x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:19 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x0, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:17:20 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000068020000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1918.389696][T29993] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 06:17:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) (async) r3 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000140)={'sit0\x00', r2, 0xf000, 0x20, 0x7ff, 0xffffffff, {{0x19, 0x4, 0x0, 0x0, 0x64, 0x67, 0x0, 0x6, 0x2f, 0x0, @empty, @private=0xa010100, {[@timestamp_prespec={0x44, 0x14, 0x3c, 0x3, 0x5, [{@remote, 0x3ff}, {@broadcast, 0x8}]}, @rr={0x7, 0x23, 0xa8, [@loopback, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2c}, @broadcast, @empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @lsrr={0x83, 0x17, 0x74, [@broadcast, @multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x30}, @multicast1]}]}}}}}) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x4) (async) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0xdd860600, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x8, 0x1, 0x0, 0x1, [{0xc}, {0x8}, {0x1b}, {0x8}, {0x8}]}}, @AF_INET={0x29, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x10, 0xd}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000bc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b80)={&(0x7f00000002c0)={0x8b0, 0x0, 0x40c, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_WANTED={0xf0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xd4, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff801}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '*+%.[-.(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xcb}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\\(!.\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbc1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x10000}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7f}]}, @ETHTOOL_A_FEATURES_WANTED={0x238, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x7, 0x4, "28db1f"}, @ETHTOOL_A_BITSET_BITS={0xec, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'N-!{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'team0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x414d}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'team0\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'team0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fe000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'team0\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffffff}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_BITS={0xf4, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ']/+{%/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '@,,[+){/&!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x364200}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x55573d46}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3fe00}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#&]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5011cf05}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'team0\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x2f, 0x4, "9bd9cc14550b3e029484633f2ce98d0f618b76c75e801f1ab19ab9869f70f3dcb2d5eab74972a0353107fe"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80000001}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x128, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x2b, 0x5, "bf83f1c15c21a1483205b7c1d8b15d2843900a6a35189c46cf3c4cae9104868503b963ab551034"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_MASK={0x56, 0x5, "ac319be5bfd0e63413afa17420795fd322e8253e3f2e0966f4f4efd6bdb8c6b2c88b66893b960e8f28fa7babbc3efb8ccd48b160e59f25baec1c18c9fd1956ffb2a93039d1dd789d7a97519cbcbdd0ed3281"}, @ETHTOOL_A_BITSET_MASK={0x7f, 0x5, "a7c616af0bcec83a9aa0ce8cfa950d298ce437deb48f37c754b6c1567fa049c2fec5bd74b975178270064239af52c6e990decc9247e8a9200c058038151145d837c7ab275b5ddf53d9e53532d311d97212db05a4d8a451e68bf77fa58daa755b920c189355a212c6073fe393a0d2cc282438b8b14d64c0980810a8"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x401}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x1b4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xc0, 