e83bddc1e4a291aab0ffc6f66f4ac8ee85d2ba697c507758910864e157420584c5534d2864a10603b414a88675f") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000280)=""/36, &(0x7f00000002c0)=0x24) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000300)={0x0, '\x00', {0x1}, 0x7}) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000340)=0xfffffffffffffff8) r2 = dup(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000380)='tls\x00', 0x4) openat$urandom(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/urandom\x00', 0x400, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000400)='/proc/capi/capi20ncci\x00', 0x539000, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, 0x1, 0x9, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFCTH_TUPLE={0x1c, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xffff}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x2}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4001000) ioctl$CHAR_RAW_GETSIZE(r0, 0x1260, &(0x7f0000000580)) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/self/net/pfkey\x00', 0x10082, 0x0) ioctl$DRM_IOCTL_VERSION(r4, 0xc0406400, &(0x7f0000000700)={0x400, 0x9, 0x104, 0x32, &(0x7f0000000600)=""/50, 0x5e, &(0x7f0000000640)=""/94, 0x38, &(0x7f00000006c0)=""/56}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000780)={&(0x7f0000000740)=[0xffff, 0x0, 0x6, 0x7ff, 0x80, 0xfe61, 0x5, 0x8000, 0x80000001], 0x9, 0x2, 0xe73, 0x0, 0x8ade, 0x3, 0x9, {0x4, 0x101, 0x0, 0x401, 0x9, 0x88c, 0x9, 0xdd1, 0x3f, 0x75, 0x2, 0x0, 0x4, 0x1, "c5e8261774417d102d77418c7cbaadbbe7a581f177a2504cc5c35a5965f3fe6b"}}) getsockopt$inet_udp_int(r2, 0x11, 0xb, &(0x7f0000000800), &(0x7f0000000840)=0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000880)={0x4ae9, 0x0, 0x0, 0xfff7, 0x40}, 0xc) [ 303.503750][ T8703] IPVS: ftp: loaded support on port[0] = 21 [ 303.753456][ T8703] chnl_net:caif_netlink_parms(): no params data found [ 304.039054][ T8703] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.047753][ T8703] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.057301][ T8703] device bridge_slave_0 entered promiscuous mode [ 304.107524][ T8703] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.114800][ T8703] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.125099][ T8703] device bridge_slave_1 entered promiscuous mode 18:30:18 executing program 0: unshare(0x20040100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[r1], 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x6d, &(0x7f0000000080)={r6}, &(0x7f00000000c0)=0xfe42) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000000)={r6, 0x4, 0x20}, &(0x7f0000000080)=0xc) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @empty, @multicast1}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r7, @in6={{0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, [], 0x1e}, 0xffffff81}}, 0x7fffffff, 0x0, 0x81, 0x8, 0x5, 0x8, 0x80}, &(0x7f00000001c0)=0x9c) r8 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r8, 0x29, 0xd1, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) [ 304.233868][ T8703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.262658][ T8703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.381375][ T8703] team0: Port device team_slave_0 added [ 304.422378][ T8703] team0: Port device team_slave_1 added [ 304.509353][ T8703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.520121][ T8703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.547503][ T8703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.618752][ T8703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.626705][ T8703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.653088][ T8703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.825336][ T8703] device hsr_slave_0 entered promiscuous mode [ 304.867477][ T8703] device hsr_slave_1 entered promiscuous mode [ 304.926049][ T8703] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.933850][ T8703] Cannot create hsr debugfs directory [ 305.239615][ T8703] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 305.293062][ T8703] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 305.357488][ T8703] netdevsim netdevsim1 netdevsim2: renamed from eth2 18:30:20 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7000000e4000000650015067ce90000fa0b00000000fad451324a04947e3b62a4e0efbfc6eca38904a6cbeac554f28f62530011f08c37a44ffbf30e1c3a7362f3e2d2e183e7a21c7dcd2cb2481713f064f9abd2a599cf422138263b9f1041a67caf42a7dc9f43f236623a3212c6208777b368445592f883614e36fd113ccd81935a22c2e81d510a0f5430eb71e31250bfc71d75db7622543390d8"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 305.428650][ T8703] netdevsim netdevsim1 netdevsim3: renamed from eth3 18:30:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0xfffffffe, 0xffffffff}}) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000380)={[0x2, 0x3, 0x5aca, 0x1, 0x1ff, 0x7, 0x7ff, 0x0, 0x1c00, 0x6, 0x8, 0x2, 0x9, 0x4, 0x6, 0x2, 0xffff, 0x4, 0x2, 0x0, 0x6, 0x7, 0x6, 0xffffff00, 0x1f, 0xfffffff9, 0x4, 0x13, 0xdf2f, 0xc92c0000, 0x9, 0x1, 0x6, 0x1000, 0x8000, 0x5, 0x8, 0x9, 0x0, 0x4, 0x7, 0x4, 0x6, 0x3, 0x1, 0x8, 0x80000001, 0xe754, 0x8000, 0x4, 0x1, 0x0, 0x1, 0x1, 0x6, 0x401, 0x64, 0x101, 0xfffffbff, 0x8, 0xe0b, 0x2, 0x58d0, 0x101, 0x7f, 0xfff, 0x0, 0x6, 0x0, 0x2, 0x4aa, 0x7fff, 0x2, 0x5, 0x4, 0x100, 0x7, 0x1ff, 0x7, 0xc2c, 0x4, 0x7, 0x1f, 0x2, 0x4, 0x7ff, 0x1, 0x5, 0x8, 0x7, 0x2, 0x4, 0x8, 0x3, 0x2, 0x6, 0x3, 0x990, 0x9, 0x9, 0x9, 0xff, 0x8, 0x5, 0x8001, 0x5a, 0x3, 0x1000, 0x7, 0x140, 0x9, 0x1000, 0x40, 0x6, 0x8ff, 0x9, 0x4, 0x2, 0xa4cd, 0x0, 0x80000000, 0x5, 0x5, 0x10000, 0x101, 0x0, 0xff, 0x1000, 0x5, 0x6, 0xffffff74, 0x4, 0x3, 0x5, 0x3, 0x8000, 0x0, 0x80, 0x0, 0x1f, 0x8, 0x8001, 0xe880, 0x6, 0xf1d7, 0x6, 0x7, 0x59, 0x75e, 0x2, 0x2, 0x9, 0x7, 0x5, 0x400, 0x7, 0x8, 0x80000000, 0x9, 0xfffffffc, 0x9, 0x8, 0x8, 0x401, 0x200, 0x7, 0x40, 0x4, 0xe44, 0x3708, 0x52a9, 0x5, 0x0, 0xccd4, 0x101, 0x101, 0x0, 0x80000000, 0x6, 0x1, 0x10000, 0x8, 0x1, 0x3, 0x101, 0x1, 0x5fb75605, 0x4, 0x0, 0x3, 0x100, 0xfe00000, 0xbbb, 0x7fffffff, 0x5, 0x6, 0x2, 0x40, 0x3, 0x4, 0x1, 0xffffffff, 0x0, 0xffff, 0x1f, 0xffffff85, 0x6f663093, 0x2c9b, 0x2, 0xd2dcd63, 0x4, 0xffffffb5, 0x6, 0x3, 0x10000, 0x9, 0x80000000, 0x9, 0x1b71, 0x8, 0x7fffffff, 0x7fff, 0x3f, 0x8370, 0x100, 0x3, 0x10001, 0xffffffff, 0x1, 0x2, 0xfffffff7, 0x401, 0x34c, 0x100, 0x2, 0x10000, 0x182, 0x10001, 0x1, 0x7fff, 0x800, 0x0, 0xffffffff, 0x4, 0x0, 0x4, 0x2, 0x5, 0x0, 0x3, 0x8, 0x6, 0x3, 0x8, 0x3, 0x7fffffff, 0x9, 0x1, 0x4a, 0x7, 0x1ff, 0x9, 0xe116, 0x49812109, 0x4, 0x1, 0x10001, 0x6, 0x400, 0x3, 0x1, 0x2, 0x8, 0x4, 0x6b1, 0x5, 0x1, 0xfffffffe, 0x3f, 0x5, 0x4174, 0x7, 0x0, 0x0, 0xf, 0x401, 0x80, 0x0, 0x8001, 0x200, 0x2, 0x6, 0x5, 0x1, 0xfffffffb, 0x8, 0xfffffff7, 0x3c1, 0x6, 0x6, 0x4e, 0x2, 0x80, 0xdfb, 0x17e, 0x2, 0x9, 0xfffffffa, 0x9, 0x4, 0x1000, 0x7ff, 0xbf, 0xfffff58c, 0x2, 0x400, 0x7, 0x0, 0x4, 0xfff, 0x9, 0x10000, 0xce7a, 0x14, 0x62, 0x20, 0x9, 0xb1b, 0x1ff, 0x7f, 0x8, 0x1, 0x2, 0x4, 0x1, 0x3, 0x10001, 0xffff, 0xefa3, 0xffff296a, 0xd69, 0x5, 0xcb19, 0x5, 0x6, 0x4325, 0x1, 0x80, 0x5, 0x2, 0x65, 0x8001, 0x36, 0x64, 0x6, 0x7f, 0x400, 0x9, 0x9, 0xffff, 0x7f, 0x0, 0x9, 0x7, 0x3ff, 0x0, 0x4e2f, 0xfffffffb, 0x6, 0xffff, 0x0, 0x9, 0x1ff, 0x9, 0x2, 0x1, 0xffffffac, 0x7f, 0x7f, 0x5, 0x7, 0x4, 0x7, 0x11d, 0x4, 0x3, 0x8, 0x9, 0x2, 0x9, 0x400, 0x401, 0x7, 0x7ff, 0xf5, 0x1, 0xfff, 0x7, 0x8, 0x7, 0x0, 0x3, 0x101, 0x7fffffff, 0x7d2ed329, 0x1, 0x962, 0x4, 0x400, 0x0, 0x6, 0x2, 0x4, 0x961b, 0x1, 0x1, 0xdf6, 0xd1e8, 0xfff, 0x7000, 0x1, 0x8, 0x1ff, 0xe2f9, 0xfffffff8, 0x1, 0x9, 0x10001, 0x200, 0x2, 0x9, 0x10001, 0x84ab, 0x400, 0xfb9, 0x3f, 0x3, 0x8a, 0xfff, 0x3, 0xa4, 0x1, 0x8, 0x8, 0x9, 0xb330, 0x8001, 0x3, 0x10000, 0xfffffe01, 0x9, 0x2, 0x1f, 0x4, 0x5, 0x7ff, 0xdbef, 0x601aeb0a, 0x1, 0x1, 0x0, 0x3, 0x2682ca4d, 0x0, 0x1, 0x38, 0x0, 0x0, 0x8, 0x40, 0x8000, 0x5, 0x80, 0x7, 0x9, 0x2, 0x9, 0x6, 0x1, 0x9, 0x6, 0x6, 0x7, 0x4, 0x0, 0x54a2, 0x3, 0x0, 0xb2, 0x20, 0x6, 0x9, 0x3, 0x6731, 0x4, 0xf8d, 0x0, 0x7, 0x8001, 0xfffffff7, 0x5, 0x8, 0x3, 0x9, 0x5, 0x3f, 0x3a4, 0xfffffff9, 0xffffffff, 0x20, 0x20, 0x3, 0x1, 0x2, 0x4, 0x9, 0x1, 0xff, 0x8001, 0x0, 0x3, 0x6, 0x1, 0x4, 0x2, 0x0, 0x800, 0x8, 0x7, 0x7, 0x2, 0x3, 0x3, 0x9e, 0x9f2b, 0x7, 0x0, 0x2, 0x9, 0x7, 0x0, 0x0, 0x1, 0x2, 0x1, 0x4, 0xfffffff7, 0x8000, 0xcc, 0x4, 0x0, 0x7, 0x7ff, 0x6, 0x80, 0x1, 0x80000000, 0x8000, 0xfffffffa, 0x10000, 0x8, 0x4, 0x301d, 0x8, 0x56, 0x5, 0x6, 0x6, 0x3f, 0x1, 0x9, 0x9, 0x200, 0x3, 0x80000000, 0x2, 0x7, 0x4, 0x7, 0x5, 0xfff, 0x4, 0x2e5, 0x7ff, 0x7fffffff, 0xf92, 0xa6, 0x5, 0x7c, 0x6, 0x3f, 0x498, 0x6138, 0x6, 0x200, 0xb8600000, 0x101, 0x71, 0x10001, 0xe65, 0x8, 0x8, 0xffffffff, 0x1, 0xffff, 0x6, 0x2, 0x6, 0x3, 0xff, 0xff, 0x80000000, 0x8, 0xffffffff, 0x30e, 0x800, 0x800, 0x0, 0xf9, 0x8, 0x7, 0x10001, 0x33, 0x0, 0x7, 0x9, 0x8000, 0x40, 0x1, 0x704, 0x8, 0x7, 0x1, 0x80000001, 0x3, 0x1, 0x24000, 0x9, 0xd9c9, 0x2fbd, 0x1, 0xc00000, 0xffffffff, 0x7, 0x3, 0x1, 0xfff, 0x400, 0x400, 0xdc3, 0x1, 0x7fff, 0x1ff, 0x61, 0x40, 0xfa, 0x10001, 0x1, 0x5, 0x7ff, 0x1, 0x0, 0x3, 0x6, 0xb2, 0x7fff, 0x10001, 0x2, 0x6, 0xffffffff, 0x7ff, 0x7fe0000, 0x27d3, 0x3ff, 0x1f, 0x9, 0x3, 0x3, 0x8, 0x9, 0x8, 0x3, 0x7, 0x400, 0x5, 0x6, 0x2, 0x170d5d50, 0x9, 0x5, 0xff, 0x7, 0xfffffffd, 0x2, 0x9, 0x8, 0x1ff, 0x6, 0x7fff, 0x5, 0x400, 0x1, 0x0, 0x4, 0x0, 0x4, 0x80000000, 0xe3e, 0xfffffff9, 0x3, 0xfffff801, 0x7fffffff, 0x3, 0x4, 0xd3a, 0x7fff, 0x47, 0x40, 0x7, 0x8, 0x3f, 0x1f, 0x4, 0x2, 0xfff, 0x18, 0x9, 0xf8000000, 0x9, 0xffffffff, 0x1, 0x8, 0xfffffb5c, 0xfe, 0x2, 0x1, 0xb2, 0xdca2, 0x7, 0x0, 0x5, 0x400, 0xffffffcd, 0x3, 0x77, 0x7f, 0x62e0266e, 0x8, 0x8, 0x6, 0x200, 0x8001, 0x81, 0x3, 0x4, 0x996, 0x353727ef, 0x3, 0x4, 0x80000001, 0xffff, 0x2, 0x3, 0x4, 0x10001, 0x4, 0x0, 0x2, 0x0, 0x0, 0x2, 0x6, 0x7, 0x9, 0x100, 0x401, 0x7, 0x1, 0x2, 0x8001, 0x3, 0xfec, 0x94d4, 0x7, 0x4, 0x2000, 0x4, 0x421, 0x6, 0x3, 0x2624, 0x7fffffff, 0x7fff, 0x10001, 0x80000001, 0x9, 0x4, 0x9, 0x9, 0x0, 0x2, 0xa254, 0x0, 0x7f, 0x1, 0x8, 0xfff, 0x8001, 0x1, 0x2, 0xfff, 0x2, 0x40, 0xff, 0x5, 0x8, 0x10000, 0x4, 0x7, 0x7, 0x2, 0x0, 0x2, 0x0, 0x9938, 0xb8ca, 0x742, 0x40, 0x1f, 0x1000, 0x76d, 0x200, 0x0, 0x7b, 0x5, 0x401, 0x3c645fa6, 0xff, 0x7fff, 0x5, 0xa7b, 0x9, 0x268e, 0x8, 0x4, 0x4b, 0xbb, 0x7616, 0x3, 0x5, 0x5, 0xc327, 0x2, 0x1, 0xffffffff, 0x4, 0x7, 0x2a1d, 0xd, 0x1, 0x5cfe, 0x7fff, 0x1, 0x20, 0xaa29, 0x6de4, 0x5, 0x8, 0x25, 0x2, 0xfffffffc, 0x1000, 0x8000, 0x1000, 0x800, 0x3b8, 0x1, 0x1c6, 0xff, 0x3, 0x8000, 0xfffffffa, 0x1a8d, 0x8001, 0x5, 0x5, 0x800, 0x2, 0x34, 0x0, 0xfff, 0x625b, 0x0, 0x80, 0x0, 0x1, 0x9, 0xfffffff9, 0x9, 0x6, 0x1, 0x4, 0xb1b, 0x1, 0x80000000, 0x8, 0x405c694d, 0x80, 0x1, 0x100, 0x11, 0x10001, 0x10, 0x80000001, 0x20, 0x101, 0x0, 0x40, 0x1, 0xfff, 0x9, 0x5, 0xfffffffa, 0x0, 0x2, 0x6, 0x7, 0x5, 0x1000, 0x0, 0x5, 0x2, 0x72ac, 0x62b, 0x3, 0x4, 0xfffff4a3, 0x6, 0x9771, 0x35d6, 0x4, 0x40, 0x1, 0x7ff, 0x5, 0x400, 0x401, 0x3, 0x5, 0x401, 0x0, 0x5, 0x7, 0x0, 0x1, 0x9, 0x2, 0xf2a, 0x0, 0x3, 0x5c445dba, 0x7fffffff, 0xfffffff9, 0xfff, 0x6, 0x4, 0x8e25, 0x7, 0x9, 0x1, 0x6d33, 0x100, 0x6, 0x1f, 0x5, 0xfffffffd, 0x1, 0xffff, 0x7ff, 0x9, 0xffff1ce1, 0x7, 0x20, 0x4, 0x200, 0x8, 0x0, 0x8, 0x5, 0x800, 0x3, 0x4, 0xa83, 0x8, 0x7, 0x0, 0x899, 0x81, 0x6, 0x1f, 0x100, 0x4, 0xfffffffd, 0x3, 0x8, 0x7fffffff, 0x9774, 0x7, 0x3, 0xb5, 0x1, 0x0, 0x4, 0x8001, 0xfffffffd, 0xc521, 0x8, 0x2, 0x7fffffff, 0x1f, 0x10001, 0x0, 0xa29, 0x5]}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 305.672872][ T8924] input: syz1 as /devices/virtual/input/input5 18:30:20 executing program 0: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000300)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="2a8000070600000000000000000000000200000000000000010000000000000001000000000000000000d8a04f0d35f67bc50baf277a6b7d00786155d4ed9e544f533e008c864f6078ee8569683040976072f32e5d4559ee9d092bb134ffada286efeb4b64f05f4fb57394211458bb6541e00763701a81dcb34b5123ae40a82769fca21b63b79281990518d19f43e53dea"], 0x2a) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x1b2, 0x4) connect(r2, &(0x7f00000001c0)=@in={0x2, 0x4e24, @remote}, 0x80) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000000d7, 0x0) [ 305.808873][ T8703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.894389][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 305.903794][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 305.922311][ T8703] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.943147][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 305.953847][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 305.963449][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.970904][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.037503][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 306.046938][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 306.057216][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 306.068768][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.076271][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.085513][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 306.096568][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 306.107537][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 306.118305][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 306.128731][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 306.139477][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 306.173557][ T8703] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 306.184204][ T8703] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 306.263642][ T8703] 8021q: adding VLAN 0 to HW filter on device batadv0 18:30:20 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[r2], 0x1) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000180)={0x0, &(0x7f0000000140)=[0xffffffffffffffff]}, 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r3 = io_uring_setup(0xa4, &(0x7f0000000080)) r4 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000100)=[r4], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000180)={0x0, &(0x7f0000000140)=[0xffffffffffffffff]}, 0x1) close(r2) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000000000)=0x3) recvfrom(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = fcntl$dupfd(r0, 0x0, r5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x22}}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e24, @multicast2}, 0xb4, 0x0, 0x0, 0x0, 0x9, &(0x7f00000001c0)='macvlan1\x00', 0x6, 0x9a1, 0x3}) write$FUSE_NOTIFY_INVAL_INODE(r6, &(0x7f0000000000)={0x28}, 0xfdef) [ 306.398997][ T8703] device veth0_vlan entered promiscuous mode [ 306.412608][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 306.423765][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 306.434340][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 306.445115][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 306.455351][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 306.465433][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 306.473620][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 306.481644][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 306.491878][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 306.502192][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 306.512109][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 306.551529][ T8703] device veth1_vlan entered promiscuous mode [ 306.561461][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 306.572040][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 306.581574][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 306.591411][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 306.684674][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 306.695615][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 306.705826][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 306.732355][ T8703] device veth0_macvtap entered promiscuous mode [ 306.761392][ T8703] device veth1_macvtap entered promiscuous mode [ 306.806642][ T8703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 306.817347][ T8703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.831183][ T8703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.839602][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 306.849369][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 306.859070][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 306.869313][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 306.921877][ T8703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 306.932596][ T8703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.946640][ T8703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.956908][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 306.967497][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 18:30:21 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x130) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="666481", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000037777,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 18:30:22 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[r2], 0x1) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000180)={0x0, &(0x7f0000000140)=[0xffffffffffffffff]}, 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r3 = io_uring_setup(0xa4, &(0x7f0000000080)) r4 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000100)=[r4], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000180)={0x0, &(0x7f0000000140)=[0xffffffffffffffff]}, 0x1) close(r2) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000000000)=0x3) recvfrom(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = fcntl$dupfd(r0, 0x0, r5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x22}}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e24, @multicast2}, 0xb4, 0x0, 0x0, 0x0, 0x9, &(0x7f00000001c0)='macvlan1\x00', 0x6, 0x9a1, 0x3}) write$FUSE_NOTIFY_INVAL_INODE(r6, &(0x7f0000000000)={0x28}, 0xfdef) [ 307.423600][ T8966] fuse: Unknown parameter 'fd0x0000000000000003' [ 307.435160][ T8967] fuse: Unknown parameter 'fd0x0000000000000003' 18:30:22 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[r2], 0x1) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000180)={0x0, &(0x7f0000000140)=[0xffffffffffffffff]}, 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r3 = io_uring_setup(0xa4, &(0x7f0000000080)) r4 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000100)=[r4], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000180)={0x0, &(0x7f0000000140)=[0xffffffffffffffff]}, 0x1) close(r2) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000000000)=0x3) recvfrom(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = fcntl$dupfd(r0, 0x0, r5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x22}}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e24, @multicast2}, 0xb4, 0x0, 0x0, 0x0, 0x9, &(0x7f00000001c0)='macvlan1\x00', 0x6, 0x9a1, 0x3}) write$FUSE_NOTIFY_INVAL_INODE(r6, &(0x7f0000000000)={0x28}, 0xfdef) 18:30:22 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[r2], 0x1) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000180)={0x0, &(0x7f0000000140)=[0xffffffffffffffff]}, 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r3 = io_uring_setup(0xa4, &(0x7f0000000080)) r4 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000100)=[r4], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000180)={0x0, &(0x7f0000000140)=[0xffffffffffffffff]}, 0x1) close(r2) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000000000)=0x3) recvfrom(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = fcntl$dupfd(r0, 0x0, r5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x22}}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e24, @multicast2}, 0xb4, 0x0, 0x0, 0x0, 0x9, &(0x7f00000001c0)='macvlan1\x00', 0x6, 0x9a1, 0x3}) write$FUSE_NOTIFY_INVAL_INODE(r6, &(0x7f0000000000)={0x28}, 0xfdef) 18:30:23 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[r2], 0x1) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000180)={0x0, &(0x7f0000000140)=[0xffffffffffffffff]}, 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r3 = io_uring_setup(0xa4, &(0x7f0000000080)) r4 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000100)=[r4], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000180)={0x0, &(0x7f0000000140)=[0xffffffffffffffff]}, 0x1) close(r2) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000000000)=0x3) recvfrom(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = fcntl$dupfd(r0, 0x0, r5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x22}}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e24, @multicast2}, 0xb4, 0x0, 0x0, 0x0, 0x9, &(0x7f00000001c0)='macvlan1\x00', 0x6, 0x9a1, 0x3}) write$FUSE_NOTIFY_INVAL_INODE(r6, &(0x7f0000000000)={0x28}, 0xfdef) 18:30:23 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[r2], 0x1) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000180)={0x0, &(0x7f0000000140)=[0xffffffffffffffff]}, 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r3 = io_uring_setup(0xa4, &(0x7f0000000080)) r4 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000100)=[r4], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000180)={0x0, &(0x7f0000000140)=[0xffffffffffffffff]}, 0x1) close(r2) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000000000)=0x3) recvfrom(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = fcntl$dupfd(r0, 0x0, r5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x22}}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e24, @multicast2}, 0xb4, 0x0, 0x0, 0x0, 0x9, &(0x7f00000001c0)='macvlan1\x00', 0x6, 0x9a1, 0x3}) write$FUSE_NOTIFY_INVAL_INODE(r6, &(0x7f0000000000)={0x28}, 0xfdef) 18:30:24 executing program 1: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[r2], 0x1) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000180)={0x0, &(0x7f0000000140)=[0xffffffffffffffff]}, 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r3 = io_uring_setup(0xa4, &(0x7f0000000080)) r4 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000100)=[r4], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000180)={0x0, &(0x7f0000000140)=[0xffffffffffffffff]}, 0x1) close(r2) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000000000)=0x3) recvfrom(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = fcntl$dupfd(r0, 0x0, r5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x22}}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e24, @multicast2}, 0xb4, 0x0, 0x0, 0x0, 0x9, &(0x7f00000001c0)='macvlan1\x00', 0x6, 0x9a1, 0x3}) write$FUSE_NOTIFY_INVAL_INODE(r6, &(0x7f0000000000)={0x28}, 0xfdef) 18:30:24 executing program 0: prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x6d, &(0x7f0000000080)={r4}, &(0x7f00000000c0)=0xfe42) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r8, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32=r9], 0x38}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r5, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x10) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000280)={0x0, 0x2, 0x1, 0x20bf}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x9, 0x1b, 0x2, 0x6, 0xfffff46f, 0x6a951bcb, 0x0, r4}, &(0x7f00000000c0)=0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffff2}]}) 18:30:25 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r0, &(0x7f0000000080)="240000001a005f0014f9f4070009040002002000feffffff000000000800020000000000", 0x24) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0xa, 0xffff46ac, 0x4, 0x0, r2}) 18:30:25 executing program 1: r0 = getpid() tkill(r0, 0x1000000000015) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8000000, 0x9, 0x200, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1f) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) socket$inet_sctp(0x2, 0x0, 0x84) r4 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r4, &(0x7f0000db0000/0x1000)=nil, 0x5000) shmctl$IPC_INFO(r4, 0x3, &(0x7f00000001c0)=""/138) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) socket$inet(0x2, 0x80001, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x82}, 0x8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2, 0xfffffffe}}, 0x0, 0x0, 0xfffffffd, 0x0, 0xb3550aa4ba878254}, 0x9c) ioctl$VIDIOC_S_JPEGCOMP(0xffffffffffffffff, 0x408c563e, &(0x7f0000000100)={0x20, 0xb, 0x8000, "2078d7f7e89f583a4a5f01a6da4831947ead1e7e893d31d914fcc468b995412d28bc0e1c6b0b9e88196b54b79ce115bd8f1abc734a98ee4bec48e2ec", 0x0, "0271f6ee482493ad9e93aa71be83f9cd88dc501564804d15d55452535a079c3ea7a03a5cf06e73c18dff531cf5fdb2a8b4b35fdf66ac86e8e1bb76fb", 0x20}) sendfile(r2, 0xffffffffffffffff, 0x0, 0xedc0) 18:30:25 executing program 0: pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0\x00') r0 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x48f5ade13c961614}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)=0x8) getpid() ioctl$VT_WAITACTIVE(r0, 0x5607) add_key(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000002c0)='4', 0x1, 0xfffffffffffffffe) add_key(&(0x7f00000004c0)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='B', 0x1, 0xfffffffffffffffd) [ 310.846937][ C0] hrtimer: interrupt took 98495 ns 18:30:26 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000040)) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)={0x4, 0x0}, 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r1, 0xff}, 0xc) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x8) ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, &(0x7f0000000100)) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000140)=0x7, 0x8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f00000001c0)={0x9, 0x4}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x309302, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f0000000240)={{0x6}, 0x1, 0x8, 0xffffffff, {0x1f, 0xff}, 0x9, 0x8000}) ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f00000002c0)=""/85) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340)='NLBL_CIPSOv4\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r4, 0xc04c5349, &(0x7f0000000380)={0x8, 0x5, 0x47}) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='fuse\x00', 0x2132010, &(0x7f0000000500)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@obj_user={'obj_user', 0x3d, '['}}]}}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000600)={r2, 0xffffffffffffff81, 0x2, 0x101}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000640)={0x0, 0x8a, "4c691557d8d98e4bd16a6b7ff3ff427bebca85015191a1cf6ad62c769a922a399bbd7c2c2a11bd34cb67137d7ae9df306d1dd75347900b607077ae2e84e68250bf595fa1e66db7062abf681ecf660ce5300626c0229d0ebad097507d7e8a5b922e084d0f77fb6d3238af86527cbc932bec9c5121db056ee1d80b0cb381995bef0981672caea49349acd5"}, &(0x7f0000000700)=0x92) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000740)={r7}, 