0x5, "d71fff1627537e31559468cf6c249c36b8fbac2ccedca91f26aebc10df43bb629341a3eb572143841493e443d50bdac2c7e4382dbb52453a3a79a49fa6e22be00e9e28c90c2bba72fa9d778d3ba8333df76471ec9af68b8bd06e1b5e2ff57d237d68e1d2c42a0ec9d80134e5f54d60835060b9ab899d917b04c5767aadc87f41183da5d843f4a8fc2ea4ef9dab44c2d662eaf3c6dc3a51e4712e2a967ccb04fa3c1727787d70caae488014904d5cd3da8b6987421a7fead57b41baee"}, @ETHTOOL_A_BITSET_MASK={0xed, 0x5, "c896e4d4857d995c034fcd5ede02690da8eacc6bffb2a1015a0469799e60600d39945c25b64a77d4dc82c5412c6382a40b798fae12e08a9a0c51550e9638763e01794d51cc696c12a95820778a6f98dcc3d7ba793a0929d439f57ae27f2f42d18e01cfe0a2b05e09425ce3ab6ce09a4bf2f05018b94c94bd83d62f309275de23d14e7e16462eb0e98c473505392cc4732cc2c19e105bfd1835b17129ef8db4f22b4f0131a83d261b479d999edad32afd918ec1a2fc6d3a7d18c3de201a1dfcfb2a4a95a335c2ee9eb497cedc7af6265040675d9c5300a47f94e93fe3b5a14395213dfc57d555a7bb6d"}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_FEATURES_WANTED={0x134, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_BITS={0xa0, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '%%-]^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb715}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'team0\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x91}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'team0\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd4f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x86, 0x5, "a55ed341bcba2e6f457f1024b26f140567348a508f373de6153a1a17648e1eb518618a813ba747d880d240727e081e6b3ad9e2502a6e987606c9ab1709f9e023df05c4e9f72f2c3c6a724be40ca54e6f2fc3be8798ce80b51d5b65e061226f38773cff2b0e8566ddee57fd183a6392b84434e512198dca9d45034e77fb7954e61f74"}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0xc4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xba, 0x5, "c1f55caa0d5f75a7cfb50b175fa23116ee835df526d8ac39b196bcea146c2e0abf6466eb133809a55e2975a167079b8228d9513a27f234b2bf91e1afeb4502e84ad559bebd2fa4ae2cfe4eb7a447499a533d8ff7996bba9164e22b8112fce99433b1d7f09c3494b4e4a7bc307f91ad4227f356322436c24bbd0588b1f965a3c8c7fca35098706257615b916cbc70b786614cddc87f22726019575ee84558a264f2ef2c6ebb7272b599fd16aa8bdb10d35f859c6d484b"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 06:17:20 executing program 4: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1918.825300][T29996] __nla_validate_parse: 7 callbacks suppressed [ 1918.825371][T29996] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:17:20 executing program 5: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1919.070364][T29996] bond368: entered promiscuous mode [ 1919.076090][T29996] bond368: entered allmulticast mode [ 1919.082552][T29996] 8021q: adding VLAN 0 to HW filter on device bond368 06:17:21 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000ac020000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1919.160747][T30003] team0: entered promiscuous mode [ 1919.167564][T30003] team_slave_0: entered promiscuous mode 06:17:21 executing program 3: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1919.510095][T30007] team0: left promiscuous mode [ 1919.515439][T30007] team_slave_0: left promiscuous mode 06:17:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r3 = socket(0x29, 0x800, 0x7) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') lseek(r4, 0x8, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000007c0)={'ip_vti0\x00', &(0x7f0000000700)={'syztnl0\x00', r2, 0x20, 0x1, 0xacb8, 0x0, {{0x1a, 0x4, 0x2, 0x4, 0x68, 0x67, 0x0, 0x9, 0x29, 0x0, @rand_addr=0x64010102, @remote, {[@timestamp={0x44, 0x10, 0x73, 0x0, 0x2, [0x2, 0x5, 0x2]}, @ssrr={0x89, 0x27, 0xba, [@loopback, @rand_addr=0x64010101, @loopback, @empty, @multicast1, @local, @multicast1, @local, @private=0xa010100]}, @noop, @timestamp_addr={0x44, 0xc, 0xba, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x39}, 0x9}]}, @rr={0x7, 0xb, 0xa5, [@broadcast, @rand_addr=0x64010100]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000880)={'ip6_vti0\x00', &(0x7f0000000800)={'syztnl1\x00', r2, 0x2f, 0x20, 0x81, 0x3, 0x19, @empty, @loopback, 0x78a7, 0x8000, 0xfffffffa, 0x7}}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000ac0)={&(0x7f00000006c0), 0xc, &(0x7f0000000a80)={&(0x7f00000008c0)={0x1a8, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r5}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}]}}, {{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x1a8}}, 0x4000) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000180), r7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x244, r9, 