0x8) syz_open_dev$swradio(&(0x7f0000000780)='/dev/swradio#\x00', 0x1, 0x2) 18:30:26 executing program 0: pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0\x00') r0 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x48f5ade13c961614}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)=0x8) getpid() ioctl$VT_WAITACTIVE(r0, 0x5607) add_key(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000002c0)='4', 0x1, 0xfffffffffffffffe) add_key(&(0x7f00000004c0)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='B', 0x1, 0xfffffffffffffffd) 18:30:26 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000080)="54da88640f61c268ac33338fe0507dbea10ed7853cd1d912d20fd8cfa089b1cc88903985f4e630c848753b63800aaf5b500c743761165b99226448", {0x1, 0x80, 0x38303553, 0x7, 0x9, 0x7fff, 0xa, 0xfffffffc}}) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc, 0x0, 0x14, 0x1, 0x0, r2, &(0x7f0000000000), 0x0, 0x101}]) [ 312.292803][ T9045] IPVS: ftp: loaded support on port[0] = 21 [ 312.614356][ T9045] chnl_net:caif_netlink_parms(): no params data found 18:30:27 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0x0, 0x3}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x3, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd126560000000049d2e181baf9450000953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360127ec60cb274ea524347d37dcb84900da971f7ee096d74c92e34bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000002000d3b049f3fc65d61c2b3c65f2f80a61ea6e457ebc93980db1db00b419ce38d76109f7a4c37d64ca0cd80de1ba0c2974017ca4a8708f7a1f6885f986a1ad1fb11f8c2e73"], 0xd3) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000540)={{0x3e, 0x8990, 0x7fff}, 'syz0\x00', 0x1f}) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000180), 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) sync() [ 312.787224][ C1] sd 0:0:1:0: [sg0] tag#2858 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 312.797962][ C1] sd 0:0:1:0: [sg0] tag#2858 CDB: Test Unit Ready [ 312.804757][ C1] sd 0:0:1:0: [sg0] tag#2858 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 312.814607][ C1] sd 0:0:1:0: [sg0] tag#2858 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 312.824511][ C1] sd 0:0:1:0: [sg0] tag#2858 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 312.835294][ C1] sd 0:0:1:0: [sg0] tag#2858 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 312.845195][ C1] sd 0:0:1:0: [sg0] tag#2858 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 312.855102][ C1] sd 0:0:1:0: [sg0] tag#2858 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 312.864998][ C1] sd 0:0:1:0: [sg0] tag#2858 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 312.874919][ C1] sd 0:0:1:0: [sg0] tag#2858 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 312.884811][ C1] sd 0:0:1:0: [sg0] tag#2858 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 312.894698][ C1] sd 0:0:1:0: [sg0] tag#2858 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 312.904596][ C1] sd 0:0:1:0: [sg0] tag#2858 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 312.912296][ T9045] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.914463][ C1] sd 0:0:1:0: [sg0] tag#2858 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 312.914578][ C1] sd 0:0:1:0: [sg0] tag#2858 CDB[c0]: 00 00 00 00 00 00 00 00 [ 312.935467][ T9168] input: syz0 as /devices/virtual/input/input7 [ 312.939484][ T9045] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.954932][ T9045] device bridge_slave_0 entered promiscuous mode [ 313.117085][ T9045] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.124575][ T9045] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.134180][ T9045] device bridge_slave_1 entered promiscuous mode [ 313.292521][ C1] sd 0:0:1:0: [sg0] tag#2824 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 313.303265][ C1] sd 0:0:1:0: [sg0] tag#2824 CDB: Test Unit Ready [ 313.310715][ C1] sd 0:0:1:0: [sg0] tag#2824 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 313.320634][ C1] sd 0:0:1:0: [sg0] tag#2824 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 313.330583][ C1] sd 0:0:1:0: [sg0] tag#2824 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 313.340669][ C1] sd 0:0:1:0: [sg0] tag#2824 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 313.350660][ C1] sd 0:0:1:0: [sg0] tag#2824 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 313.351589][ T9045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.360698][ C1] sd 0:0:1:0: [sg0] tag#2824 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 313.381993][ C1] sd 0:0:1:0: [sg0] tag#2824 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 313.391976][ C1] sd 0:0:1:0: [sg0] tag#2824 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 313.403057][ C1] sd 0:0:1:0: [sg0] tag#2824 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 313.414116][ C1] sd 0:0:1:0: [sg0] tag#2824 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 313.424206][ C1] sd 0:0:1:0: [sg0] tag#2824 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 313.426750][ T9045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.434076][ C1] sd 0:0:1:0: [sg0] tag#2824 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 313.453673][ C1] sd 0:0:1:0: [sg0] tag#2824 CDB[c0]: 00 00 00 00 00 00 00 00 [ 313.465493][ T9168] input: syz0 as /devices/virtual/input/input8 [ 313.620763][ T9045] team0: Port device team_slave_0 added [ 313.682718][ T9045] team0: Port device team_slave_1 added 18:30:28 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0x0, 0x3}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x3, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd126560000000049d2e181baf9450000953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16a61fd063f026ed7360127ec60cb274ea524347d37dcb84900da971f7ee096d74c92e34bd5522d45cc36c2442eac2d224609aba9e60000000000000000000000002000d3b049f3fc65d61c2b3c65f2f80a61ea6e457ebc93980db1db00b419ce38d76109f7a4c37d64ca0cd80de1ba0c2974017ca4a8708f7a1f6885f986a1ad1fb11f8c2e73"], 0xd3) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000540)={{0x3e, 0x8990, 0x7fff}, 'syz0\x00', 0x1f}) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000180), 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) sync() [ 313.740572][ T9045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.748481][ T9045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.774611][ T9045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active 18:30:28 executing program 1: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\b\x00', 0x7) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(camellia)\x00'}, 0x58) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x110, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ASHMEM_GET_SIZE(r4, 0x7704, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ftruncate(r0, 0x0) [ 313.895278][ T9045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.902398][ T9045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.930481][ T9045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.956667][ C0] sd 0:0:1:0: [sg0] tag#2834 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 313.967371][ C0] sd 0:0:1:0: [sg0] tag#2834 CDB: Test Unit Ready [ 313.974623][ C0] sd 0:0:1:0: [sg0] tag#2834 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 313.991135][ C0] sd 0:0:1:0: [sg0] tag#2834 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 314.001013][ C0] sd 0:0:1:0: [sg0] tag#2834 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 314.010945][ C0] sd 0:0:1:0: [sg0] tag#2834 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 314.021193][ C0] sd 0:0:1:0: [sg0] tag#2834 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 314.031170][ C0] sd 0:0:1:0: [sg0] tag#2834 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 314.041093][ C0] sd 0:0:1:0: [sg0] tag#2834 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 314.051098][ C0] sd 0:0:1:0: [sg0] tag#2834 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 314.061108][ C0] sd 0:0:1:0: [sg0] tag#2834 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 314.070995][ C0] sd 0:0:1:0: [sg0] tag#2834 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 314.080939][ C0] sd 0:0:1:0: [sg0] tag#2834 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 314.090864][ C0] sd 0:0:1:0: [sg0] tag#2834 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 314.100749][ C0] sd 0:0:1:0: [sg0] tag#2834 CDB[c0]: 00 00 00 00 00 00 00 00 [ 314.114513][ T9229] input: syz0 as /devices/virtual/input/input9 18:30:28 executing program 1: r0 = getpid() tkill(r0, 0x1000000000015) setpriority(0x0, r0, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x4, 0x44, 0x1}, 0x3c) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x2000) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000140)={{0xa, 0x4e23, 0x80000001, @loopback, 0x4}, {0xa, 0x4e22, 0x7ff, @empty, 0x80000000}, 0x2, [0x1, 0xfffffffd, 0x2, 0x80000000, 0x80, 0xfffffffc, 0x2, 0x7fffffff]}, 0x5c) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x8, 0x1, &(0x7f00000000c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xa5, &(0x7f0000000440)=""/165, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:30:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r5], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$unix(0x1, 0x1, 0x0) connect(r9, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r5], 0x20}}, 0x0) [ 314.320455][ T9045] device hsr_slave_0 entered promiscuous mode [ 314.345918][ T9045] device hsr_slave_1 entered promiscuous mode [ 314.372995][ T9045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 314.380757][ T9045] Cannot create hsr debugfs directory [ 314.436338][ T9257] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 314.514526][ T9265] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 314.576246][ T9265] device bond1 entered promiscuous mode [ 314.629998][ T9257] device veth3 entered promiscuous mode [ 314.637902][ T9257] bond1: (slave veth3): Enslaving as an active interface with an up link [ 314.768460][ T9286] bond1 (unregistering): (slave veth3): Releasing backup interface [ 314.808080][ T9286] device veth3 left promiscuous mode [ 314.973712][ T9286] bond1 (unregistering): Released all slaves [ 315.101523][ T9265] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 315.164047][ T9265] device bond1 entered promiscuous mode [ 315.210296][ T9257] device veth5 entered promiscuous mode [ 315.217741][ T9257] bond1: (slave veth5): Enslaving as an active interface with an up link [ 315.329815][ T9257] bond1 (unregistering): (slave veth5): Releasing backup interface [ 315.365853][ T9257] device veth5 left promiscuous mode [ 315.459994][ T9257] bond1 (unregistering): Released all slaves [ 315.536974][ T9045] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 315.571981][ T9045] netdevsim netdevsim2 netdevsim1: renamed from eth1 18:30:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r5], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$unix(0x1, 0x1, 0x0) connect(r9, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r5], 0x20}}, 0x0) [ 315.627542][ T9045] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 315.680575][ T9045] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 315.787902][ T9456] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 315.840737][ T9456] device bond1 entered promiscuous mode [ 315.891960][ T9486] device veth7 entered promiscuous mode [ 315.899850][ T9486] bond1: (slave veth7): Enslaving as an active interface with an up link [ 315.970199][ T9499] bond1 (unregistering): (slave veth7): Releasing backup interface [ 316.011633][ T9499] device veth7 left promiscuous mode [ 316.125323][ T9499] bond1 (unregistering): Released all slaves [ 316.356343][ T9045] 8021q: adding VLAN 0 to HW filter on device bond0 18:30:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r5], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$unix(0x1, 0x1, 0x0) connect(r9, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r5], 0x20}}, 0x0) [ 316.398137][ T8964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 316.408679][ T8964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 316.430536][ T9045] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.476343][ T8964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 316.488072][ T8964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 316.497837][ T8964] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.505265][ T8964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.583452][ T9536] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 316.628462][ T9536] device bond1 entered promiscuous mode [ 316.639136][ T8958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 316.649011][ T8958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 316.659171][ T8958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 316.671222][ T8958] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.678948][ T8958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.688087][ T8958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 316.699147][ T8958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 316.710203][ T8958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 316.720985][ T8958] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 316.731981][ T8958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 316.742846][ T8958] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 316.753299][ T8958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 316.763247][ T8958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 316.805504][ T9574] device veth9 entered promiscuous mode [ 316.812993][ T9574] bond1: (slave veth9): Enslaving as an active interface with an up link [ 316.822297][ T8958] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 316.858897][ T9045] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 316.888089][ T9580] bond1 (unregistering): (slave veth9): Releasing backup interface [ 316.944326][ T9580] device veth9 left promiscuous mode [ 317.044765][ T9580] bond1 (unregistering): Released all slaves [ 317.119024][ T8958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 317.130103][ T8958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 317.210051][ T9045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.220334][ T8958] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 317.228420][ T8958] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 317.335731][ T8958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 317.347769][ T8958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 18:30:32 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/61, 0x3d}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)=""/212, 0xd4}], 0x1}}], 0x2, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100), 0xc, 0x0}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet6(r0, &(0x7f0000000700)={&(0x7f00000000c0)={0xa, 0x4e20, 0x7, @ipv4={[], [], @remote}, 0x2}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000880)="e38f5068c54ea796cf9ceafac322676484ef82ef7584696cf7e5747a09e00f31aa9b7e01cb68314ce0a4fd5ab81ff4aa5f419777b3e6ebeb681690a5b55b57f0f45e6f73312e9c60bb7167022080fbf79c1ca82ebe22ccd8d3657828566dbf52dd9bc00250ea0c5886da998347a5820c572e490bbec77ccc94ae49a10056f61082c0ac565527883fc9b85aa6ab3413eb213770355d953359205ec6c2cdd9a44580c77b57a5c8f21cd065507c69b33d0d0afb20e7e4f6e105287bb1ada880a2be139de70d3401bb259d2b738cf7b75a44689d51bddf0ce90641b59cfb8fcfae", 0xdf}, {&(0x7f0000000c80)="b75517bbf9517d62328ccaa213c6cff1844b610a133ca938cddb0e209a9b011ea54bd5a15d94df819baccbb15abed35c6fc46d4088ac16297977b7275c65bebc3ec6c461ac5aa8d31927fe3502fdb491f24cbea65c7c766b1515ab6b28deceba3d757575cba4b2bc13ba435a94ab8fef5121cbdaf3bcc8ccc7d5019bccca5f97bb41a922c017d2bc378eec67eef672520f446567dbbf68b09551917097585c1d3923f5f8d4a8035a8335be71b7af81c2a23b9682b590bd3c0392fde90d33b551691e18695d", 0xc5}, {&(0x7f0000000280)="502ba78005fe6db2a63fdde8a2dc1f5c7bdad1d0a23662a17e05e9ba6b5faf10b1af6e9a5e071ade92298a9f8414c27267b4a1ff1aab3da4ec1e3e30eeffc23b8425ed327f2cb4237231949e3f79aa030971d8211fbf5952f6646015acd287635b1ec2974ac2fbb8627a4a81523a4f86b7596aa0797a097f3d094f347cb1ff83d856327203a85aa32d20757b24b75e662e322b5d49df5931805c566734e9c25cc128b6d6", 0xa4}], 0x3, &(0x7f0000002280)=[@dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x3a, 0x6, 0x2, 0x1, 0x0, [@loopback, @private1={0xfc, 0x1, [], 0x1}, @dev={0xfe, 0x80, [], 0x16}]}}}, @dstopts={{0x100, 0x29, 0x37, {0x16, 0x1c, [], [@hao={0xc9, 0x10, @mcast2}, @generic={0x80, 0xbb, "64660a4e70861bf69af494ec09e0e33dbf93ff38911562ac0df136d46a32e37101243e2413f9e0aa505d802740e5413008aecda79866d3e2992eb4f629ea4029b7b8dfc27f53ddfa65abad3dcd6686000ef8b2b10665aae0c7c734e75112df4ecd1c1913e8b5ea3be2adda49b4728a0e5e88fe52ff9177fff32f7a18fa87bb10defa807325162f29ba7a39da5b421bd44e3911039e65565e5fe3c5967b06a6ef65c313af10c5e5e1185a3d1d15383abe679c7f6826e07d816e12f9"}, @jumbo={0xc2, 0x4, 0x4}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra]}}}, @tclass={{0x14, 0x29, 0x43, 0xfffffffe}}, @rthdrdstopts={{0x130, 0x29, 0x37, {0x2b, 0x22, [], [@generic={0x6, 0x86, "efecf60e49434013990939330dd4aaa4c658f81f88ecd22a7eb253cdbe0cf8a84b92726c368c166d347571f94d2a833d128109132b26797bb5b99964eab1d7690962d58495f9d24d429325c1f19c5f1201af5deeac3dc9f940bfdfc440420b9f294a01fd13ed3f3db90e865c4634a9731a5e04aaa9d94d0a713316ac3a179ecea335a10e895a"}, @padn={0x1, 0x1, [0x0]}, @generic={0x9, 0x6a, "03ca6a06a39c8ad1af17fcf6e9a08d4bcbf3b31215c0b3aeb3a5d30490e5b19a6e58019d64da6d5ad45144c74d91cb39802394c7a2cae5ffe8809dfd6d703cf20c5036001b6862cd78b5ae2b70228605797b4e0437fdfaecc26c9ba50c31a4e1448ee21ce876a52302cc"}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @mcast1}, @enc_lim, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}, @dontfrag={{0x14}}, @hoplimit={{0x14, 0x29, 0x34, 0x101}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x73, 0xc, 0x0, 0x2, 0x0, [@dev={0xfe, 0x80, [], 0x3f}, @private2, @ipv4={[], [], @loopback}, @private1={0xfc, 0x1, [], 0x1}, @mcast2, @mcast1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xe1}}], 0x380}, 0x8041) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000340), 0xc, &(0x7f0000000580)={&(0x7f0000002100)=@newqdisc={0x168, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x13c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_FLAGS={0xc}, @TCA_RED_PARMS={0x14}, @TCA_RED_PARMS={0x14}]}}]}, 0x168}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x218}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 18:30:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r5], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$unix(0x1, 0x1, 0x0) connect(r9, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r5], 0x20}}, 0x0) [ 317.445465][ T8958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 317.456406][ T8958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 317.475163][ T9045] device veth0_vlan entered promiscuous mode [ 317.512056][ T9045] device veth1_vlan entered promiscuous mode [ 317.536706][ T9618] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 317.594024][ T9618] device bond1 entered promiscuous mode [ 317.612358][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 317.621533][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 317.630898][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 317.677312][ T9650] device veth11 entered promiscuous mode [ 317.684817][ T9650] bond1: (slave veth11): Enslaving as an active interface with an up link [ 317.745092][ T9657] bond1 (unregistering): (slave veth11): Releasing backup interface [ 317.783944][ T9657] device veth11 left promiscuous mode [ 317.923445][ T9657] bond1 (unregistering): Released all slaves [ 318.115582][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 318.157546][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 318.168035][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 318.214443][ T9045] device veth0_macvtap entered promiscuous mode [ 318.268745][ T9045] device veth1_macvtap entered promiscuous mode [ 318.339762][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 318.352362][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.362453][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 318.374021][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.388187][ T9045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.397075][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 318.406656][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 318.416265][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 318.426512][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 318.492853][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 318.503826][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.517530][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 318.528162][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.542274][ T9045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.552590][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 318.565027][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 18:30:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r5], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r5], 0x20}}, 0x0) 18:30:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002580)={0x1b4, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IE={0x1a0, 0x2a, "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"}]}, 0x1b4}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r7 = io_uring_setup(0xa4, &(0x7f0000000080)) r8 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000100)=[r8], 0x1) r9 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000180)={0x0, &(0x7f0000000140)=[r9]}, 0x1) fsync(r9) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @private1}]}, 0x40}}, 0x0) [ 319.143403][ T9712] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 319.209486][ T9712] device bond1 entered promiscuous mode [ 319.287190][ T9718] device veth13 entered promiscuous mode [ 319.294788][ T9718] bond1: (slave veth13): Enslaving as an active interface with an up link [ 319.373527][ T9718] bond1 (unregistering): (slave veth13): Releasing backup interface [ 319.415608][ T9718] device veth13 left promiscuous mode [ 319.527017][ T9718] bond1 (unregistering): Released all slaves [ 319.590834][ T9752] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 319.686489][ T9797] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:30:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r5], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r5], 0x20}}, 0x0) 18:30:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002580)={0x1b4, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IE={0x1a0, 0x2a, "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"}]}, 0x1b4}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r7 = io_uring_setup(0xa4, &(0x7f0000000080)) r8 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000100)=[r8], 0x1) r9 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000180)={0x0, &(0x7f0000000140)=[r9]}, 0x1) fsync(r9) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @private1}]}, 0x40}}, 0x0) [ 319.923601][ T9802] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 319.988637][ T9802] device bond1 entered promiscuous mode [ 320.035095][ T9819] device veth15 entered promiscuous mode [ 320.043467][ T9819] bond1: (slave veth15): Enslaving as an active interface with an up link [ 320.121423][ T9848] bond1 (unregistering): (slave veth15): Releasing backup interface [ 320.161576][ T9848] device veth15 left promiscuous mode [ 320.380581][ T9848] bond1 (unregistering): Released all slaves [ 320.467656][ T9808] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:30:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r5], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) dup(r7) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r5], 0x20}}, 0x0) 18:30:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002580)={0x1b4, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IE={0x1a0, 0x2a, "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"}]}, 0x1b4}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r7 = io_uring_setup(0xa4, &(0x7f0000000080)) r8 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000100)=[r8], 0x1) r9 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000180)={0x0, &(0x7f0000000140)=[r9]}, 0x1) fsync(r9) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @private1}]}, 0x40}}, 0x0) [ 320.742120][ T9889] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 320.874557][ T9889] device bond1 entered promiscuous mode [ 320.911067][ T9904] device veth17 entered promiscuous mode [ 320.917993][ T9904] bond1: (slave veth17): Enslaving as an active interface with an up link [ 320.945354][ T9917] bond1 (unregistering): (slave veth17): Releasing backup interface [ 320.987277][ T9917] device veth17 left promiscuous mode [ 321.208019][ T9917] bond1 (unregistering): Released all slaves [ 321.284870][ T9894] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:30:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002580)={0x1b4, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IE={0x1a0, 0x2a, "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"}]}, 0x1b4}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r7 = io_uring_setup(0xa4, &(0x7f0000000080)) r8 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000100)=[r8], 0x1) r9 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000180)={0x0, &(0x7f0000000140)=[r9]}, 0x1) fsync(r9) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @private1}]}, 0x40}}, 0x0) 18:30:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r5], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) dup(r7) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r5], 0x20}}, 0x0) [ 321.616833][ T9983] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 321.728500][ T9983] device bond1 entered promiscuous mode [ 321.766279][ T9988] device veth19 entered promiscuous mode [ 321.773897][ T9988] bond1: (slave veth19): Enslaving as an active interface with an up link [ 321.794059][ T9978] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 321.844246][T10017] bond1 (unregistering): (slave veth19): Releasing backup interface [ 321.893746][T10017] device veth19 left promiscuous mode 18:30:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002580)={0x1b4, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IE={0x1a0, 0x2a, "7bd56249d6f44bfda3a46c6ac2a069be149fcc0e27744981e5bb0782f5cfcf04fc15afdc23ccda3332736d3def502d9a0ccfb2272797ebe6f4a0b0d533f0676291bf5f56a262b7b9a524bca47c565bdc5392d83649189a6f1df86fa770ce6ff6e22a3dbff4495953f65366020596c114047f562012566cc67a0e45099231372e686daa107bc395fe812e8f773a0428c40eaaa3ff7aee0c3aecc155e0c93f80ddf87cb3a8a77da2eefe74d96311f046c190ef359d57e7de4d577bb1d09d896ca132a185269ca2ca33e32025d54e0328fcb0383f3d39f3b2dac143b56a3cdc19eb31e6e53692557337d972254078e9e3d5bef64005525ab60f29624f13021d564f157f884953df5af60f67d1dec539fed71c524bf3289cc367471d281a9dab12c5fce517e1b6d470970e5e86318404831f2ca34e239be1d1057491817ba5781b0a70e431a1848235b4edc17627483d023025adadae20b48dbd03432f1d77021db9964553c420338ebcd68fb86617771c405c173c6e54aaa96041b5fbeaa688b1113b7ed331e87786dc4fc56d62bcddeb7cf3fc53662dbe52334a644505"}]}, 0x1b4}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r7 = io_uring_setup(0xa4, &(0x7f0000000080)) r8 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000100)=[r8], 0x1) r9 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000180)={0x0, &(0x7f0000000140)=[r9]}, 0x1) fsync(r9) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @private1}]}, 0x40}}, 0x0) [ 322.196060][T10017] bond1 (unregistering): Released all slaves [ 322.425960][T10035] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:30:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r5], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) dup(r7) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r5], 0x20}}, 0x0) 18:30:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002580)={0x1b4, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IE={0x1a0, 0x2a, "7bd56249d6f44bfda3a46c6ac2a069be149fcc0e27744981e5bb0782f5cfcf04fc15afdc23ccda3332736d3def502d9a0ccfb2272797ebe6f4a0b0d533f0676291bf5f56a262b7b9a524bca47c565bdc5392d83649189a6f1df86fa770ce6ff6e22a3dbff4495953f65366020596c114047f562012566cc67a0e45099231372e686daa107bc395fe812e8f773a0428c40eaaa3ff7aee0c3aecc155e0c93f80ddf87cb3a8a77da2eefe74d96311f046c190ef359d57e7de4d577bb1d09d896ca132a185269ca2ca33e32025d54e0328fcb0383f3d39f3b2dac143b56a3cdc19eb31e6e53692557337d972254078e9e3d5bef64005525ab60f29624f13021d564f157f884953df5af60f67d1dec539fed71c524bf3289cc367471d281a9dab12c5fce517e1b6d470970e5e86318404831f2ca34e239be1d1057491817ba5781b0a70e431a1848235b4edc17627483d023025adadae20b48dbd03432f1d77021db9964553c420338ebcd68fb86617771c405c173c6e54aaa96041b5fbeaa688b1113b7ed331e87786dc4fc56d62bcddeb7cf3fc53662dbe52334a644505"}]}, 0x1b4}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r7 = io_uring_setup(0xa4, &(0x7f0000000080)) r8 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000100)=[r8], 0x1) r9 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000180)={0x0, &(0x7f0000000140)=[r9]}, 0x1) fsync(r9) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40000000}}, @IFA_LOCAL={0x14, 0x2, @private1}]}, 0x40}}, 0x0) [ 322.713193][T10072] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 322.787245][T10072] device bond1 entered promiscuous mode [ 322.843279][T10114] bond1 (unregistering): Released all slaves 18:30:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002580)={0x1b4, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IE={0x1a0, 0x2a, "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"}]}, 0x1b4}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'}) r5 = io_uring_setup(0xa4, &(0x7f0000000080)) r6 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r6], 0x1) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000000180)={0x0, &(0x7f0000000140)=[r7]}, 0x1) fsync(r7) 18:30:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r5], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r5], 0x20}}, 0x0) [ 323.463921][T10165] device bond1 entered promiscuous mode [ 323.532497][T10199] device veth21 entered promiscuous mode [ 323.539892][T10199] bond1: (slave veth21): Enslaving as an active interface with an up link [ 323.639373][T10209] bond1 (unregistering): (slave veth21): Releasing backup interface [ 323.693043][T10209] device veth21 left promiscuous mode 18:30:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002580)={0x1b4, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IE={0x1a0, 0x2a, "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"}]}, 0x1b4}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'}) r5 = io_uring_setup(0xa4, &(0x7f0000000080)) r6 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r6], 0x1) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000000180)={0x0, &(0x7f0000000140)=[r7]}, 0x1) fsync(r7) [ 323.903399][T10209] bond1 (unregistering): Released all slaves 18:30:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002580)={0x1b4, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IE={0x1a0, 0x2a, "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"}]}, 0x1b4}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'}) r5 = io_uring_setup(0xa4, &(0x7f0000000080)) r6 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r6], 0x1) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000000180)={0x0, &(0x7f0000000140)=[r7]}, 0x1) 18:30:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r5], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r5], 0x20}}, 0x0) [ 324.396494][T10262] device bond1 entered promiscuous mode [ 324.447131][T10291] device veth23 entered promiscuous mode [ 324.454767][T10291] bond1: (slave veth23): Enslaving as an active interface with an up link 18:30:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002580)={0x1b4, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IE={0x1a0, 0x2a, "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"}]}, 0x1b4}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'}) r5 = io_uring_setup(0xa4, &(0x7f0000000080)) r6 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r6], 0x1) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000000180)={0x0, &(0x7f0000000140)=[r7]}, 0x1) [ 324.552075][T10308] bond1 (unregistering): (slave veth23): Releasing backup interface [ 324.637677][T10308] device veth23 left promiscuous mode [ 324.886780][T10308] bond1 (unregistering): Released all slaves 18:30:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002580)={0x1b4, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IE={0x1a0, 0x2a, "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"}]}, 0x1b4}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'}) r5 = io_uring_setup(0xa4, &(0x7f0000000080)) r6 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r6], 0x1) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000000180)={0x0, &(0x7f0000000140)=[r7]}, 0x1) 18:30:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r5], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r5], 0x20}}, 0x0) [ 325.300934][T10358] validate_nla: 3 callbacks suppressed [ 325.300962][T10358] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 18:30:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002580)={0x1b4, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IE={0x1a0, 0x2a, "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"}]}, 0x1b4}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'}) r5 = io_uring_setup(0xa4, &(0x7f0000000080)) r6 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r6], 0x1) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) [ 325.370320][T10358] device bond1 entered promiscuous mode [ 325.438300][T10394] bond1 (unregistering): Released all slaves 18:30:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002580)={0x1b4, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IE={0x1a0, 0x2a, "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"}]}, 0x1b4}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'}) r5 = io_uring_setup(0xa4, &(0x7f0000000080)) r6 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r6], 0x1) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) 18:30:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r5], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r5], 0x20}}, 0x0) [ 326.090191][T10457] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 18:30:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002580)={0x1b4, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IE={0x1a0, 0x2a, "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"}]}, 0x1b4}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'}) r5 = io_uring_setup(0xa4, &(0x7f0000000080)) r6 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r6], 0x1) [ 326.159591][T10457] device bond1 entered promiscuous mode [ 326.192433][T10494] bond1 (unregistering): Released all slaves 18:30:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r5], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r5], 0x20}}, 0x0) 18:30:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002580)={0x1b4, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IE={0x1a0, 0x2a, "7bd56249d6f44bfda3a46c6ac2a069be149fcc0e27744981e5bb0782f5cfcf04fc15afdc23ccda3332736d3def502d9a0ccfb2272797ebe6f4a0b0d533f0676291bf5f56a262b7b9a524bca47c565bdc5392d83649189a6f1df86fa770ce6ff6e22a3dbff4495953f65366020596c114047f562012566cc67a0e45099231372e686daa107bc395fe812e8f773a0428c40eaaa3ff7aee0c3aecc155e0c93f80ddf87cb3a8a77da2eefe74d96311f046c190ef359d57e7de4d577bb1d09d896ca132a185269ca2ca33e32025d54e0328fcb0383f3d39f3b2dac143b56a3cdc19eb31e6e53692557337d972254078e9e3d5bef64005525ab60f29624f13021d564f157f884953df5af60f67d1dec539fed71c524bf3289cc367471d281a9dab12c5fce517e1b6d470970e5e86318404831f2ca34e239be1d1057491817ba5781b0a70e431a1848235b4edc17627483d023025adadae20b48dbd03432f1d77021db9964553c420338ebcd68fb86617771c405c173c6e54aaa96041b5fbeaa688b1113b7ed331e87786dc4fc56d62bcddeb7cf3fc53662dbe52334a644505"}]}, 0x1b4}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'}) r5 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) [ 326.678369][T10546] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 326.730137][T10546] device bond1 entered promiscuous mode [ 326.774712][T10576] device veth25 entered promiscuous mode [ 326.782185][T10576] bond1: (slave veth25): Enslaving as an active interface with an up link [ 326.820223][T10590] bond1 (unregistering): (slave veth25): Releasing backup interface [ 326.853615][T10590] device veth25 left promiscuous mode [ 327.097666][T10590] bond1 (unregistering): Released all slaves 18:30:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002580)={0x1b4, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IE={0x1a0, 0x2a, "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"}]}, 0x1b4}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'}) r5 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:30:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r5], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r5], 0x20}}, 0x0) [ 327.457584][T10637] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 18:30:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x8000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/mice\x00', 0x8000) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000000200)={0x40}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) bind$netlink(r8, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbff, 0x200000}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000180), &(0x7f00000001c0)=0x10) ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x9}) [ 327.530070][T10637] device bond1 entered promiscuous mode 18:30:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002580)={0x1b4, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IE={0x1a0, 0x2a, "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"}]}, 0x1b4}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'}) r5 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) [ 327.591982][T10641] device veth27 entered promiscuous mode [ 327.599671][T10641] bond1: (slave veth27): Enslaving as an active interface with an up link [ 327.654015][T10659] bond1 (unregistering): (slave veth27): Releasing backup interface [ 327.692936][T10659] device veth27 left promiscuous mode [ 327.909839][T10659] bond1 (unregistering): Released all slaves 18:30:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002580)={0x1b4, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IE={0x1a0, 0x2a, "7bd56249d6f44bfda3a46c6ac2a069be149fcc0e27744981e5bb0782f5cfcf04fc15afdc23ccda3332736d3def502d9a0ccfb2272797ebe6f4a0b0d533f0676291bf5f56a262b7b9a524bca47c565bdc5392d83649189a6f1df86fa770ce6ff6e22a3dbff4495953f65366020596c114047f562012566cc67a0e45099231372e686daa107bc395fe812e8f773a0428c40eaaa3ff7aee0c3aecc155e0c93f80ddf87cb3a8a77da2eefe74d96311f046c190ef359d57e7de4d577bb1d09d896ca132a185269ca2ca33e32025d54e0328fcb0383f3d39f3b2dac143b56a3cdc19eb31e6e53692557337d972254078e9e3d5bef64005525ab60f29624f13021d564f157f884953df5af60f67d1dec539fed71c524bf3289cc367471d281a9dab12c5fce517e1b6d470970e5e86318404831f2ca34e239be1d1057491817ba5781b0a70e431a1848235b4edc17627483d023025adadae20b48dbd03432f1d77021db9964553c420338ebcd68fb86617771c405c173c6e54aaa96041b5fbeaa688b1113b7ed331e87786dc4fc56d62bcddeb7cf3fc53662dbe52334a644505"}]}, 0x1b4}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'}) r5 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:30:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002580)={0x1b4, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IE={0x1a0, 0x2a, "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"}]}, 0x1b4}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'}) r5 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r5], 0x1) 18:30:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r5], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r5], 0x20}}, 0x0) [ 328.323903][T10735] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 328.380137][T10735] device bond1 entered promiscuous mode 18:30:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002580)={0x1b4, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IE={0x1a0, 0x2a, "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"}]}, 0x1b4}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'}) r5 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r5], 0x1) [ 328.452418][T10755] device veth29 entered promiscuous mode [ 328.460078][T10755] bond1: (slave veth29): Enslaving as an active interface with an up link 18:30:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002580)={0x1b4, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IE={0x1a0, 0x2a, "7bd56249d6f44bfda3a46c6ac2a069be149fcc0e27744981e5bb0782f5cfcf04fc15afdc23ccda3332736d3def502d9a0ccfb2272797ebe6f4a0b0d533f0676291bf5f56a262b7b9a524bca47c565bdc5392d83649189a6f1df86fa770ce6ff6e22a3dbff4495953f65366020596c114047f562012566cc67a0e45099231372e686daa107bc395fe812e8f773a0428c40eaaa3ff7aee0c3aecc155e0c93f80ddf87cb3a8a77da2eefe74d96311f046c190ef359d57e7de4d577bb1d09d896ca132a185269ca2ca33e32025d54e0328fcb0383f3d39f3b2dac143b56a3cdc19eb31e6e53692557337d972254078e9e3d5bef64005525ab60f29624f13021d564f157f884953df5af60f67d1dec539fed71c524bf3289cc367471d281a9dab12c5fce517e1b6d470970e5e86318404831f2ca34e239be1d1057491817ba5781b0a70e431a1848235b4edc17627483d023025adadae20b48dbd03432f1d77021db9964553c420338ebcd68fb86617771c405c173c6e54aaa96041b5fbeaa688b1113b7ed331e87786dc4fc56d62bcddeb7cf3fc53662dbe52334a644505"}]}, 0x1b4}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'}) r5 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:30:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002580)={0x1b4, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IE={0x1a0, 0x2a, "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"}]}, 0x1b4}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'}) r5 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r5], 0x1) 18:30:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r5], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r5], 0x20}}, 0x0) [ 328.906712][T10797] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 18:30:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002580)={0x1b4, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IE={0x1a0, 0x2a, "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"}]}, 0x1b4}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'}) r5 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:30:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002580)={0x1b4, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IE={0x1a0, 0x2a, "7bd56249d6f44bfda3a46c6ac2a069be149fcc0e27744981e5bb0782f5cfcf04fc15afdc23ccda3332736d3def502d9a0ccfb2272797ebe6f4a0b0d533f0676291bf5f56a262b7b9a524bca47c565bdc5392d83649189a6f1df86fa770ce6ff6e22a3dbff4495953f65366020596c114047f562012566cc67a0e45099231372e686daa107bc395fe812e8f773a0428c40eaaa3ff7aee0c3aecc155e0c93f80ddf87cb3a8a77da2eefe74d96311f046c190ef359d57e7de4d577bb1d09d896ca132a185269ca2ca33e32025d54e0328fcb0383f3d39f3b2dac143b56a3cdc19eb31e6e53692557337d972254078e9e3d5bef64005525ab60f29624f13021d564f157f884953df5af60f67d1dec539fed71c524bf3289cc367471d281a9dab12c5fce517e1b6d470970e5e86318404831f2ca34e239be1d1057491817ba5781b0a70e431a1848235b4edc17627483d023025adadae20b48dbd03432f1d77021db9964553c420338ebcd68fb86617771c405c173c6e54aaa96041b5fbeaa688b1113b7ed331e87786dc4fc56d62bcddeb7cf3fc53662dbe52334a644505"}]}, 0x1b4}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = io_uring_setup(0xa4, &(0x7f0000000080)) r5 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000100)=[r5], 0x1) [ 329.037554][T10797] device bond2 entered promiscuous mode [ 329.103522][T10801] device veth31 entered promiscuous mode [ 329.111146][T10801] bond2: (slave veth31): Enslaving as an active interface with an up link 18:30:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r5], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r5], 0x20}}, 0x0) 18:30:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002580)={0x1b4, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IE={0x1a0, 0x2a, "7bd56249d6f44bfda3a46c6ac2a069be149fcc0e27744981e5bb0782f5cfcf04fc15afdc23ccda3332736d3def502d9a0ccfb2272797ebe6f4a0b0d533f0676291bf5f56a262b7b9a524bca47c565bdc5392d83649189a6f1df86fa770ce6ff6e22a3dbff4495953f65366020596c114047f562012566cc67a0e45099231372e686daa107bc395fe812e8f773a0428c40eaaa3ff7aee0c3aecc155e0c93f80ddf87cb3a8a77da2eefe74d96311f046c190ef359d57e7de4d577bb1d09d896ca132a185269ca2ca33e32025d54e0328fcb0383f3d39f3b2dac143b56a3cdc19eb31e6e53692557337d972254078e9e3d5bef64005525ab60f29624f13021d564f157f884953df5af60f67d1dec539fed71c524bf3289cc367471d281a9dab12c5fce517e1b6d470970e5e86318404831f2ca34e239be1d1057491817ba5781b0a70e431a1848235b4edc17627483d023025adadae20b48dbd03432f1d77021db9964553c420338ebcd68fb86617771c405c173c6e54aaa96041b5fbeaa688b1113b7ed331e87786dc4fc56d62bcddeb7cf3fc53662dbe52334a644505"}]}, 0x1b4}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r4 = io_uring_setup(0xa4, &(0x7f0000000080)) r5 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000100)=[r5], 0x1) 18:30:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002580)={0x1b4, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IE={0x1a0, 0x2a, "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"}]}, 0x1b4}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) [ 329.451186][T10855] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 329.553260][T10855] device bond3 entered promiscuous mode [ 329.619708][T10869] device veth33 entered promiscuous mode [ 329.627722][T10869] bond3: (slave veth33): Enslaving as an active interface with an up link 18:30:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002580)={0x1b4, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IE={0x1a0, 0x2a, "7bd56249d6f44bfda3a46c6ac2a069be149fcc0e27744981e5bb0782f5cfcf04fc15afdc23ccda3332736d3def502d9a0ccfb2272797ebe6f4a0b0d533f0676291bf5f56a262b7b9a524bca47c565bdc5392d83649189a6f1df86fa770ce6ff6e22a3dbff4495953f65366020596c114047f562012566cc67a0e45099231372e686daa107bc395fe812e8f773a0428c40eaaa3ff7aee0c3aecc155e0c93f80ddf87cb3a8a77da2eefe74d96311f046c190ef359d57e7de4d577bb1d09d896ca132a185269ca2ca33e32025d54e0328fcb0383f3d39f3b2dac143b56a3cdc19eb31e6e53692557337d972254078e9e3d5bef64005525ab60f29624f13021d564f157f884953df5af60f67d1dec539fed71c524bf3289cc367471d281a9dab12c5fce517e1b6d470970e5e86318404831f2ca34e239be1d1057491817ba5781b0a70e431a1848235b4edc17627483d023025adadae20b48dbd03432f1d77021db9964553c420338ebcd68fb86617771c405c173c6e54aaa96041b5fbeaa688b1113b7ed331e87786dc4fc56d62bcddeb7cf3fc53662dbe52334a644505"}]}, 0x1b4}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) r4 = io_uring_setup(0xa4, &(0x7f0000000080)) r5 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000100)=[r5], 0x1) 18:30:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002580)={0x1b4, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IE={0x1a0, 0x2a, "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"}]}, 0x1b4}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:30:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r5], 0x50}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r5], 0x20}}, 0x0) [ 329.946774][T10917] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 330.037522][T10917] device bond4 entered promiscuous mode [ 330.084203][T10931] bond4 (unregistering): Released all slaves 18:30:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002580)={0x1b4, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IE={0x1a0, 0x2a, "7bd56249d6f44bfda3a46c6ac2a069be149fcc0e27744981e5bb0782f5cfcf04fc15afdc23ccda3332736d3def502d9a0ccfb2272797ebe6f4a0b0d533f0676291bf5f56a262b7b9a524bca47c565bdc5392d83649189a6f1df86fa770ce6ff6e22a3dbff4495953f65366020596c114047f562012566cc67a0e45099231372e686daa107bc395fe812e8f773a0428c40eaaa3ff7aee0c3aecc155e0c93f80ddf87cb3a8a77da2eefe74d96311f046c190ef359d57e7de4d577bb1d09d896ca132a185269ca2ca33e32025d54e0328fcb0383f3d39f3b2dac143b56a3cdc19eb31e6e53692557337d972254078e9e3d5bef64005525ab60f29624f13021d564f157f884953df5af60f67d1dec539fed71c524bf3289cc367471d281a9dab12c5fce517e1b6d470970e5e86318404831f2ca34e239be1d1057491817ba5781b0a70e431a1848235b4edc17627483d023025adadae20b48dbd03432f1d77021db9964553c420338ebcd68fb86617771c405c173c6e54aaa96041b5fbeaa688b1113b7ed331e87786dc4fc56d62bcddeb7cf3fc53662dbe52334a644505"}]}, 0x1b4}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:30:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002580)={0x1b4, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IE={0x1a0, 0x2a, "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"}]}, 0x1b4}}, 0x0) r4 = io_uring_setup(0xa4, &(0x7f0000000080)) r5 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000100)=[r5], 0x1) 18:30:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002580)={0x1b4, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IE={0x1a0, 0x2a, "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"}]}, 0x1b4}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:30:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r5], 0x50}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r5], 0x20}}, 0x0) 18:30:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = io_uring_setup(0xa4, &(0x7f0000000080)) r3 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[r3], 0x1) [ 330.753308][T11019] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 18:30:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002580)={0x1b4, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IE={0x1a0, 0x2a, "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"}]}, 0x1b4}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) [ 330.820555][T11019] device bond4 entered promiscuous mode [ 330.891832][T11024] device veth35 entered promiscuous mode [ 330.899552][T11024] bond4: (slave veth35): Enslaving as an active interface with an up link [ 330.950707][T11061] bond4 (unregistering): (slave veth35): Releasing backup interface 18:30:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r5], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r5], 0x20}}, 0x0) [ 330.995595][T11061] device veth35 left promiscuous mode [ 331.279627][T11061] bond4 (unregistering): Released all slaves 18:30:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = io_uring_setup(0xa4, &(0x7f0000000080)) r3 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[r3], 0x1) 18:30:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r5], 0x50}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r5], 0x20}}, 0x0) 18:30:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002580)={0x1b4, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IE={0x1a0, 0x2a, "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"}]}, 0x1b4}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) [ 331.797428][T11122] IPVS: ftp: loaded support on port[0] = 21 [ 331.841725][T11121] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 18:30:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) r3 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[r3], 0x1) 18:30:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002580)={0x1b4, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IE={0x1a0, 0x2a, "7bd56249d6f44bfda3a46c6ac2a069be149fcc0e27744981e5bb0782f5cfcf04fc15afdc23ccda3332736d3def502d9a0ccfb2272797ebe6f4a0b0d533f0676291bf5f56a262b7b9a524bca47c565bdc5392d83649189a6f1df86fa770ce6ff6e22a3dbff4495953f65366020596c114047f562012566cc67a0e45099231372e686daa107bc395fe812e8f773a0428c40eaaa3ff7aee0c3aecc155e0c93f80ddf87cb3a8a77da2eefe74d96311f046c190ef359d57e7de4d577bb1d09d896ca132a185269ca2ca33e32025d54e0328fcb0383f3d39f3b2dac143b56a3cdc19eb31e6e53692557337d972254078e9e3d5bef64005525ab60f29624f13021d564f157f884953df5af60f67d1dec539fed71c524bf3289cc367471d281a9dab12c5fce517e1b6d470970e5e86318404831f2ca34e239be1d1057491817ba5781b0a70e431a1848235b4edc17627483d023025adadae20b48dbd03432f1d77021db9964553c420338ebcd68fb86617771c405c173c6e54aaa96041b5fbeaa688b1113b7ed331e87786dc4fc56d62bcddeb7cf3fc53662dbe52334a644505"}]}, 0x1b4}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r4 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) [ 332.021942][T11121] device bond4 entered promiscuous mode [ 332.053650][T11130] device veth37 entered promiscuous mode [ 332.061242][T11130] bond4: (slave veth37): Enslaving as an active interface with an up link [ 332.126753][T11158] bond4 (unregistering): (slave veth37): Releasing backup interface [ 332.187329][T11158] device veth37 left promiscuous mode 18:30:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002580)={0x1b4, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IE={0x1a0, 0x2a, "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"}]}, 0x1b4}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) r4 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) [ 332.436790][T11158] bond4 (unregistering): Released all slaves 18:30:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) r3 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[r3], 