0x300, 0x70bd2a, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x228, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x0, 0x3, 0xcf, 0xfffffffe}, {0x5, 0x7, 0x3, 0x8d6}, {0x100, 0x4, 0x4}, {0x4, 0x0, 0x8, 0xab}, {0x4049, 0x9, 0x80, 0x7}, {0x1, 0x6, 0x4e, 0x9}, {0xe194, 0x40, 0x25, 0x8}, {0x2, 0x1, 0x0, 0x4}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x67e6}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x1, 0x1, 0x80}]}}}]}}]}, 0x244}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r12 = dup(r8) getsockname$packet(r12, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x4c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0xdd860600, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x8, 0x1, 0x0, 0x1, [{0xc}, {0x8}, {0x1b}, {0x8}, {0x8}]}}, @AF_INET={0x29, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x10, 0xd}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) 06:17:21 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000030000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:17:22 executing program 4: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:22 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x0, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:17:22 executing program 5: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1920.344687][T30018] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1920.354369][T30018] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1920.364097][T30018] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1920.373715][T30018] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1920.477017][T30020] team0: entered promiscuous mode [ 1920.482416][T30020] team_slave_0: entered promiscuous mode 06:17:22 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000002e030000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1920.593999][T30017] team0: left promiscuous mode [ 1920.599130][T30017] team_slave_0: left promiscuous mode [ 1920.935259][T30027] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 06:17:23 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r3 = socket(0x29, 0x800, 0x7) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') lseek(r4, 0x8, 0x0) (async) lseek(r4, 0x8, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000007c0)={'ip_vti0\x00', &(0x7f0000000700)={'syztnl0\x00', r2, 0x20, 0x1, 0xacb8, 0x0, {{0x1a, 0x4, 0x2, 0x4, 0x68, 0x67, 0x0, 0x9, 0x29, 0x0, @rand_addr=0x64010102, @remote, {[@timestamp={0x44, 0x10, 0x73, 0x0, 0x2, [0x2, 0x5, 0x2]}, @ssrr={0x89, 0x27, 0xba, [@loopback, @rand_addr=0x64010101, @loopback, @empty, @multicast1, @local, @multicast1, @local, @private=0xa010100]}, @noop, @timestamp_addr={0x44, 0xc, 0xba, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x39}, 0x9}]}, @rr={0x7, 0xb, 0xa5, [@broadcast, @rand_addr=0x64010100]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000007c0)={'ip_vti0\x00', &(0x7f0000000700)={'syztnl0\x00', r2, 0x20, 0x1, 0xacb8, 0x0, {{0x1a, 0x4, 0x2, 0x4, 0x68, 0x67, 0x0, 0x9, 0x29, 0x0, @rand_addr=0x64010102, @remote, {[@timestamp={0x44, 0x10, 0x73, 0x0, 0x2, [0x2, 0x5, 0x2]}, @ssrr={0x89, 0x27, 0xba, [@loopback, @rand_addr=0x64010101, @loopback, @empty, @multicast1, @local, @multicast1, @local, @private=0xa010100]}, @noop, @timestamp_addr={0x44, 0xc, 0xba, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x39}, 0x9}]}, @rr={0x7, 0xb, 0xa5, [@broadcast, @rand_addr=0x64010100]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000880)={'ip6_vti0\x00', &(0x7f0000000800)={'syztnl1\x00', r2, 0x2f, 0x20, 0x81, 0x3, 0x19, @empty, @loopback, 0x78a7, 0x8000, 0xfffffffa, 0x7}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000880)={'ip6_vti0\x00', &(0x7f0000000800)={'syztnl1\x00', r2, 0x2f, 0x20, 0x81, 0x3, 0x19, @empty, @loopback, 0x78a7, 0x8000, 0xfffffffa, 0x7}}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000ac0)={&(0x7f00000006c0), 0xc, &(0x7f0000000a80)={&(0x7f00000008c0)={0x1a8, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r5}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}]}}, {{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x1a8}}, 0x4000) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000180), r7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x244, r9, 0x300, 0x70bd2a, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x228, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x0, 0x3, 0xcf, 0xfffffffe}, {0x5, 0x7, 