0x1) 18:30:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002580)={0x1b4, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IE={0x1a0, 0x2a, "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"}]}, 0x1b4}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) r4 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:30:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r4], 0x20}}, 0x0) [ 333.041716][T11316] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 333.103813][T11316] device bond4 entered promiscuous mode [ 333.144685][T11369] bond4 (unregistering): Released all slaves 18:30:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) r3 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[r3], 0x1) [ 333.254790][T11122] chnl_net:caif_netlink_parms(): no params data found 18:30:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002580)={0x1b4, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IE={0x1a0, 0x2a, "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"}]}, 0x1b4}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) r4 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) [ 333.690596][T11122] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.698020][T11122] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.721696][T11122] device bridge_slave_0 entered promiscuous mode [ 333.749439][T11122] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.756736][T11122] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.766422][T11122] device bridge_slave_1 entered promiscuous mode [ 333.834376][T11122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.854332][T11122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.960700][T11122] team0: Port device team_slave_0 added [ 333.978986][T11122] team0: Port device team_slave_1 added [ 334.043486][T11122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.050783][T11122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.077688][T11122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.102605][T11122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.111073][T11122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.137227][T11122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.238765][T11122] device hsr_slave_0 entered promiscuous mode [ 334.289057][T11122] device hsr_slave_1 entered promiscuous mode [ 334.359428][T11122] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.367098][T11122] Cannot create hsr debugfs directory [ 334.704264][T11122] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 334.755155][T11122] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 334.806003][T11122] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 334.866512][T11122] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 335.112455][T11122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.149073][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 335.158596][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 335.185283][T11122] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.221509][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 335.232455][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 335.242139][ T8963] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.252719][ T8963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.311234][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 335.320081][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 335.331572][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 335.342252][ T8963] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.349718][ T8963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.368475][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 335.379455][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 335.389534][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 335.401026][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 335.432208][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 335.442775][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 335.455189][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 335.466302][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 335.476432][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 335.497970][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 335.508117][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 335.530494][T11122] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 335.593594][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 335.602526][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 335.632311][T11122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.690547][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 335.701032][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 335.755486][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 335.766574][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 335.793907][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 335.803996][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 335.816713][T11122] device veth0_vlan entered promiscuous mode [ 335.847624][T11122] device veth1_vlan entered promiscuous mode [ 335.925335][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 335.935056][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 335.945234][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 335.955536][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 335.985008][T11122] device veth0_macvtap entered promiscuous mode [ 336.006109][T11122] device veth1_macvtap entered promiscuous mode [ 336.060293][T11122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 336.071735][T11122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.081831][T11122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 336.092461][T11122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.104435][T11122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 336.115114][T11122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.129617][T11122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.140128][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 336.149950][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 336.159953][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 336.170236][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 336.206326][T11122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 336.217541][T11122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.227621][T11122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 336.238266][T11122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.249034][T11122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 336.260030][T11122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.274855][T11122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.288171][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 336.306129][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 336.503408][T11532] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 18:30:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r5], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r5], 0x20}}, 0x0) 18:30:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r4], 0x20}}, 0x0) 18:30:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[r2], 0x1) 18:30:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002580)={0x1b4, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IE={0x1a0, 0x2a, "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"}]}, 0x1b4}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) [ 336.890364][T11555] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 336.977007][T11555] device bond4 entered promiscuous mode 18:30:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) [ 337.029335][T11570] bond4 (unregistering): Released all slaves [ 337.180522][T11558] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 18:30:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[r2], 0x1) 18:30:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:30:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r4], 0x20}}, 0x0) 18:30:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r5], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r5], 0x20}}, 0x0) 18:30:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:30:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[r2], 0x1) [ 337.784529][T11670] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 337.985799][T11670] device bond4 entered promiscuous mode [ 338.007426][T11672] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 338.200732][T11703] bond4 (unregistering): Released all slaves 18:30:52 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[r1], 0x1) 18:30:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r5], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r5], 0x20}}, 0x0) 18:30:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:30:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r4], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r4], 0x20}}, 0x0) 18:30:53 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[r1], 0x1) 18:30:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) socket$nl_route(0x10, 0x3, 0x0) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) [ 338.920070][T11786] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 18:30:53 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[r1], 0x1) 18:30:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) socket$nl_route(0x10, 0x3, 0x0) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:30:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r4], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r4], 0x20}}, 0x0) 18:30:54 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[r2], 0x1) 18:30:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002580)={0x1b4, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IE={0x1a0, 0x2a, "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"}]}, 0x1b4}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'}) r5 = io_uring_setup(0xa4, &(0x7f0000000080)) r6 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r6], 0x1) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000000180)={0x0, &(0x7f0000000140)=[r7]}, 0x1) 18:30:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) socket$nl_route(0x10, 0x3, 0x0) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:30:54 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[r2], 0x1) 18:30:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r4], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r4], 0x20}}, 0x0) 18:30:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002580)={0x1b4, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IE={0x1a0, 0x2a, "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"}]}, 0x1b4}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'}) r5 = io_uring_setup(0xa4, &(0x7f0000000080)) r6 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r6], 0x1) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000000180)={0x0, &(0x7f0000000140)=[r7]}, 0x1) 18:30:54 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:30:54 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[r2], 0x1) 18:30:54 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:30:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32], 0x20}}, 0x0) 18:30:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002580)={0x1b4, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IE={0x1a0, 0x2a, "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"}]}, 0x1b4}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'}) r5 = io_uring_setup(0xa4, &(0x7f0000000080)) r6 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r6], 0x1) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000000180)={0x0, &(0x7f0000000140)=[r7]}, 0x1) 18:30:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) r3 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[r3], 0x1) [ 340.581116][T11922] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 340.661130][T11922] device bond4 entered promiscuous mode 18:30:55 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) [ 340.717441][T11933] device veth39 entered promiscuous mode [ 340.725171][T11933] bond4: (slave veth39): Enslaving as an active interface with an up link 18:30:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) socket$nl_route(0x10, 0x3, 0x0) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:30:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) r3 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[r3], 0x1) 18:30:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32], 0x20}}, 0x0) 18:30:55 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:30:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) socket$nl_route(0x10, 0x3, 0x0) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:30:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) r3 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[r3], 0x1) [ 341.894628][T12006] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 341.923213][T12006] bond5 (uninitialized): Released all slaves [ 341.956580][T12006] device veth41 entered promiscuous mode [ 341.964077][T12006] bond4: (slave veth41): Enslaving as an active interface with an up link 18:30:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32], 0x20}}, 0x0) 18:30:56 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:30:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) r3 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[r3], 0x1) 18:30:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r5], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r5], 0x20}}, 0x0) [ 342.277508][T12035] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 342.331340][T12035] bond5 (uninitialized): Released all slaves [ 342.372572][T12045] device veth43 entered promiscuous mode [ 342.380107][T12045] bond4: (slave veth43): Enslaving as an active interface with an up link 18:30:57 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) [ 342.461185][T12054] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 18:30:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) r3 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[r3], 0x1) 18:30:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r5], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r5], 0x20}}, 0x0) 18:30:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:30:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) r3 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[r3], 0x1) 18:30:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:30:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[r2], 0x1) [ 343.371829][T12066] bond0: (slave bond_slave_1): Releasing backup interface 18:30:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) [ 343.477564][T12084] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 343.626297][T12084] device bond5 entered promiscuous mode 18:30:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r5], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r5], 0x20}}, 0x0) 18:30:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:30:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[r2], 0x1) 18:30:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r5], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r5], 0x20}}, 0x0) [ 344.012175][T12181] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 18:30:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[r2], 0x1) [ 344.268166][T12181] device bond6 entered promiscuous mode [ 344.274834][T12179] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 18:30:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:30:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:30:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) r3 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[r3], 0x1) 18:30:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) [ 345.195770][T12193] team0: Port device team_slave_0 removed 18:30:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) r3 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[r3], 0x1) 18:31:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:31:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r5], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r5], 0x20}}, 0x0) 18:31:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r5], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r5], 0x20}}, 0x0) 18:31:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) r3 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[r3], 0x1) [ 345.642281][T12293] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 345.714537][T12293] device bond7 entered promiscuous mode [ 345.723116][T12295] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 18:31:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) [ 345.928920][T12340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 18:31:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = io_uring_setup(0x0, &(0x7f0000000080)) r3 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[r3], 0x1) 18:31:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:31:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:31:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:31:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0x0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) [ 347.061200][T12340] batman_adv: batadv0: Removing interface: batadv_slave_0 18:31:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r4], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r4], 0x20}}, 0x0) 18:31:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = io_uring_setup(0x0, &(0x7f0000000080)) r3 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[r3], 0x1) 18:31:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r5], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) dup(r7) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r5], 0x20}}, 0x0) 18:31:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0x0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) [ 347.486572][T12404] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 347.541145][T12404] bond8 (uninitialized): Released all slaves 18:31:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = io_uring_setup(0x0, &(0x7f0000000080)) r3 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[r3], 0x1) [ 347.591364][T12408] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 347.624062][T12414] device veth51 entered promiscuous mode [ 347.631808][T12414] bond4: (slave veth51): Enslaving as an active interface with an up link 18:31:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0x0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:31:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r4], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r4], 0x20}}, 0x0) [ 348.516145][T12408] device hsr_slave_0 left promiscuous mode [ 348.618182][T12441] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 348.653027][T12441] bond8 (uninitialized): Released all slaves 18:31:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = io_uring_setup(0xa4, 0x0) r3 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[r3], 0x1) 18:31:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0xa4, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) [ 348.706791][T12445] device veth53 entered promiscuous mode [ 348.714333][T12445] bond4: (slave veth53): Enslaving as an active interface with an up link 18:31:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r4], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r4], 0x20}}, 0x0) 18:31:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r5], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) dup(r7) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r5], 0x20}}, 0x0) 18:31:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0xa4, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) [ 349.000257][T12470] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 18:31:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = io_uring_setup(0xa4, 0x0) r3 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[r3], 0x1) [ 349.044758][T12470] bond8 (uninitialized): Released all slaves [ 349.131001][T12475] device veth55 entered promiscuous mode [ 349.138687][T12475] bond4: (slave veth55): Enslaving as an active interface with an up link [ 349.156774][T12476] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 18:31:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0xa4, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:31:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r5], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r5], 0x20}}, 0x0) 18:31:04 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7, 0xa8a82) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000040)=0x400000) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000240)={'broute\x00', 0x0, 0x4, 0xf2, [], 0x9, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000140)=""/242}, &(0x7f00000002c0)=0x78) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x2e182, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0xb, &(0x7f0000000340)="5116670d228330269e55d9627d2c121d8114a809f7cbcd1b53e0ceacfacc7bed0e852f0fbc35b5feeb7f2a2941914f0e9b44fc56aabd3e60c1609018ca22cf2c2384d2e952ec53c94bd4289a5c24e6fbdc4d61c178560332c7183f50abca0a5b1a94bfb96e98632edb3ea12524cbcfb1fd30ea40fa0df7f521dfd4996cef32b7aab4a746a6bc846f70a7e08a10b0b01df5a56ebbcc7f59ad3eb61880f5cf0c37f2004b09c4fd95a8c7ffb43e4853b6f15644f1e8dd9beceb88db6814ab58fef3a907062475794d7aeb40f0a21863e47312299baa90547867970f40eae9393e564691b49aeb86b03f1c7b306748baea9c209b1d", 0xf3) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000004c0)={0x9e0000, 0x0, 0x101, 0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x9909cc, 0x2, [], @p_u32=&(0x7f0000000440)=0x1}}) write$cgroup_devices(r2, &(0x7f0000000500)={'a', ' *:* ', 'm\x00'}, 0x8) r3 = socket$bt_cmtp(0x1f, 0x3, 0x5) recvmmsg(r3, &(0x7f0000003340)=[{{&(0x7f0000000540)=@ax25={{0x3, @default}, [@rose, @null, @netrom, @rose, @remote, @default, @default]}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/194, 0xc2}], 0x1, &(0x7f0000000700)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000001700)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000001780), 0x0, &(0x7f00000017c0)}, 0xfffffffe}, {{&(0x7f0000001800)=@xdp, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001880)=""/206, 0xce}, {&(0x7f0000001980)=""/30, 0x1e}, {&(0x7f00000019c0)=""/183, 0xb7}, {&(0x7f0000001a80)=""/188, 0xbc}, {&(0x7f0000001b40)=""/7, 0x7}, {&(0x7f0000001b80)=""/51, 0x33}], 0x6, &(0x7f0000001c40)=""/202, 0xca}, 0x3f}, {{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000001d40)=""/13, 0xd}, {&(0x7f0000001d80)=""/140, 0x8c}, {&(0x7f0000001e40)=""/63, 0x3f}, {&(0x7f0000001e80)=""/4096, 0x1000}], 0x4, &(0x7f0000002ec0)}, 0x7fff}, {{&(0x7f0000002f00)=@tipc, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002f80)=""/98, 0x62}, {&(0x7f0000003000)=""/136, 0x88}], 0x2}, 0x5}, {{&(0x7f0000003100)=@caif=@util, 0x80, &(0x7f0000003300)=[{&(0x7f0000003180)=""/8, 0x8}, {&(0x7f00000031c0)=""/228, 0xe4}, {&(0x7f00000032c0)=""/10, 0xa}], 0x3}, 0xffffffe0}], 0x6, 0x10002, &(0x7f00000034c0)={0x0, 0x989680}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000003500)={0xfff, 0xff, 0x8000, 0x10000, 0x8, 0x1ff, 0x10000, 0x1, 0x0}, &(0x7f0000003540)=0x20) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000003580)={r5, 0xff, 0x85, "ea80f483976bd5be4df70dc85c406266007593c94c959dc564a4fc65975813185ca5c3a36a2c4f91a5b2ed7774978ecea7ed8b5dd5aeac5ba1cee170a17c7910f35c8c031414d76964eb91f1974342b7a0b6f4d3c56397caf97f83d7d695b1107e35689eed090d2749d5cc01a3b6b1ad77a301001e8d58ef5841b30f2ebe9c826848af45d6"}, 0x8d) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000036c0)={0x0, 0xfff9, 0x1, [0x100]}, &(0x7f0000003700)=0xa) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000003740)={r6, @in6={{0xa, 0x4e23, 0x5, @private0}}, 0x1000, 0x3, 0x3, 0x5, 0x1}, &(0x7f0000003800)=0x98) r7 = dup(0xffffffffffffffff) ioctl$KVM_GET_CLOCK(r7, 0x8030ae7c, &(0x7f0000003840)) bind$packet(r2, &(0x7f0000003880)={0x11, 0x8, 0x0, 0x1, 0x7f, 0x6, @broadcast}, 0x14) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000003900)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000003a00)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000039c0)={&(0x7f0000003940)={0x70, r8, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1f}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0x4040000) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000003a40)='/dev/dlm-control\x00', 0x41, 0x0) [ 350.573580][T12519] IPVS: ftp: loaded support on port[0] = 21 [ 350.674723][T12506] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 18:31:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:31:05 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = io_uring_setup(0xa4, 0x0) r3 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[r3], 0x1) 18:31:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r5], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) dup(r7) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r5], 0x20}}, 0x0) 18:31:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r5], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r5], 0x20}}, 0x0) 18:31:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:31:05 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) r3 = socket$inet(0x2, 0x0, 0x6) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[r3], 0x1) [ 351.260170][T12567] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 351.390750][T12567] device bond8 entered promiscuous mode [ 351.402111][T12564] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 351.423006][T12623] bond8 (unregistering): Released all slaves 18:31:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) [ 353.892951][T12519] chnl_net:caif_netlink_parms(): no params data found 18:31:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) r3 = socket$inet(0x2, 0x0, 0x6) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[r3], 0x1) 18:31:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r5], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r5], 0x20}}, 0x0) 18:31:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, 0x0, 0x0) 18:31:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r5], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) dup(r7) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r5], 0x20}}, 0x0) [ 354.205118][T12800] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 354.407063][T12800] device bond8 entered promiscuous mode [ 354.499896][T12815] device veth57 entered promiscuous mode [ 354.507631][T12815] bond8: (slave veth57): Enslaving as an active interface with an up link [ 354.524583][T12816] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 354.697797][T12816] device bond1 entered promiscuous mode [ 354.745968][T12843] bond8 (unregistering): (slave veth57): Releasing backup interface [ 354.786482][T12843] device veth57 left promiscuous mode [ 354.974884][T12843] bond8 (unregistering): Released all slaves [ 355.150796][T12856] device veth3 entered promiscuous mode [ 355.157745][T12856] bond1: (slave veth3): Enslaving as an active interface with an up link [ 355.189729][T12861] bond1 (unregistering): (slave veth3): Releasing backup interface [ 355.230244][T12861] device veth3 left promiscuous mode [ 355.338332][T12861] bond1 (unregistering): Released all slaves [ 355.487397][T12519] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.494786][T12519] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.504352][T12519] device bridge_slave_0 entered promiscuous mode [ 355.531555][T12519] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.539462][T12519] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.552910][T12519] device bridge_slave_1 entered promiscuous mode [ 355.700578][T12519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.730949][T12519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.826783][T12519] team0: Port device team_slave_0 added [ 355.842854][T12519] team0: Port device team_slave_1 added [ 355.897177][T12519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.904721][T12519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.931835][T12519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.946170][T12519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.955046][T12519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.981434][T12519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.181951][T12519] device hsr_slave_0 entered promiscuous mode [ 356.305250][T12519] device hsr_slave_1 entered promiscuous mode [ 356.423361][T12519] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 356.435439][T12519] Cannot create hsr debugfs directory [ 356.810937][T12519] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 356.862342][T12519] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 356.932356][T12519] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 356.986161][T12519] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 357.306956][T12519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.340144][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 357.350950][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 357.390716][T12519] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.418348][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 357.428690][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 357.438402][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.445724][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.472349][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 357.481995][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 357.492392][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 357.502599][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.519408][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.555129][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 357.567050][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 357.594038][T12111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 357.605570][T12111] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 357.661651][T12111] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 357.671788][T12111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 357.683457][T12111] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 357.694090][T12111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 357.704048][T12111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 357.713875][T12111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 357.724013][T12111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 357.742032][T12519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 357.807507][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 357.815441][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 357.839638][T12519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.899752][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 357.910625][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 357.968221][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 357.978299][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 357.994514][ T8958] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 358.004539][ T8958] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 358.018129][T12519] device veth0_vlan entered promiscuous mode [ 358.061221][T12519] device veth1_vlan entered promiscuous mode [ 358.151676][ T8958] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 358.162087][ T8958] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 358.173526][ T8958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 358.184999][ T8958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 358.204222][T12519] device veth0_macvtap entered promiscuous mode [ 358.225944][T12519] device veth1_macvtap entered promiscuous mode [ 358.278880][T12519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 358.289605][T12519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.300942][T12519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 358.311598][T12519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.321624][T12519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 358.332299][T12519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.347308][T12519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.367147][ T8958] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 358.377424][ T8958] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 358.390113][ T8958] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 358.400948][ T8958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 358.440108][T12519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 358.455142][T12519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.465735][T12519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 358.476546][T12519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.487065][T12519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 358.497714][T12519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.508377][T12519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 358.519132][T12519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.533998][T12519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.545942][ T8958] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 358.556418][ T8958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 18:31:13 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x66ab}, 0x8) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_NMI(r5, 0xae9a) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0), &(0x7f00000002c0)=0x4) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 18:31:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, 0x0, 0x0) 18:31:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) r3 = socket$inet(0x2, 0x0, 0x6) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[r3], 0x1) 18:31:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r4], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r4], 0x20}}, 0x0) 18:31:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, 0x0, 0x0) 18:31:13 executing program 3: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x4000000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x404) write$binfmt_misc(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b23e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a742200765387201b4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16ad961fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cc6090cddd3b049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999191ca8f7adf1e8bbb53a7b0ee051f6d243b406a14e3b038317f9ebfeb82ee2469fb31bdbb2768d25f8fbf196ab6f2dc045421b94d878c5d9c2a5c74633a687a1353b8e49ce118c81517ac7bb299454d3f18cb770e4908dd3deaafaab51144c1e1b86b6291f5e73ff040000000000000000001c00000000009a583b79ab00f70d85463c57c5bb1f1084e683b591fc2c8b8a38b7ee57afa01aea88fb41391ee8ebbdf1fa9155bf6409b065a980528827de08737cf643db6de62f253b1304780753de6634bf57fb0000000000001300b287b8fa642798efdf2ba1ab22aa45ffff744b90323550ccba6a307af49f988163b4ce3f8cab9ff45f3a48f431a70bf4b32bf6349a1bc54a3d908fab17cb52774fe204f9c731f03f17ce62db032edd38d4d0e25f87073728b26458054dff018686e51abb2233fb44f2dc6be066e1ce4cd7572f97b9ae9a1f905550a8e4a9770e5417980dcb2a7cf51b0014b572c53a878603b7e18785b7e82980f8056e75758bfeaee42fe5d8d69fb04c3a802b92810ff8a1ad593c6f9373279e309c6a138f0e57b881b6376629b68c6726d80fe86d249221289aa925d98444f7d45a5afccc65448ae1947db9faaf700d755af38352bf6ce63899fe82ee37337ea8113008a80af6b24d09e34be37e97dae8b6c226712eee5a6c8cb55b431e0f69870ea9a27c7ec92dd37d35e8354d87c52f2e78537b7a17381e641a86cc4c2a5affa7926368673ff6aa4bcb68e3f238bc906db1259cc687beec85d29ca569bb76c15fde69219a13f31f67acb97f723ca37b58b5120292f59594d746ecd6a89028fa51fd142f796efc1d728f983e1d8d5c2cc687677030f7e8662021d5ae43e5678b00d8c0c248"], 0x1a3) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8002, 0x0) write$P9_RSTATu(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x16b) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000180)=0xf4240) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000080)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82032, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000}) r4 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f00000007c0)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000940)='big_key\x00', 0x0, &(0x7f0000000a00)='F', 0x1, r4) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsa\x00', 0xb6115f2e1d6e8915, 0x0) ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000200)={0xffffffffffff70d7, 0x65f0}) syz_open_dev$vcsa(0x0, 0x6, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) 18:31:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, 0x0, 0x0) 18:31:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r4], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r4], 0x20}}, 0x0) 18:31:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) r3 = socket$inet(0x2, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[r3], 0x1) [ 359.705745][T13113] IPVS: ftp: loaded support on port[0] = 21 18:31:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100), 0x0) 18:31:14 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0x14) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x2, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_CFG_FLAGS={0x8}]}, 0x1c}}, 0x0) r5 = io_uring_setup(0xa4, &(0x7f0000000080)) r6 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r6], 0x1) getsockopt$inet_int(r6, 0x0, 0x21, &(0x7f00000001c0), &(0x7f0000000280)=0x4) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x140e, 0x400, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040850}, 0x48000) splice(r0, 0x0, r2, 0x0, 0x4ffe1, 0x0) 18:31:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) r3 = socket$inet(0x2, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[r3], 0x1) 18:31:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100), 0x0) 18:31:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r4], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r4], 0x20}}, 0x0) 18:31:15 executing program 3: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x4000000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x404) write$binfmt_misc(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x1a3) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8002, 0x0) write$P9_RSTATu(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x16b) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000180)=0xf4240) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000080)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82032, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000}) r4 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f00000007c0)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000940)='big_key\x00', 0x0, &(0x7f0000000a00)='F', 0x1, r4) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsa\x00', 0xb6115f2e1d6e8915, 0x0) ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000200)={0xffffffffffff70d7, 0x65f0}) syz_open_dev$vcsa(0x0, 0x6, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) 18:31:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100), 0x0) [ 360.918785][T13209] IPVS: ftp: loaded support on port[0] = 21 18:31:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) r3 = socket$inet(0x2, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[r3], 0x1) 18:31:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100), 0x0) 18:31:16 executing program 1 (fault-call:5 fault-nth:0): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:31:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r4], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r4], 0x20}}, 0x0) 18:31:16 executing program 3: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x4000000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x404) write$binfmt_misc(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x1a3) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8002, 0x0) write$P9_RSTATu(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="6b0100007d00000005fc000000000000000000000000000000000000000000000000000000000000000000000000000000001f00046e6f6465767b6576626f7825ffffff81020000000000000000000000000034007002007dfa673effeb09b5351f5bde314000000000187b82d9b500002b595fcb14034354b9fd9ef196a51cd5157adc8105b494e11100b09bf47291c76367726f987070707050976500f8f669fb716dcf315ec2f385409ac65b94080339c08c2c3b9e1d52c36cde7ba4a400b4b0b4f134a666a8524826b2b4a88e017a7757b206f8b09a451b3407dbdab2884baf050000000000000047ec21cabff20f9c1c0dbe36f4fd1a4cc280e8d489da649a375a002f6465762f6eb17b2300f9daa5ee23266ecf85fea65e42d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eb9390ea84f934300dba0c2f7f09ff53c7e4d1ad66e2d070198319f30118447aa9aa57eb0a07b74aa059fc5d1dbaf778e92ab5fd03adf510ea95cb98da5fd59990b38cccc3d1c685a7c7d044a8554ac0b97209b26b3efdab388419312acad09f2aa04f79002f925a2549454ccd05f6903f054ff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x16b) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000180)=0xf4240) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000080)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82032, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000}) r4 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f00000007c0)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000940)='big_key\x00', 0x0, &(0x7f0000000a00)='F', 0x1, r4) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsa\x00', 0xb6115f2e1d6e8915, 0x0) ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000200)={0xffffffffffff70d7, 0x65f0}) syz_open_dev$vcsa(0x0, 0x6, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) 18:31:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_setup(0xa4, &(0x7f0000000080)) r2 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r2], 0x1) [ 361.737629][T13268] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 361.811978][T13268] device bond8 entered promiscuous mode [ 361.902188][T13274] bond8 (unregistering): Released all slaves 18:31:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0xa4, &(0x7f0000000080)) r3 = io_uring_setup(0xa4, &(0x7f0000000080)) r4 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000100)=[r4], 0x1) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000180)={0x0, &(0x7f0000000140)=[r5]}, 0x1) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000040)=[r2], 0x1) [ 362.059092][T13284] IPVS: ftp: loaded support on port[0] = 21 18:31:17 executing program 4: add_key$keyring(&(0x7f00000001c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000005c0)="9c", 0x1, 0xfffffffffffffffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002580)={0x1b4, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IE={0x1a0, 0x2a, "7bd56249d6f44bfda3a46c6ac2a069be149fcc0e27744981e5bb0782f5cfcf04fc15afdc23ccda3332736d3def502d9a0ccfb2272797ebe6f4a0b0d533f0676291bf5f56a262b7b9a524bca47c565bdc5392d83649189a6f1df86fa770ce6ff6e22a3dbff4495953f65366020596c114047f562012566cc67a0e45099231372e686daa107bc395fe812e8f773a0428c40eaaa3ff7aee0c3aecc155e0c93f80ddf87cb3a8a77da2eefe74d96311f046c190ef359d57e7de4d577bb1d09d896ca132a185269ca2ca33e32025d54e0328fcb0383f3d39f3b2dac143b56a3cdc19eb31e6e53692557337d972254078e9e3d5bef64005525ab60f29624f13021d564f157f884953df5af60f67d1dec539fed71c524bf3289cc367471d281a9dab12c5fce517e1b6d470970e5e86318404831f2ca34e239be1d1057491817ba5781b0a70e431a1848235b4edc17627483d023025adadae20b48dbd03432f1d77021db9964553c420338ebcd68fb86617771c405c173c6e54aaa96041b5fbeaa688b1113b7ed331e87786dc4fc56d62bcddeb7cf3fc53662dbe52334a644505"}]}, 0x1b4}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x3c, r4, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x8}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x20}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x9}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x7}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x6008851) write$vhci(r2, &(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) set_thread_area(&(0x7f00000000c0)={0x95f, 0x20001000, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1}) r6 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r7 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000780)={'syz', 0x0}, &(0x7f00000007c0)="ce", 0x1, r6) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r5, r7}, &(0x7f00000002c0)=""/60, 0x3c, &(0x7f0000000380)={&(0x7f0000000040)={'md4-generic\x00'}}) 18:31:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_setup(0xa4, &(0x7f0000000080)) r2 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r2], 0x1) 18:31:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r4], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r4], 0x20}}, 0x0) 18:31:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001fe) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCL_GETSHIFTSTATE(r4, 0x541c, &(0x7f0000000000)={0x6, 0x1}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:31:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x4b2c40, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4004) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000040)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x2}, [@map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8001}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f00000001c0)=""/195, 0x0, 0x3, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r4, 0xc06c4124, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 362.848040][T13407] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 18:31:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_setup(0xa4, &(0x7f0000000080)) r2 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r2], 0x1) [ 363.021680][T13407] device bond8 entered promiscuous mode [ 363.046715][T13433] bond8 (unregistering): Released all slaves 18:31:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000000100055"], 0x18}}], 0x1, 0x0) 18:31:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r4], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r4], 0x20}}, 0x0) 18:31:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="19000030d53828da27676120e4602cf6012516010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001400210100000000000000000a00a200", @ANYRES32=r4, @ANYBLOB="fe8000000000000000000000000000000000000041a34507ed687ba2e9edd65b73ba7c4149dd4274da6aa83195a419d2bf7b96fa44b0eb6611"], 0x2c}}, 0x0) 18:31:18 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, 0x0, 0x0) 18:31:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x101240, 0x0) recvfrom$inet6(r5, &(0x7f0000000000)=""/32, 0x20, 0x10003, &(0x7f0000000040)={0xa, 0x4e23, 0x1, @remote, 0x200002}, 0x1c) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:31:18 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r2) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_OKEY={0x8}, @IFLA_VTI_LINK={0x8, 0x1, r6}]]}}}]}, 0x40}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r9, 0x84, 0x1e, &(0x7f0000000080), &(0x7f0000000180)=0x4) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 363.700974][T13505] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 363.747549][T13503] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 363.982880][T13503] device bond8 entered promiscuous mode [ 363.989586][T13507] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 364.009144][T13523] bond8 (unregistering): Released all slaves 18:31:18 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, 0x0, 0x0) [ 364.191593][T13507] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 18:31:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000140)=""/4096) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:31:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$kcm(0xa, 0x6, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r4], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r4], 0x20}}, 0x0) 18:31:19 executing program 5: getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000040)=0x8) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'caif0\x00', 0x4000}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x40240, 0x0) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x2f0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x20280, 0x0) r3 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x7, 0x800) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)='\x00', 0x0, r3) ioctl$sock_SIOCADDDLCI(r3, 0x8980, &(0x7f0000000200)={'gretap0\x00', 0x2}) r4 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x2, 0x204400) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000280)="6ca28c6e5bd5dcaec3d0db164db47904", 0x10) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x4800, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r5, 0x40086408, &(0x7f0000000300)={0x1, 0xfffff000}) r6 = add_key(&(0x7f0000000340)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)="78f946199b7916fb9c20faeeb02768ecd97a4adfc0a8b72d5578e639c457472994d1c5c8242038d26e2a8f7ca36637abd0446f061543dbc4189ae884e051c715dcca0b2bada4", 0x46, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r6, 0x6) ioctl$DRM_IOCTL_MODE_GETGAMMA(r5, 0xc02064a4, &(0x7f0000000500)={0x8001, 0x5, &(0x7f0000000440)=[0x2, 0x8, 0x6, 0x9, 0x7], &(0x7f0000000480), &(0x7f00000004c0)=[0x5, 0x3, 0x0, 0x4]}) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540)='/dev/zero\x00', 0x84880, 0x0) write$P9_RCREATE(r7, &(0x7f0000000580)={0x18, 0x73, 0x1, {{0x80, 0x0, 0x1}, 0x9}}, 0x18) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f00000005c0)="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") recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000006c0)=@x25, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000740)=""/193, 0xc1}, {&(0x7f0000000840)=""/140, 0x8c}, {&(0x7f0000000900)=""/223, 0xdf}, {&(0x7f0000000a00)=""/202, 0xca}], 0x4}, 0x40010102) 18:31:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, 0x0, 0x0) [ 364.610988][T13610] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 18:31:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010008506000010000000000000000000", @ANYRES32=r2, @ANYBLOB="18200000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@bridge_newneigh={0x24, 0x1c, 0x20, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x40, 0x14, 0x3}, [@NDA_SRC_VNI={0x8, 0xb, 0x3}]}, 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x2, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r5}}, 0x20}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000040)=0xfffffffffffffea8) keyctl$get_persistent(0x3, r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x15) sendmsg(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="240000001a0003041dfffd946f6105000a00000a1f000002141008000800040012000000140000001a00ffffba16a0aa1c09000000000000", 0x38}], 0x1}, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) r9 = socket$netlink(0x10, 0x3, 0x15) sendmsg(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="240000001a0003041dfffd946f6105000a00000a1f000002141008000800040012000000140000001a00ffffba16a0aa1c09000000000000", 0x38}], 0x1}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000200)="19645968f268467b1196780f7441c78e5cd90974edbcd743995e61129ff68befb845f6310336b6dae3b3f70ce293a0776699f22c36964e8ee634ea617ef5da06260f7342e1", 0x45}], 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000010000001af17d1f78b1871611", @ANYRES32=0x0, @ANYRES32=r6, @ANYRES32=r8, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32=r9, @ANYRES32, @ANYRES32], 0x88, 0x4040}, 0x80) fchownat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, r8, 0x1000) ioperm(0xfd949e1, 0x100000001, 0x1) [ 364.709991][T13610] device bond8 entered promiscuous mode [ 364.742735][T13616] device veth59 entered promiscuous mode [ 364.750314][T13616] bond8: (slave veth59): Enslaving as an active interface with an up link [ 364.847085][T13658] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 364.964751][T13670] bond1 (unregistering): Released all slaves 18:31:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) write$capi20(r1, &(0x7f0000000280)={0x10, 0x61bc, 0x2, 0x81, 0xff, 0x3}, 0x10) r3 = io_uring_setup(0xfe0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x2}) r4 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000100)=[r4], 0x1) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000180)={0x0, &(0x7f0000000140)=[r5]}, 0x1) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x20000) io_uring_setup(0xa4, &(0x7f0000000080)) r6 = io_uring_setup(0xa4, &(0x7f0000000080)) r7 = socket$inet(0x2, 0x1, 0x800007) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000100)=[r7], 0x1) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, &(0x7f0000000180)={0x0, &(0x7f0000000140)=[r8]}, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x40000094) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f00000001c0)) 18:31:19 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0x101, &(0x7f0000000500), &(0x7f0000000040)=0x98) [ 365.231593][T13696] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 365.380113][T13658] bond1 (unregistering): Released all slaves 18:31:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100), 0x0) 18:31:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$kcm(0xa, 0x6, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r4], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r4], 0x20}}, 0x0) 18:31:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) r3 = io_uring_setup(0xa4, &(0x7f0000000080)) r4 = io_uring_setup(0xa4, &(0x7f0000000080)) r5 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000100)=[r5], 0x1) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x14) r6 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000100)=[r6], 0x1) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="2d0000006bf104bcc8f7e3f830bd7b9eed5c6c56049f45ac10fde5cede182f6383b378e3ca51f73ce4af11daa2a835efa45f23a042a8dbd9bb02f671ae3153c78c4d9cfc53688643dfac5a4f03d050d3c6e7b8e19751400e163489a2fa640d122a03273e71792962"], &(0x7f0000000040)=0x35) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0xc0406618, &(0x7f0000000000)={{0x3, 0x0, @reserved="6eb577caf022ef4738e3efce9cab44bb7dfcb9e24f3a90fab008df920645cfbf"}}) 18:31:20 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7fffffff}, 0x14) [ 365.820322][T13818] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 365.922339][T13818] device bond9 entered promiscuous mode [ 365.957213][T13824] device veth61 entered promiscuous mode [ 365.964831][T13824] bond9: (slave veth61): Enslaving as an active interface with an up link 18:31:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100), 0x0) 18:31:20 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r1, r0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="10024e03e0000002000000000000000000000000fc000000000000000000ec000000000000000000000000f6ffffff0000000000000000000000000000000000000000000000000000000000000000000000d1fae71e00000000000000000000000000000000000000000000000000000000000000000000000000000000000008"], 0x8c) [ 366.009694][T13859] bond9 (unregistering): (slave veth61): Releasing backup interface [ 366.032075][T13859] device veth61 left promiscuous mode 18:31:20 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f00000002c0)=@in6={0x1c, 0x1c, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xffffffffffffff5f, 0x1c, 0x2}, 0x1c) writev(r0, &(0x7f0000001740)=[{&(0x7f00000000c0)="12", 0x1}], 0x1) recvfrom$inet6(r0, &(0x7f0000000000)=""/194, 0xc2, 0x80, 0x0, 0x0) [ 366.243402][T13859] bond9 (unregistering): Released all slaves [ 366.719977][T13930] IPVS: ftp: loaded support on port[0] = 21 [ 367.111218][T13930] chnl_net:caif_netlink_parms(): no params data found [ 367.315288][T13930] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.323192][T13930] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.332100][T13930] device bridge_slave_0 entered promiscuous mode [ 367.344553][T13930] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.353403][T13930] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.362598][T13930] device bridge_slave_1 entered promiscuous mode [ 367.402395][T13930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.418480][T13930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.458572][T13930] team0: Port device team_slave_0 added [ 367.469024][T13930] team0: Port device team_slave_1 added [ 367.507528][T13930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.514737][T13930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.541007][T13930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.556683][T13930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.564302][T13930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.591474][T13930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.669701][T13930] device hsr_slave_0 entered promiscuous mode [ 367.703079][T13930] device hsr_slave_1 entered promiscuous mode [ 367.761964][T13930] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.769649][T13930] Cannot create hsr debugfs directory [ 367.979583][T13930] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 368.028569][T13930] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 368.096327][T13930] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 368.137278][T13930] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 368.314239][T13930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.339262][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 368.356481][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 368.366786][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 368.384486][T13930] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.402098][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 368.412505][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 368.425588][ T8963] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.432904][ T8963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.479253][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 368.488791][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 368.499045][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 368.508175][ T8963] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.515521][ T8963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.524611][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 368.535622][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 368.546636][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 368.557938][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 368.570642][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 368.581322][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 368.609388][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 368.619611][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 368.629223][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 368.650024][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 368.659997][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 368.681244][T13930] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 368.732825][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 368.740590][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 368.762411][T13930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.799214][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 368.808939][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 368.853811][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 368.863830][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 368.876043][T13930] device veth0_vlan entered promiscuous mode [ 368.884971][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 368.895050][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 368.920333][T13930] device veth1_vlan entered promiscuous mode [ 368.968554][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 368.977938][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 368.987706][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 368.998389][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 369.023574][T13930] device veth0_macvtap entered promiscuous mode [ 369.040382][T13930] device veth1_macvtap entered promiscuous mode [ 369.078540][T13930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 369.089793][T13930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.099946][T13930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 369.114237][T13930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.124321][T13930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 369.134930][T13930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.145015][T13930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 369.156123][T13930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.168750][T13930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.178496][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 369.188251][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 369.198271][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 369.208594][ T6460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 369.225586][T13930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 369.237007][T13930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.247179][T13930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 369.258806][T13930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.268963][T13930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 369.279671][T13930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.289778][T13930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 369.300431][T13930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.310973][T13930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 369.323038][T13930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.336485][T13930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.373506][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 369.385914][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 18:31:24 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto(r0, &(0x7f0000000040)='k', 0x1, 0x0, &(0x7f0000000100)=@in={0x10, 0x2}, 0x10) 18:31:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x2000000000400200) socket$nl_route(0x10, 0x3, 0x0) r3 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:31:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100), 0x0) 18:31:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r4], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r4], 0x20}}, 0x0) 18:31:24 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind(r0, &(0x7f0000000000)=@in={0x10, 0x2}, 0x10) 18:31:24 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendmsg(r0, &(0x7f00000007c0)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c, &(0x7f0000000440)=[{&(0x7f00000000c0)='?', 0x1}], 0x1, &(0x7f0000000480)=[{0x10}, {0x10}], 0x20}, 0x0) [ 369.677011][T14146] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 369.816262][T14146] device bond9 entered promiscuous mode [ 369.858450][T14157] device veth63 entered promiscuous mode [ 369.866678][T14157] bond9: (slave veth63): Enslaving as an active interface with an up link [ 369.964285][T14167] bond9 (unregistering): (slave veth63): Releasing backup interface [ 370.016092][T14167] device veth63 left promiscuous mode 18:31:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:31:24 executing program 3: 18:31:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) [ 370.213887][T14167] bond9 (unregistering): Released all slaves 18:31:24 executing program 5: 18:31:24 executing program 4: 18:31:25 executing program 3: 18:31:25 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:31:25 executing program 5: 18:31:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000000)=0x8, &(0x7f0000000040)=0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:31:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r4], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r4], 0x20}}, 0x0) 18:31:25 executing program 4: 18:31:25 executing program 3: [ 371.070590][T14277] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 18:31:25 executing program 5: [ 371.177229][T14277] device bond9 entered promiscuous mode [ 371.212716][T14285] device veth65 entered promiscuous mode [ 371.220341][T14285] bond9: (slave veth65): Enslaving as an active interface with an up link 18:31:25 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:31:25 executing program 4: [ 371.327439][T14314] bond9 (unregistering): (slave veth65): Releasing backup interface 18:31:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) openat$cgroup_ro(r1, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio1\x00', 0x101800, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000040), 0x0) [ 371.392839][T14314] device veth65 left promiscuous mode 18:31:26 executing program 3: 18:31:26 executing program 5: 18:31:26 executing program 4: [ 371.902451][T14314] bond9 (unregistering): Released all slaves 18:31:26 executing program 3: 18:31:26 executing program 5: 18:31:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r4], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r4], 0x20}}, 0x0) 18:31:27 executing program 4: 18:31:27 executing program 3: 18:31:27 executing program 2: 18:31:27 executing program 5: 18:31:27 executing program 4: [ 372.888729][T14392] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 372.997702][T14392] device bond9 entered promiscuous mode [ 373.031263][T14397] device veth67 entered promiscuous mode [ 373.038774][T14397] bond9: (slave veth67): Enslaving as an active interface with an up link 18:31:27 executing program 2: [ 373.107591][T14432] bond9 (unregistering): (slave veth67): Releasing backup interface 18:31:27 executing program 3: 18:31:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x3) socket$nl_route(0x10, 0x3, 0x0) r3 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:31:27 executing program 5: [ 373.363114][T14432] device veth67 left promiscuous mode 18:31:28 executing program 3: 18:31:28 executing program 4: [ 373.729213][T14432] bond9 (unregistering): Released all slaves 18:31:28 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socket$kcm(0xa, 0x6, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r3], 0x20}}, 0x0) 18:31:28 executing program 2: 18:31:28 executing program 3: 18:31:28 executing program 5: 18:31:28 executing program 4: 18:31:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) r3 = io_uring_setup(0xa4, &(0x7f0000000080)) r4 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000100)=[r4], 0x1) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000180)={0x0, &(0x7f0000000140)=[r5]}, 0x1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) chown(&(0x7f0000000080)='./file0\x00', r8, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) fchown(r3, r8, r9) [ 374.276645][T14497] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 18:31:28 executing program 3: 18:31:28 executing program 5: 18:31:29 executing program 4: [ 374.387198][T14497] device bond9 entered promiscuous mode [ 374.446412][T14504] device veth69 entered promiscuous mode [ 374.453995][T14504] bond9: (slave veth69): Enslaving as an active interface with an up link 18:31:29 executing program 2: [ 374.500351][T14508] bond9 (unregistering): (slave veth69): Releasing backup interface [ 374.537217][T14508] device veth69 left promiscuous mode 18:31:29 executing program 4: 18:31:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) [ 375.039660][T14508] bond9 (unregistering): Released all slaves 18:31:29 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socket$kcm(0xa, 0x6, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r3], 0x20}}, 0x0) 18:31:29 executing program 3: 18:31:29 executing program 2: 18:31:29 executing program 5: 18:31:29 executing program 4: 18:31:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0xa4, &(0x7f0000000080)) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) r3 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[r3], 0x1) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x402000, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r5, 0xc008551c, &(0x7f0000000240)=ANY=[@ANYBLOB="00f8fffe14000012001cffffff5e1c9bf1be3fd3db"]) ioctl$DRM_IOCTL_ADD_BUFS(r4, 0xc0206416, &(0x7f0000000200)={0xffffffff, 0x4, 0x80, 0x2, 0x8, 0x3ff}) r6 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', r7}) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000180)={0x0, &(0x7f0000000140)=[r8]}, 0x1) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000040)=[0xffffffffffffffff, r3], 0x2) 18:31:30 executing program 4: 18:31:30 executing program 3: [ 375.507075][T14613] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 18:31:30 executing program 2: [ 375.564078][T14613] device bond9 entered promiscuous mode 18:31:30 executing program 5: [ 375.656770][T14637] device veth71 entered promiscuous mode [ 375.664529][T14637] bond9: (slave veth71): Enslaving as an active interface with an up link [ 375.721730][T14659] bond9 (unregistering): (slave veth71): Releasing backup interface [ 375.778240][T14659] device veth71 left promiscuous mode 18:31:30 executing program 3: 18:31:30 executing program 2: [ 376.189580][T14659] bond9 (unregistering): Released all slaves 18:31:31 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socket$kcm(0xa, 0x6, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r3], 0x20}}, 0x0) 18:31:31 executing program 4: 18:31:31 executing program 3: 18:31:31 executing program 5: 18:31:31 executing program 2: 18:31:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x5) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:31:31 executing program 4: [ 376.598417][T14720] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 18:31:31 executing program 2: 18:31:31 executing program 5: 18:31:31 executing program 3: 18:31:31 executing program 5: [ 376.838800][T14720] device bond9 entered promiscuous mode [ 376.872213][T14725] device veth73 entered promiscuous mode [ 376.879798][T14725] bond9: (slave veth73): Enslaving as an active interface with an up link [ 376.924976][T14755] bond9 (unregistering): (slave veth73): Releasing backup interface 18:31:31 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet(0x2, 0xa, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000001640), 0x4) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[r1], 0x1) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000001600)={0x0, 0x81, 0x3, 0x7f}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r5) r6 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000100), 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) recvmsg$can_raw(r8, &(0x7f0000001500)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000140)=""/84, 0x54}, {&(0x7f00000001c0)=""/216, 0xd8}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/67, 0x43}, {&(0x7f0000001340)=""/64, 0x40}], 0x5, &(0x7f0000001400)=""/230, 0xe6}, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000015c0)={&(0x7f0000001540)=""/125, 0x76459097fa97cfa9, 0x1800, 0x8}, 0x20) [ 376.982105][T14755] device veth73 left promiscuous mode [ 377.242684][T14779] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 377.263632][T14755] bond9 (unregistering): Released all slaves 18:31:32 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$kcm(0xa, 0x6, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r3], 0x20}}, 0x0) 18:31:32 executing program 4: 18:31:32 executing program 3: 18:31:32 executing program 2: 18:31:32 executing program 5: 18:31:32 executing program 4: [ 377.728772][T14829] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 18:31:32 executing program 5: 18:31:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x105040, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x242001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x10001) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x63}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100), 0xb9) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = io_uring_setup(0xa4, &(0x7f0000000080)) r5 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000100)=[r5], 0x1) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000180)={0x0, &(0x7f0000000140)=[r6]}, 0x1) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000180)={0x9d0000, 0x1, 0x5ee, r4, 0x0, &(0x7f0000000140)={0x990a93, 0x0, [], @p_u32=&(0x7f0000000100)=0x5}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)={0x228, r9, 0x3b291aeaa09c77eb, 0x0, 0x0, {0x2f}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}]}, 0x228}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r7, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x1c4, r9, 0x100, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x3}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4006}, 0x810) 18:31:32 executing program 2: [ 377.836709][T14829] device bond9 entered promiscuous mode [ 377.907794][T14833] bond9 (unregistering): Released all slaves 18:31:32 executing program 3: 18:31:32 executing program 4: r0 = socket(0x2, 0x10000001, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x108, &(0x7f00000001c0), &(0x7f0000000280)=0x18) 18:31:32 executing program 5: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x80000000000209, 0x0) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r1, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000180)={0xffffffffffffff5f, 0x1c, 0x2}, 0x1c) dup2(r1, r0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0xf, &(0x7f0000000040), 0xc) 18:31:33 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$kcm(0xa, 0x6, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r3], 0x20}}, 0x0) 18:31:33 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) sendmsg$inet_sctp(r1, &(0x7f0000000400)={&(0x7f00000000c0)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000400)={&(0x7f00000000c0)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) 18:31:33 executing program 3: r0 = socket(0x2, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x106, &(0x7f0000000340), &(0x7f0000000380)=0x1e0) 18:31:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)={0x0, 0x0, 0xe}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 18:31:33 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x25, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f0000000040)=0x8) 18:31:33 executing program 5: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x80000000000209, 0x0) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r1, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000180)={0xffffffffffffff5f, 0x1c, 0x2}, 0x1c) r2 = dup2(r1, r0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x29, &(0x7f0000000140), 0x8) [ 378.844043][T14950] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 18:31:33 executing program 4: clone(0x802102040bfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x6) ptrace$cont(0x18, r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, &(0x7f00000000c0)="207ef39c5f3cc0ff5c560ec2aaeebb502e93dfd323e5f2261543"}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x30) [ 378.928323][T14950] device bond9 entered promiscuous mode [ 378.977354][T14954] device veth75 entered promiscuous mode [ 378.984969][T14954] bond9: (slave veth75): Enslaving as an active interface with an up link 18:31:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0xfffffffe}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) [ 379.057257][T14989] bond9 (unregistering): (slave veth75): Releasing backup interface 18:31:33 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed0b864256b1ceba6000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32=r4, @ANYBLOB="00000000ffffffff01000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0000000000000000080000000a000100727376703600000018000200140002"], 0x48}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x803, 0x0) 18:31:33 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xa4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) [ 379.139125][T14989] device veth75 left promiscuous mode 18:31:33 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x24) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x1d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x800) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x14}}, 0x10) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x4c, r4, 0x200, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x17}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x844}, 0x40820) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x5a84ae7d9c6b7621, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x7}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="08000100040000000a000600aaaaaaaaaaaa00000a00"], 0x68}, 0x1, 0x0, 0x0, 0x8045}, 0x20000000) 18:31:34 executing program 4: clone(0x802102040bfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x6) ptrace$cont(0x18, r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, &(0x7f00000000c0)="207ef39c5f3cc0ff5c560ec2aaeebb502e93dfd323e5f2261543"}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x30) [ 379.535331][T15017] ptrace attach of "/root/syz-executor.4"[15016] was attempted by "/root/syz-executor.4"[15017] [ 379.663922][T14989] bond9 (unregistering): Released all slaves [ 379.975022][T15009] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 380.015848][T15018] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 18:31:34 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$kcm(0xa, 0x6, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r3], 0x20}}, 0x0) 18:31:34 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x24) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xc}]}, 0x40}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r4, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x1d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x800) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="b99c3dca4975623e60499482736699536ca875f4a30afff921e5f00eeda154ab46d8f0e2304e3146cb6066b60428775b3b889141140eb1c5275df13a021a6fb5e52b7722d4684614309e1f56c1da9c5c5866efa8de8adf823a86d2c34cdad4923d669a3b7e39299e3a64db1ff537aa3ee0aafc155dc4bf88d3bd18061b21ef47dc978a124321f7d12e30500de6c5e409b6af790470302b8150170e87c304ba163d742d6b8dd8015f5dcce8a34d8316823ee334454155805249bef57890e9465aa71cf6ff93377f9a5c01a4aaea553796a2bc8e66db82568097e0bf155a8df4cdcdcaf950146432aa06dba275f198c891c886d184e4e6765185b0b977c68436039606723638806b412f8243f0868f503dcdffdbb4", @ANYRESHEX], 0x14}}, 0x10) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x4c, r4, 0x200, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x17}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x844}, 0x40820) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=r5, @ANYBLOB="08000100040000000a000600aaaaaaaaaaaa00000a00"], 0x68}, 0x1, 0x0, 0x0, 0x8045}, 0x20000000) 18:31:34 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x24) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xc}]}, 0x40}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="b99c3dca4975623e60499482736699536ca875f4a30afff921e5f00eeda154ab46d8f0e2304e3146cb6066b60428775b3b889141140eb1c5275df13a021a6fb5e52b7722d4684614309e1f56c1da9c5c5866efa8de8adf823a86d2c34cdad4923d669a3b7e39299e3a64db1ff537aa3ee0aafc155dc4bf88d3bd18061b21ef47dc978a124321f7d12e30500de6c5e409b6af790470302b8150170e87c304ba163d742d6b8dd8015f5dcce8a34d8316823ee334454155805249bef57890e9465aa71cf6ff93377f9a5c01a4aaea553796a2bc8e66db82568097e0bf155a8df4cdcdcaf950146432aa06dba275f198c891c886d184e4e6765185b0b977c68436039606723638806b412f8243f0868f503dcdffdbb4", @ANYRESHEX], 0x14}}, 0x10) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x4c, r4, 0x200, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x17}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x844}, 0x40820) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x5a84ae7d9c6b7621, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x7}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="040029bd7000fedbdf25180000000c009900bf010000000000000a001a00000000000000000008000300ed09722f900f09b067c2dbb7510599b7ba72c00a32221850dbeaac65ad68d7871bb2246c10f62439477c8dbd2a40c81366f02412f840684c2f8a42428fe97e0677fb16dc302f5bbdb09ab19b6e51d468f1047c40f7ea073cf6bcfec1fcd170c77d1cbde7cf94cf2fdb166332830bd5ec20c08de0e7956257a1b655d48aa1587476c0d5b090c6c6ee38397e28d943be816c21dc4f216ce2c1d3dade2e2d28323e39df221025ed905a7f9395748085015135d92bcf0b1ce34d0d90a0b4ec31f3b06722d219fa9be3c799b8f1f2195e0c2659ab047d74009bc36f9fec8099239263274f7c008e80ec4862a22e271c4a06815ca7bf15", @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB="08000100040000000a000600aaaaaaaaaaaa00000a00"], 0x68}, 0x1, 0x0, 0x0, 0x8045}, 0x20000000) 18:31:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getpeername$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0xa4, &(0x7f0000000080)) r4 = io_uring_setup(0xa4, &(0x7f0000000080)) r5 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000100)=[r5], 0x1) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x80800, 0x0) getsockname$l2tp6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000240)=0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000180)={0x0, &(0x7f0000000140)=[r6]}, 0x1) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:31:34 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed0b864256b1ceba6000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32=r4, @ANYBLOB="00000000ffffffff01000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0000000000000000080000000a000100727376703600000018000200140002"], 0x48}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x803, 0x0) [ 380.383493][T15080] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 380.491671][T15080] device bond9 entered promiscuous mode [ 380.498464][T15088] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 380.566374][T15092] device veth77 entered promiscuous mode [ 380.574713][T15092] bond9: (slave veth77): Enslaving as an active interface with an up link 18:31:35 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed0b864256b1ceba6000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32=r4, @ANYBLOB="00000000ffffffff01000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0000000000000000080000000a0001007273767036000000180002"], 0x48}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) socket(0x0, 0x0, 0x0) [ 380.759466][T15151] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 380.829150][T15153] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 18:31:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x2) socket$nl_route(0x10, 0x3, 0x0) r5 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:31:35 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/protocols\x00') r1 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x3, 0x101082) sendfile(r1, r0, 0x0, 0x800000080004103) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) lstat(0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) 18:31:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$kcm(0xa, 0x6, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r4], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r4], 0x20}}, 0x0) [ 380.963159][T15153] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 381.015800][T15155] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 18:31:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='mountinfo\x00') preadv(r3, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x2008, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000045000/0x1000)=nil, 0x1000}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x4, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x10, &(0x7f0000000040)={&(0x7f0000000480)=""/189, 0xffffffaa}}, 0x10) 18:31:35 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x74d7b3be, [{0x1, 0x74d7b3be}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f0000000280)=""/261, 0x3a, 0x105, 0x8}, 0x20) 18:31:35 executing program 2: clone(0x20086004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() tkill(r0, 0x3d) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(0x0, r3, 0x0) ioctl$TCFLSH(r1, 0x4b63, 0x4) [ 381.203976][T15164] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 18:31:35 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed0b864256b1ceba6000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32=r4, @ANYBLOB="00000000ffffffff01000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0000000000000000080000000a0001007273767036000000180002"], 0x48}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) socket(0x0, 0x0, 0x0) [ 381.442278][T15164] device bond10 entered promiscuous mode [ 381.480335][T15171] device veth79 entered promiscuous mode [ 381.487828][T15171] bond10: (slave veth79): Enslaving as an active interface with an up link [ 381.518340][T15208] bond10 (unregistering): (slave veth79): Releasing backup interface 18:31:36 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xa4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x0}, 0x10) [ 381.562294][T15203] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 381.609222][T15208] device veth79 left promiscuous mode 18:31:36 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[], 0x5) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) write$P9_RLERROR(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0x4010, r1, 0xc2700000) r2 = open(0x0, 0x8000, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x2812, r2, 0x0) 18:31:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x2000005) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, &(0x7f0000000040)=0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000140)={0x9, 0xffffff0e}) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r6 = io_uring_setup(0x4ab, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x2a6}) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) ioctl$KVM_S390_UCAS_MAP(r5, 0x4018ae50, &(0x7f0000000000)={0x4, 0x7ff, 0x9}) 18:31:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='mountinfo\x00') preadv(r3, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x2008, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000045000/0x1000)=nil, 0x1000}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x4, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x10, &(0x7f0000000040)={&(0x7f0000000480)=""/189, 0xffffffaa}}, 0x10) [ 382.076547][T15208] bond10 (unregistering): Released all slaves [ 382.242442][T15210] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 18:31:36 executing program 3: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffff9c, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0x0, @my}, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x40003) creat(0x0, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, 0x0) getpid() r1 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff000}) 18:31:37 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed0b864256b1ceba6000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32=r4, @ANYBLOB="00000000ffffffff01000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0000000000000000080000000a0001007273767036000000180002"], 0x48}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) socket(0x0, 0x0, 0x0) 18:31:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$kcm(0xa, 0x6, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r4], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r4], 0x20}}, 0x0) 18:31:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='mountinfo\x00') preadv(r3, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x2008, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000045000/0x1000)=nil, 0x1000}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x4, 0x0, 0x0, 0x0, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x10, &(0x7f0000000040)={&(0x7f0000000480)=""/189, 0xffffffaa}}, 0x10) 18:31:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}) r3 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[r3], 0x1) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) r5 = io_uring_setup(0x10c, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x80000080}) r6 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r6], 0x1) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000000180)={0x0, &(0x7f0000000140)=[r7]}, 0x1) r8 = io_uring_setup(0xa4, &(0x7f0000000080)) r9 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r8, 0x2, &(0x7f0000000100)=[r9], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[r6, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x6) ioctl$SNDCTL_DSP_GETIPTR(r4, 0x800c5011, &(0x7f0000000000)) r10 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r10, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) [ 382.711469][T15296] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 382.788062][T15300] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 18:31:37 executing program 3: sysfs$2(0x2, 0x9, &(0x7f00000001c0)=""/115) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='mountinfo\x00') preadv(r3, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x2008, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000045000/0x1000)=nil, 0x1000}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x4, 0x0, 0x44, 0x3, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x10, &(0x7f0000000040)={&(0x7f0000000480)=""/189, 0xffffffaa}}, 0x10) [ 382.926058][T15300] device bond10 entered promiscuous mode [ 382.933075][T15296] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 18:31:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readlinkat(r2, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x91) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000040)={0x1ff}, &(0x7f00000000c0), 0x0) vmsplice(r1, 0x0, 0x0, 0x0) [ 382.971361][T15309] device veth81 entered promiscuous mode [ 382.978912][T15309] bond10: (slave veth81): Enslaving as an active interface with an up link [ 383.075311][T15356] bond10 (unregistering): (slave veth81): Releasing backup interface [ 383.149693][T15356] device veth81 left promiscuous mode [ 383.247645][T15363] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 18:31:37 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f000005b000/0x400000)=nil, 0x400000, 0xcc) 18:31:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) r4 = dup(r2) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x820880}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x453, 0x601, 0x70bd2c, 0x25dfdbff, '\'(', ["", "", ""]}, 0x14}}, 0x4) 18:31:38 executing program 3: sysfs$2(0x2, 0x9, &(0x7f00000001c0)=""/115) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='mountinfo\x00') preadv(r3, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x2008, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000045000/0x1000)=nil, 0x1000}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x4, 0x0, 0x44, 0x3, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x10, &(0x7f0000000040)={&(0x7f0000000480)=""/189, 0xffffffaa}}, 0x10) 18:31:38 executing program 2: getsockname$netlink(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0xc) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x101000, 0x41) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000180)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000d7740100020000ee00005c00000000001f000000000000002e009991dd433d6c98233b86359e1311793461c1f0332de93c898a4ffdd49d725213f1d2d91c7cc605126af59438d7f2409ce8918b7d5a3ae9f601ebab2e4d34772943063a82ed23f02832a659726cc5ffc8f314a63bcfd5a2df86e9f0a2cfac4f5a19216f2550000e70f7febab1c620f5e1"], &(0x7f0000000280)=""/261, 0x47, 0x105, 0x48}, 0x20) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000200)) [ 383.694647][T15356] bond10 (unregistering): Released all slaves 18:31:38 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup2(r0, r0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x11, r1, 0x9) 18:31:38 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed0b864256b1ceba6000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32=r4, @ANYBLOB="00000000ffffffff01000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0000000000000000080000000a0001007273767036000000180002"], 0x48}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) socket(0x0, 0x0, 0x0) 18:31:38 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f000005b000/0x400000)=nil, 0x400000, 0x1000000000008) r0 = open(&(0x7f0000001380)='./file0\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x2008000fffffffe) 18:31:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$kcm(0xa, 0x6, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r4], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r4], 0x20}}, 0x0) 18:31:39 executing program 3: sysfs$2(0x2, 0x9, &(0x7f00000001c0)=""/115) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='mountinfo\x00') preadv(r3, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x2008, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000045000/0x1000)=nil, 0x1000}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x4, 0x0, 0x44, 0x3, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x10, &(0x7f0000000040)={&(0x7f0000000480)=""/189, 0xffffffaa}}, 0x10) 18:31:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000200)=[0xffffffffffffffff], 0x1) r3 = getpid() r4 = getpid() tkill(r4, 0x1000000000015) r5 = io_uring_setup(0xa4, &(0x7f0000000080)) socket$inet(0x2, 0x3, 0x6) fanotify_init(0x4, 0x101000) r6 = io_uring_setup(0xa4, &(0x7f0000000080)) r7 = socket$inet(0x2, 0x6, 0x6) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000100)=[r7], 0x1) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000040)=[r2, 0xffffffffffffffff], 0x2) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000000180)={0x0, &(0x7f0000000140)=[r8]}, 0x1) kcmp(r3, r4, 0x2, r8, r1) 18:31:39 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x24) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r2, 0x800, 0x0, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x1d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x800) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x14}}, 0x10) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x40, r2, 0x200, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x17}}]}, 0x40}, 0x1, 0x0, 0x0, 0x844}, 0x40820) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES32=r3, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x8045}, 0x20000000) 18:31:39 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed0b864256b1ceba6000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32=r4, @ANYBLOB="00000000ffffffff01000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0000000000000000080000000a0001"], 0x48}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 18:31:39 executing program 2: sysfs$2(0x2, 0x9, &(0x7f00000001c0)=""/115) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='mountinfo\x00') preadv(r3, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x2008, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000045000/0x1000)=nil, 0x1000}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x3, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x10, &(0x7f0000000040)={&(0x7f0000000480)=""/189, 0xffffffaa}}, 0x10) [ 384.638767][T15450] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 384.739930][T15450] device bond10 entered promiscuous mode [ 384.772350][T15459] device veth83 entered promiscuous mode [ 384.780140][T15459] bond10: (slave veth83): Enslaving as an active interface with an up link [ 384.868553][T15502] bond10 (unregistering): (slave veth83): Releasing backup interface [ 384.925440][T15502] device veth83 left promiscuous mode 18:31:39 executing program 3: sysfs$2(0x2, 0x9, &(0x7f00000001c0)=""/115) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='mountinfo\x00') preadv(r3, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x2008, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000045000/0x1000)=nil, 0x1000}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0x4, 0x0, 0x44, 0x3, 0x7]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x10, &(0x7f0000000040)={&(0x7f0000000480)=""/189, 0xffffffaa}}, 0x10) [ 384.996654][T15510] __nla_validate_parse: 2 callbacks suppressed [ 384.996685][T15510] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 385.035907][T15503] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 18:31:40 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x24) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xc}]}, 0x40}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x800) sendmsg$NL80211_CMD_GET_SCAN(r2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x4c, r3, 0x200, 0x0, 0x25dfdbfe, {}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x17}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x844}, 0x40820) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00'}) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = dup(0xffffffffffffffff) getpeername$packet(r4, 0x0, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x5a84ae7d9c6b7621, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x7}}]}, 0x40}}, 0x0) [ 385.422251][T15502] bond10 (unregistering): Released all slaves [ 385.532799][T15516] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 18:31:40 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r0, 0x4bfb, 0x0) [ 385.705286][T15558] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 385.786926][T15504] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 385.810652][T15554] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 18:31:40 executing program 3: unshare(0x20000400) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) lseek(r0, 0x0, 0x0) 18:31:40 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$kcm(0xa, 0x6, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r3], 0x20}}, 0x0) 18:31:40 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@broadcast, @random="630e00", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0f000", 0x18, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, [], @local}}}}}}, 0x0) 18:31:40 executing program 4: r0 = memfd_create(&(0x7f0000000480)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xcd\xb8_\x05U\xcd<\xd3\x8e[q\x00\xb3\x0e\xaf+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4Q\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\"\xaf\xeb[Z\x81\x00\x00\x00\x00\x18IR\xae\x84\xcdN\xf7\xf6\b~\xed_MG=W#^dQ:\xbc\xaf\xbc\xa7q\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf\x8b\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c\x83\xe7\ng\x87\xd930xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x1, 'bridge_slave\x00'}, {0x4}}}]}, 0x3c}}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8001, 0x0) 18:31:42 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$kcm(0xa, 0x6, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r3], 0x20}}, 0x0) 18:31:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001401", 0x30, 0x3a, 0x0, @local, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, "000600", 0x0, 0x0, 0x0, @mcast2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}}}}}, 0x0) 18:31:42 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0x52, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x0, 0x2}, @mptcp=@ack={0x1e, 0x4}]}}}}}}}}, 0x0) [ 387.808974][T15677] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 387.927120][T15677] device bond10 entered promiscuous mode [ 387.990407][T15685] device veth87 entered promiscuous mode [ 387.997836][T15685] bond10: (slave veth87): Enslaving as an active interface with an up link 18:31:42 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)={{0x1b, 0x9b, 0x7, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 18:31:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:42 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0x52, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x0, 0x2}, @mptcp=@ack={0x1e, 0x4}]}}}}}}}}, 0x0) [ 388.138825][T15685] bond10 (unregistering): (slave veth87): Releasing backup interface [ 388.217522][T15685] device veth87 left promiscuous mode 18:31:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, 0xffffffffffffffff) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[r2], 0x1) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000180)={0x0, &(0x7f0000000140)=[r3]}, 0x1) r4 = io_uring_setup(0xa4, &(0x7f0000000080)) r5 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000100)=[r5], 0x1) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r7 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:31:43 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000006c0)={0x0, {{0x2, 0x0, @multicast2}}}, 0x108) 18:31:43 executing program 4: [ 388.735484][T15685] bond10 (unregistering): Released all slaves 18:31:43 executing program 4: 18:31:43 executing program 3: 18:31:43 executing program 5: 18:31:43 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$kcm(0xa, 0x6, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r3], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r3], 0x20}}, 0x0) 18:31:43 executing program 2: 18:31:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) r3 = io_uring_setup(0xa4, &(0x7f0000000080)) r4 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000100)=[r4], 0x1) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000180)={0x0, &(0x7f0000000140)=[r5]}, 0x1) r6 = io_uring_setup(0xa4, &(0x7f0000000080)) r7 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000100)=[r7], 0x1) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000040), 0x0) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x72, 0x60000) 18:31:43 executing program 3: 18:31:43 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000001380)={0x1, [0x0, 0x0]}, &(0x7f0000001700)=0x2) [ 389.233114][T15802] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 389.334744][T15802] device bond10 entered promiscuous mode [ 389.386170][T15807] device veth89 entered promiscuous mode [ 389.393756][T15807] bond10: (slave veth89): Enslaving as an active interface with an up link [ 389.467308][T15816] bond10 (unregistering): (slave veth89): Releasing backup interface 18:31:44 executing program 5: [ 389.538276][T15816] device veth89 left promiscuous mode 18:31:44 executing program 2: 18:31:44 executing program 3: 18:31:44 executing program 4: 18:31:44 executing program 5: [ 389.959709][T15816] bond10 (unregistering): Released all slaves 18:31:44 executing program 2: 18:31:44 executing program 3: 18:31:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$kcm(0xa, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r4], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r4], 0x20}}, 0x0) 18:31:45 executing program 2: 18:31:45 executing program 4: 18:31:45 executing program 5: 18:31:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) r3 = socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000000000020000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000028000000ffffff7fff7f0000000000009486000000000000ffff0000000000000010000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000080ffffffffffff1f0000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000af7b71383ca6ba600"/320]) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:31:45 executing program 3: 18:31:45 executing program 2: 18:31:45 executing program 5: 18:31:45 executing program 4: [ 390.674035][T15926] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 390.776810][T15926] device bond10 entered promiscuous mode [ 390.811070][T15931] device veth91 entered promiscuous mode [ 390.819036][T15931] bond10: (slave veth91): Enslaving as an active interface with an up link 18:31:45 executing program 3: [ 390.897891][T15971] bond10 (unregistering): (slave veth91): Releasing backup interface [ 390.962422][T15971] device veth91 left promiscuous mode 18:31:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) r3 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[r3], 0x1) getsockopt$inet_tcp_int(r3, 0x6, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000180)=@security={'security\x00', 0xe, 0x4, 0x3b0, 0xffffffff, 0x248, 0x118, 0x0, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, &(0x7f0000000140), {[{{@ip={@local, @local, 0xffffff00, 0xffffffff, 'team_slave_0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x5c, 0x0, 0x1}, 0x0, 0xb8, 0x118, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}, @common=@icmp={{0x28, 'icmp\x00'}, {0x19, "d507"}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@empty, [0xff000000, 0xffffffff], 0x4e23, 0x4e21, 0x4e20, 0x4e20, 0x101, 0x0, 0xffff8ef5, 0xc9, 0xe9}}}, {{@ip={@private=0xa010102, @private=0xa010100, 0x0, 0xff0000ff, 'ip_vti0\x00', 'team_slave_0\x00', {}, {0xff}, 0x16, 0x0, 0x20}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}, {0x6, 0x2bb}}, @common=@ah={{0x30, 'ah\x00'}, {[0x579ad580, 0xfff], 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={[], 0x36}, 0x9, 0xa, [0x26, 0x31, 0xa, 0x14, 0x22, 0x8, 0x16, 0x2d, 0x27, 0x15, 0x3e, 0x15, 0x39, 0xf, 0x14, 0x4], 0x2, 0x1f0dba9a}}}, {{@ip={@broadcast, @multicast1, 0x1fffffffe, 0xffffff, 'caif0\x00', 'syz_tun\x00', {}, {}, 0x5c, 0x0, 0x11}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="67cfda9b796f", 0xfff, 0xa, [0x3c, 0x16, 0x22, 0x10, 0x9, 0x1a, 0x8, 0x31, 0x3f, 0x3b, 0x3f, 0x30, 0x31, 0x3c, 0x28, 0x12], 0x1, 0x7, 0x5}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r4 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:31:45 executing program 5: [ 391.352189][T15978] x_tables: duplicate underflow at hook 2 [ 391.373000][T15971] bond10 (unregistering): Released all slaves 18:31:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$kcm(0xa, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r4], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r4], 0x20}}, 0x0) 18:31:46 executing program 2: 18:31:46 executing program 3: 18:31:46 executing program 4: 18:31:46 executing program 5: [ 391.540848][T15983] x_tables: duplicate underflow at hook 2 18:31:46 executing program 5: 18:31:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x341000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r3, &(0x7f0000000240)) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x6d, &(0x7f0000000080)={r6}, &(0x7f00000000c0)=0xfe42) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) [ 391.850259][T16038] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 18:31:46 executing program 4: 18:31:46 executing program 2: [ 391.955524][T16038] device bond10 entered promiscuous mode 18:31:46 executing program 3: [ 392.007512][T16040] device veth93 entered promiscuous mode [ 392.027270][T16040] bond10: (slave veth93): Enslaving as an active interface with an up link [ 392.113165][T16070] bond10 (unregistering): (slave veth93): Releasing backup interface [ 392.172862][T16070] device veth93 left promiscuous mode 18:31:46 executing program 2: 18:31:47 executing program 5: [ 392.578689][T16070] bond10 (unregistering): Released all slaves 18:31:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$kcm(0xa, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000140)) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r4], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r4], 0x20}}, 0x0) 18:31:47 executing program 4: 18:31:47 executing program 3: 18:31:47 executing program 2: 18:31:47 executing program 5: 18:31:47 executing program 3: [ 393.161880][T16149] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 18:31:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_GET_TIMERSLACK(0x1e) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:31:47 executing program 5: 18:31:47 executing program 2: 18:31:47 executing program 4: [ 393.228156][T16149] device bond10 entered promiscuous mode [ 393.313207][T16159] device veth95 entered promiscuous mode [ 393.320861][T16159] bond10: (slave veth95): Enslaving as an active interface with an up link [ 393.446117][T16185] bond10 (unregistering): (slave veth95): Releasing backup interface 18:31:48 executing program 2: [ 393.514181][T16185] device veth95 left promiscuous mode 18:31:48 executing program 4: [ 393.831433][T16185] bond10 (unregistering): Released all slaves 18:31:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$kcm(0xa, 0x6, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r4], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r4], 0x20}}, 0x0) 18:31:48 executing program 5: 18:31:48 executing program 3: 18:31:48 executing program 2: 18:31:48 executing program 4: 18:31:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) r3 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[r3], 0x1) fsetxattr$security_evm(r3, &(0x7f00000001c0)='security.evm\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02f547"], 0x3, 0x3) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048040}, 0x24040810) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r4 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) [ 394.278248][T16249] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 394.357490][T16249] device bond10 entered promiscuous mode 18:31:49 executing program 5: 18:31:49 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000633a77fbac14143fee", 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffe2a}, 0x28) [ 394.405365][T16254] device veth97 entered promiscuous mode [ 394.412962][T16254] bond10: (slave veth97): Enslaving as an active interface with an up link 18:31:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x8}) 18:31:49 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000280)={0x0, 0x0, 0x1}) [ 394.491726][T16296] bond10 (unregistering): (slave veth97): Releasing backup interface [ 394.531515][T16296] device veth97 left promiscuous mode [ 394.754767][T16296] bond10 (unregistering): Released all slaves 18:31:49 executing program 5: r0 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) write(r0, &(0x7f0000000000)="b6", 0xfffffe7e) utimes(&(0x7f0000000200)='./bus\x00', 0x0) 18:31:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = semget$private(0x0, 0x1, 0x0) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000000)=[0xca2, 0x6, 0x1, 0x4, 0x2, 0x8, 0x6, 0x1, 0x5, 0x3f]) socket$nl_route(0x10, 0x3, 0x0) r3 = io_uring_setup(0xa4, &(0x7f0000000080)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$netlink(r6, &(0x7f0000000180), &(0x7f00000001c0)=0xc) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000040)=0x20, 0x4) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:31:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$kcm(0xa, 0x6, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, 0x0) r3 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r4], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r4], 0x20}}, 0x0) 18:31:49 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) 18:31:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000006d000100"/20, @ANYRES32=r3, @ANYBLOB="000000000000000018003480140035"], 0x38}}, 0x0) [ 395.402532][T16374] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 395.473724][T16374] bond10 (uninitialized): Released all slaves 18:31:50 executing program 4: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:31:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r1, 0x80044dfe, &(0x7f0000000000)) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) [ 395.589427][T16377] device veth99 entered promiscuous mode [ 395.597299][T16377] bond4: (slave veth99): Enslaving as an active interface with an up link 18:31:50 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x9, 0x0, 0x400000000000000, 0x0, 0x0, 0x9], 0x0, 0x200800}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @remote}, 0x10) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000480), &(0x7f00000004c0)=""/108}) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:31:50 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/64, 0x40}], 0x1, 0x0) 18:31:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$kcm(0xa, 0x6, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, 0x0) r3 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r4], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r4], 0x20}}, 0x0) 18:31:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000000)=ANY=[@ANYBLOB="0200120097279bd4fbf74358ddb7d541e80234262c5c"]) r3 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:31:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 396.345259][T16422] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 18:31:51 executing program 2: semop(0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha224-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x500, 0x0, 0x0) 18:31:51 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$CHAR_RAW_ROGET(r1, 0x125e, &(0x7f0000000000)) [ 396.414094][T16422] bond10 (uninitialized): Released all slaves [ 396.510127][T16427] device veth101 entered promiscuous mode [ 396.517715][T16427] bond4: (slave veth101): Enslaving as an active interface with an up link 18:31:51 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/64, 0x40}], 0x1, 0x0) 18:31:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000040)=0x5, &(0x7f00000001c0)=0x2) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000140)={{0x8, @remote, 0x4e21, 0x0, 'ovf\x00', 0x0, 0x8, 0x1f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x1, 0x85a, 0x3ff, 0x1c00}}, 0x44) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r4 = io_uring_setup(0xa4, &(0x7f0000000080)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_S_PARM(r6, 0xc0cc5616, &(0x7f0000000200)={0xf17d94b40c81e484, @output={0x1000, 0x1, {0xd29, 0xb6}, 0x16d, 0x5aaa927c}}) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) 18:31:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$kcm(0xa, 0x6, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, 0x0) r3 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r4], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r4], 0x20}}, 0x0) 18:31:51 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffd}, 0x3c) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@tipc=@name, 0x80, &(0x7f0000000080)=[{&(0x7f0000000380)="a8", 0x1}], 0x1, &(0x7f0000000640)=ANY=[], 0x190}, 0x0) 18:31:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/159) 18:31:51 executing program 5: perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r1, 0x0, 0xfffffffffffffef2, 0x2004076e, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) [ 397.011008][T16462] IPVS: set_ctl: invalid protocol: 8 172.20.20.187:20001 18:31:51 executing program 2: clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='logon\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xd}, &(0x7f0000001fee)='R\trus\xac\x84cusgrVex:De', 0xfffffffffffffffe) [ 397.172956][T16466] IPVS: set_ctl: invalid protocol: 8 172.20.20.187:20001 [ 397.173770][T16478] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 397.254151][T16478] bond10 (uninitialized): Released all slaves [ 397.315294][T16485] device veth103 entered promiscuous mode [ 397.323296][T16485] bond4: (slave veth103): Enslaving as an active interface with an up link 18:31:52 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffd}, 0x3c) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@tipc=@name, 0x80, &(0x7f0000000080)=[{&(0x7f0000000380)="a8", 0x1}], 0x1, &(0x7f0000000640)=ANY=[], 0x190}, 0x0) 18:31:52 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) 18:31:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0xfffffffc, 0x0, {0xa, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xd}]}, 0x28}}, 0x0) 18:31:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x4) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 18:31:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$kcm(0xa, 0x6, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r4], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r4], 0x20}}, 0x0) [ 397.669209][T16505] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 397.760315][T16514] bridge0: port 3(bond1) entered blocking state [ 397.767020][T16514] bridge0: port 3(bond1) entered disabled state [ 397.777458][T16514] device bond1 entered promiscuous mode [ 397.820580][T16549] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 397.891938][T16549] bond10 (uninitialized): Released all slaves 18:31:52 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xfd39, &(0x7f000000cf3d)=""/195}, 0x48) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000340)={0x0, r0}, 0x10) [ 397.940279][T16513] device veth105 entered promiscuous mode [ 397.947729][T16513] bond4: (slave veth105): Enslaving as an active interface with an up link 18:31:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0x1, &(0x7f00000001c0)=0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000004c0)={'\x00', 0x20000005402}) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r3, &(0x7f0000000000)="5903650fedb06305000aa5c5164a3f435a37", 0xfdcd}]) [ 398.033732][T16560] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 18:31:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$kcm(0xa, 0x6, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r4], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r4], 0x20}}, 0x0) 18:31:52 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff}) fremovexattr(r0, 0x0) 18:31:52 executing program 2: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0) [ 398.291122][T16571] skbuff: bad partial csum: csum=1379/2560 headroom=64 headlen=3712 18:31:53 executing program 4: prctl$PR_SET_NAME(0xf, &(0x7f0000000100)='?\x1f\xb4!\x85\xcb\x10\x1av\xbd\xea\xf4\xbeB\x97\x0f\x91fTS\xe2\xbe\xd5)jX\x7f\xfd\xfc\xa2\xd2hG`\x81\xff\xd4\xe8c\xc0\xbb\xac9Rh\x06Ha\xc4%\x0f=\x96H\x88^\xfd\xb3\xddH\rqg\t\xba\xb9\x02\xb9\x1a\x84\xf2\xd6\xc7\xfc\x9e\xee\x9fJ$\x8b\xef1w\x95\xda\xae\x9b\x1725\x17\x9d\xb99\xb8\xc8\xee&<\x04a$\xf7\xcb\xa4\xa0\x04\xa1\xdc\xe4k\xe6\xa1\x8e\x94\xb1\xf0\xd1;\xe5=\xb1:\x02\xf0\xd5\xa0\xf9\xffm\x8c\xc3\xa3\xd6\xbd\x14\xbd\xa2S\x8cm\xcfM\x02\bO=\x13\xc1.Q\xb4\xa1z\\Bk\x8aI\xfa\x1b\x18B\xd7w\xb5\xe2\xb42\x1e8\xef9\xcc\x82%\xd8\t\xcf,\xc1\xb0j\xc3\xb3\xcdW\xd2`\xa7\xe6\x18\xd8.:\xe3f\b\x9a\x981VL\x9e\xa6\xa7\xbe1\xb3\xe7\xffe&c\xd1\xcc\xaa\xe9\xc8\xb8e\xdf\xefmL\xe2}\x02\xbb0}n;\xb8\x8b9\t\x13j2\xcf\x94\xce\x05\x84\xe2dr\xbd\xe7\x94e\x7f\xa7\x92lF\x16\xe0\xa4/?\x0fJ\xb2\"9\xb4m\x85\xeaT\x02U\xefD\x97Bq\xe6\xc6\f\x83\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x83~p\xd5\xcc\xb1\xb4\x1c\x9c\x83\xdb\x9b\x14\xdc!\xe8\x7f\xa59\xe9t\x98A\xbd\xe3aX\xab\xcd\x13\x7f\x1ecR\xd1&\xc9\x10\x14|\xb8l\x9e\xe3\x9auQ8\xabg\x90\x00\xe13_\x9d\xa9@\x84\x0f\xd6\x93*;\x85:\xdd\xc3`\xd5s(\x17[\x15\xb3L\x99\xb4\xb3^s\xaa\xe4\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0001}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 398.418443][T16573] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 398.452343][T16573] bond10 (uninitialized): Released all slaves [ 398.504742][T16581] device veth107 entered promiscuous mode [ 398.512442][T16581] bond4: (slave veth107): Enslaving as an active interface with an up link 18:31:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e20, 0x23, @local, 0x8}]}, &(0x7f0000000180)=0x10) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000300)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)={r4, 0x2}, &(0x7f00000000c0)=0x18) syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x7, 0x80) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000200)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x100008}, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x6) socket$nl_route(0x10, 0x3, 0x0) r7 = io_uring_setup(0xd90, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x29b}) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) [ 398.547410][T16571] skbuff: bad partial csum: csum=1379/2560 headroom=64 headlen=3712 18:31:53 executing program 2: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r1, r0) 18:31:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="002000000060a9807f3c0c93d6a642b60000feff4417904b2cc99fd7640ef7ff700e13"], 0x41) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) read(r0, &(0x7f0000000200)=""/231, 0x1000006ce) r1 = syz_open_pts(r0, 0x0) r2 = dup2(r1, r0) ioctl$TCXONC(r2, 0x540a, 0x0) 18:31:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$kcm(0xa, 0x6, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, 0x0) r3 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r4], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r4], 0x20}}, 0x0) 18:31:53 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @broadcast}}}}}}, 0x0) 18:31:53 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) [ 399.074394][T16612] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 399.132688][T16612] bond10 (uninitialized): Released all slaves [ 399.213819][T16617] device veth109 entered promiscuous mode [ 399.221869][T16617] bond4: (slave veth109): Enslaving as an active interface with an up link 18:31:53 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffffffffffffba, &(0x7f0000000340), 0x0, 0x0, 0x6686}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @mcast1}, @in6={0xa, 0x0, 0x0, @private2, 0x3}], 0x38) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 18:31:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$kcm(0xa, 0x6, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r4], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r4], 0x20}}, 0x0) [ 399.697631][T16641] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 18:31:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x6, &(0x7f0000000200)={0x0, 0x0}) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x7, &(0x7f0000000040)=0x0) io_submit(r4, 0x200000000000019f, &(0x7f0000000540)=[&(0x7f0000000080)={0x2703000000000009, 0x8000000, 0x3, 0x1, 0x0, r3, &(0x7f0000000040)}]) io_getevents(r4, 0xa4a, 0x4, &(0x7f0000000180)=[{}, {}, {}, {}], &(0x7f0000000240)={r1, r2+60000000}) r5 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r7, 0x8008551d, &(0x7f0000000280)={0x96b1, 0x18, [{0x39}, {0x3}, {0xc, 0x1}, {0x9, 0x1}, {0x5, 0x1}, {0x9}, {0xb}, {0x9, 0x1}, {0xd, 0x1}, {0x4, 0x1}, {}, {0xe}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x9, 0x1}, {0xd}, {0xa}, {0xc}, {0x0, 0x1}, {0xb, 0x1}, {0xb, 0x1}, {0xd, 0x1}, {0x5, 0x1}]}) socket$nl_route(0x10, 0x3, 0x0) r8 = io_uring_setup(0xa0, &(0x7f0000000080)={0x0, 0x0, 0xf, 0x0, 0x2000000}) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000140)=0x54) io_uring_register$IORING_REGISTER_FILES(r8, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) [ 399.773811][T16641] device bond10 entered promiscuous mode 18:31:54 executing program 3: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x200408c4) 18:31:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000080)=ANY=[@ANYBLOB="1f0529fc15ef27364ca0f402080000f790cf"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$AUDIT_USER(0xffffffffffffffff, 0x0, 0x0) 18:31:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') sendfile(r0, r1, 0x0, 0xe0) 18:31:54 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf2, 0xffff}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000c80)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000b3e600000e00000004000000700200004001000000000000400100000000000040010000d8010000d8010000d8010000d8010000d8010000040000000000000000000000ac1414aa0000000000000000000000006272696467653e736c6176655f3000006d6163766c616e310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a00000000000000000000000000000000000000000003000434f4e4e4d41524b0000000000000000000000000000000000000000000100000000000040000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a00000000000000000000000000000000000000000003000434f4e4e4d41524b000000000000000000000000000000000000000000010000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 18:31:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$kcm(0xa, 0x6, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(0xffffffffffffffff, 0x301, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r4], 0x50}}, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2000000011000d22000000000000070010000000", @ANYRES32=r4], 0x20}}, 0x0) 18:31:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) r3 = socket$inet(0x2, 0x3, 0x6) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[r3], 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f0000000280)={0x3, 0x2, 0x4b3, 0xfff, 0x0, 0x101, 0x86c, 0x3}) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r7, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32=r8], 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_CACHEINFO={0x14, 0x9, {0x9}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', r8}) socket$nl_route(0x10, 0x3, 0x0) r9 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r9, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) [ 400.458275][T16703] ===================================================== [ 400.465411][T16703] BUG: KMSAN: uninit-value in nfnetlink_rcv+0x2f5/0x3ad0 [ 400.472471][T16703] CPU: 0 PID: 16703 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 400.481185][T16703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 400.491269][T16703] Call Trace: [ 400.494598][T16703] dump_stack+0x1df/0x240 [ 400.498985][T16703] kmsan_report+0xf7/0x1e0 [ 400.504664][T16703] __msan_warning+0x58/0xa0 [ 400.509211][T16703] nfnetlink_rcv+0x2f5/0x3ad0 [ 400.513930][T16703] ? kmsan_get_metadata+0x11d/0x180 [ 400.519250][T16703] ? local_bh_enable+0x36/0x40 [ 400.524063][T16703] ? __dev_queue_xmit+0x338e/0x3b20 [ 400.529904][T16703] ? kmsan_get_metadata+0x11d/0x180 [ 400.535237][T16703] ? skb_clone+0x404/0x5d0 [ 400.539691][T16703] ? kmsan_get_metadata+0x11d/0x180 [ 400.544931][T16703] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 400.556951][T16703] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 400.563130][T16703] ? netlink_deliver_tap+0xdab/0xe90 [ 400.568466][T16703] ? kmsan_set_origin_checked+0x95/0xf0 [ 400.574063][T16703] ? kmsan_get_metadata+0x11d/0x180 [ 400.579323][T16703] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 400.585174][T16703] netlink_unicast+0xf9e/0x1100 [ 400.590070][T16703] ? nfnetlink_net_exit_batch+0x280/0x280 [ 400.595838][T16703] netlink_sendmsg+0x1246/0x14d0 [ 400.600854][T16703] ? netlink_getsockopt+0x1440/0x1440 [ 400.606343][T16703] kernel_sendmsg+0x433/0x440 [ 400.611091][T16703] sock_no_sendpage+0x235/0x300 [ 400.616012][T16703] ? sock_no_mmap+0x30/0x30 [ 400.621529][T16703] sock_sendpage+0x1e1/0x2c0 [ 400.626217][T16703] pipe_to_sendpage+0x38c/0x4c0 [ 400.631106][T16703] ? sock_fasync+0x250/0x250 [ 400.635754][T16703] __splice_from_pipe+0x565/0xf00 [ 400.640821][T16703] ? generic_splice_sendpage+0x2d0/0x2d0 [ 400.647150][T16703] generic_splice_sendpage+0x1d5/0x2d0 [ 400.652676][T16703] ? iter_file_splice_write+0x1800/0x1800 [ 400.658439][T16703] direct_splice_actor+0x1fd/0x580 [ 400.663605][T16703] ? kmsan_get_metadata+0x4f/0x180 [ 400.668757][T16703] splice_direct_to_actor+0x6b2/0xf50 [ 400.674157][T16703] ? do_splice_direct+0x580/0x580 [ 400.679250][T16703] do_splice_direct+0x342/0x580 [ 400.684177][T16703] do_sendfile+0x101b/0x1d40 [ 400.688838][T16703] __se_sys_sendfile64+0x2bb/0x360 [ 400.694012][T16703] ? kmsan_get_metadata+0x4f/0x180 [ 400.699169][T16703] __x64_sys_sendfile64+0x56/0x70 [ 400.704306][T16703] do_syscall_64+0xb0/0x150 [ 400.708905][T16703] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 400.714817][T16703] RIP: 0033:0x45c1f9 [ 400.718727][T16703] Code: Bad RIP value. [ 400.722807][T16703] RSP: 002b:00007f268a1c4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 400.731235][T16703] RAX: ffffffffffffffda RBX: 00000000000260c0 RCX: 000000000045c1f9 [ 400.739396][T16703] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 400.747386][T16703] RBP: 000000000078bf48 R08: 0000000000000000 R09: 0000000000000000 [ 400.755377][T16703] R10: 00000000000000e0 R11: 0000000000000246 R12: 000000000078bf0c [ 400.763366][T16703] R13: 0000000000c9fb6f R14: 00007f268a1c59c0 R15: 000000000078bf0c [ 400.771374][T16703] [ 400.773712][T16703] Uninit was stored to memory at: [ 400.778770][T16703] kmsan_internal_chain_origin+0xad/0x130 [ 400.784517][T16703] kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 400.790522][T16703] kmsan_memcpy_metadata+0xb/0x10 [ 400.795565][T16703] __msan_memcpy+0x43/0x50 [ 400.800009][T16703] _copy_from_iter_full+0xbfe/0x13b0 [ 400.805329][T16703] netlink_sendmsg+0xfaa/0x14d0 [ 400.810226][T16703] kernel_sendmsg+0x433/0x440 [ 400.814922][T16703] sock_no_sendpage+0x235/0x300 [ 400.819801][T16703] sock_sendpage+0x1e1/0x2c0 [ 400.824418][T16703] pipe_to_sendpage+0x38c/0x4c0 [ 400.829293][T16703] __splice_from_pipe+0x565/0xf00 [ 400.834344][T16703] generic_splice_sendpage+0x1d5/0x2d0 [ 400.839834][T16703] direct_splice_actor+0x1fd/0x580 [ 400.844971][T16703] splice_direct_to_actor+0x6b2/0xf50 [ 400.850375][T16703] do_splice_direct+0x342/0x580 [ 400.855255][T16703] do_sendfile+0x101b/0x1d40 [ 400.859878][T16703] __se_sys_sendfile64+0x2bb/0x360 [ 400.865982][T16703] __x64_sys_sendfile64+0x56/0x70 [ 400.871037][T16703] do_syscall_64+0xb0/0x150 [ 400.875564][T16703] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 400.881459][T16703] [ 400.883796][T16703] Uninit was created at: [ 400.888064][T16703] kmsan_save_stack_with_flags+0x3c/0x90 [ 400.893720][T16703] kmsan_alloc_page+0xb9/0x180 [ 400.906926][T16703] __alloc_pages_nodemask+0x56a2/0x5dc0 [ 400.912497][T16703] alloc_pages_current+0x672/0x990 [ 400.917629][T16703] push_pipe+0x605/0xb70 [ 400.921911][T16703] iov_iter_get_pages_alloc+0x18a9/0x21c0 [ 400.927651][T16703] do_splice_to+0x4fc/0x14f0 [ 400.932264][T16703] splice_direct_to_actor+0x45c/0xf50 [ 400.937655][T16703] do_splice_direct+0x342/0x580 [ 400.942524][T16703] do_sendfile+0x101b/0x1d40 [ 400.947144][T16703] __se_sys_sendfile64+0x2bb/0x360 [ 400.952275][T16703] __x64_sys_sendfile64+0x56/0x70 [ 400.957321][T16703] do_syscall_64+0xb0/0x150 [ 400.961852][T16703] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 400.968030][T16703] ===================================================== [ 400.974973][T16703] Disabling lock debugging due to kernel taint [ 400.981149][T16703] Kernel panic - not syncing: panic_on_warn set ... [ 400.987760][T16703] CPU: 0 PID: 16703 Comm: syz-executor.4 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 400.997831][T16703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 401.008528][T16703] Call Trace: [ 401.011846][T16703] dump_stack+0x1df/0x240 [ 401.016206][T16703] panic+0x3d5/0xc3e [ 401.020160][T16703] kmsan_report+0x1df/0x1e0 [ 401.024692][T16703] __msan_warning+0x58/0xa0 [ 401.029225][T16703] nfnetlink_rcv+0x2f5/0x3ad0 [ 401.033920][T16703] ? kmsan_get_metadata+0x11d/0x180 [ 401.039147][T16703] ? local_bh_enable+0x36/0x40 [ 401.043936][T16703] ? __dev_queue_xmit+0x338e/0x3b20 [ 401.049163][T16703] ? kmsan_get_metadata+0x11d/0x180 [ 401.054412][T16703] ? skb_clone+0x404/0x5d0 [ 401.058883][T16703] ? kmsan_get_metadata+0x11d/0x180 [ 401.064117][T16703] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 401.069962][T16703] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 401.076066][T16703] ? netlink_deliver_tap+0xdab/0xe90 [ 401.081401][T16703] ? kmsan_set_origin_checked+0x95/0xf0 [ 401.086981][T16703] ? kmsan_get_metadata+0x11d/0x180 [ 401.092213][T16703] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 401.098052][T16703] netlink_unicast+0xf9e/0x1100 [ 401.102947][T16703] ? nfnetlink_net_exit_batch+0x280/0x280 [ 401.108704][T16703] netlink_sendmsg+0x1246/0x14d0 [ 401.113696][T16703] ? netlink_getsockopt+0x1440/0x1440 [ 401.119104][T16703] kernel_sendmsg+0x433/0x440 [ 401.124946][T16703] sock_no_sendpage+0x235/0x300 [ 401.129858][T16703] ? sock_no_mmap+0x30/0x30 [ 401.134385][T16703] sock_sendpage+0x1e1/0x2c0 [ 401.139024][T16703] pipe_to_sendpage+0x38c/0x4c0 [ 401.143927][T16703] ? sock_fasync+0x250/0x250 [ 401.148671][T16703] __splice_from_pipe+0x565/0xf00 [ 401.153725][T16703] ? generic_splice_sendpage+0x2d0/0x2d0 [ 401.159434][T16703] generic_splice_sendpage+0x1d5/0x2d0 [ 401.164939][T16703] ? iter_file_splice_write+0x1800/0x1800 [ 401.170701][T16703] direct_splice_actor+0x1fd/0x580 [ 401.178996][T16703] ? kmsan_get_metadata+0x4f/0x180 [ 401.184146][T16703] splice_direct_to_actor+0x6b2/0xf50 [ 401.189551][T16703] ? do_splice_direct+0x580/0x580 [ 401.194648][T16703] do_splice_direct+0x342/0x580 [ 401.205647][T16703] do_sendfile+0x101b/0x1d40 [ 401.210328][T16703] __se_sys_sendfile64+0x2bb/0x360 [ 401.215466][T16703] ? kmsan_get_metadata+0x4f/0x180 [ 401.220620][T16703] __x64_sys_sendfile64+0x56/0x70 [ 401.225676][T16703] do_syscall_64+0xb0/0x150 [ 401.230211][T16703] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 401.236135][T16703] RIP: 0033:0x45c1f9 [ 401.240032][T16703] Code: Bad RIP value. [ 401.245057][T16703] RSP: 002b:00007f268a1c4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 401.253489][T16703] RAX: ffffffffffffffda RBX: 00000000000260c0 RCX: 000000000045c1f9 [ 401.262101][T16703] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 401.270100][T16703] RBP: 000000000078bf48 R08: 0000000000000000 R09: 0000000000000000 [ 401.278097][T16703] R10: 00000000000000e0 R11: 0000000000000246 R12: 000000000078bf0c [ 401.286097][T16703] R13: 0000000000c9fb6f R14: 00007f268a1c59c0 R15: 000000000078bf0c [ 401.295332][T16703] Kernel Offset: 0x2a000000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 401.306965][T16703] Rebooting in 86400 seconds..