0x3, 0x8d6}, {0x100, 0x4, 0x4}, {0x4, 0x0, 0x8, 0xab}, {0x4049, 0x9, 0x80, 0x7}, {0x1, 0x6, 0x4e, 0x9}, {0xe194, 0x40, 0x25, 0x8}, {0x2, 0x1, 0x0, 0x4}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x67e6}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x1, 0x1, 0x80}]}}}]}}]}, 0x244}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r12 = dup(r8) getsockname$packet(r12, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x4c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0xdd860600, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x8, 0x1, 0x0, 0x1, [{0xc}, {0x8}, {0x1b}, {0x8}, {0x8}]}}, @AF_INET={0x29, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x10, 0xd}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) 06:17:23 executing program 4: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1921.175710][T30027] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:17:23 executing program 3: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:23 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000050000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1921.333536][T30027] bond369: entered promiscuous mode [ 1921.339028][T30027] bond369: entered allmulticast mode [ 1921.345831][T30027] 8021q: adding VLAN 0 to HW filter on device bond369 06:17:23 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000060000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:17:23 executing program 5: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1921.627989][T30037] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1921.638038][T30037] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1921.648638][T30037] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1921.661248][T30037] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.0'. 06:17:23 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x0, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) [ 1921.943753][T30039] team0: entered promiscuous mode [ 1921.949137][T30039] team_slave_0: entered promiscuous mode [ 1922.118848][T30035] team0: left promiscuous mode [ 1922.124335][T30035] team_slave_0: left promiscuous mode 06:17:24 executing program 4: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:24 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000070000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:17:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) (async) r3 = socket(0x29, 0x800, 0x7) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') lseek(r4, 0x8, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000007c0)={'ip_vti0\x00', &(0x7f0000000700)={'syztnl0\x00', r2, 0x20, 0x1, 0xacb8, 0x0, {{0x1a, 0x4, 0x2, 0x4, 0x68, 0x67, 0x0, 0x9, 0x29, 0x0, @rand_addr=0x64010102, @remote, {[@timestamp={0x44, 0x10, 0x73, 0x0, 0x2, [0x2, 0x5, 0x2]}, @ssrr={0x89, 0x27, 0xba, [@loopback, @rand_addr=0x64010101, @loopback, @empty, @multicast1, @local, @multicast1, @local, @private=0xa010100]}, @noop, @timestamp_addr={0x44, 0xc, 0xba, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x39}, 0x9}]}, @rr={0x7, 0xb, 0xa5, [@broadcast, @rand_addr=0x64010100]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000880)={'ip6_vti0\x00', &(0x7f0000000800)={'syztnl1\x00', r2, 0x2f, 0x20, 0x81, 0x3, 0x19, @empty, @loopback, 0x78a7, 0x8000, 0xfffffffa, 0x7}}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000ac0)={&(0x7f00000006c0), 0xc, &(0x7f0000000a80)={&(0x7f00000008c0)={0x1a8, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r5}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}]}}, {{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x1a8}}, 0x4000) (async) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000180), r7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x244, r9, 0x300, 0x70bd2a, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x228, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x0, 0x3, 0xcf, 0xfffffffe}, {0x5, 0x7, 0x3, 0x8d6}, {0x100, 0x4, 0x4}, {0x4, 0x0, 0x8, 0xab}, {0x4049, 0x9, 0x80, 0x7}, {0x1, 0x6, 0x4e, 0x9}, {0xe194, 0x40, 0x25, 0x8}, {0x2, 0x1, 0x0, 0x4}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x67e6}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1000, 0x1, 0x1, 0x80}]}}}]}}]}, 0x244}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) r12 = dup(r8) getsockname$packet(r12, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x4c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) (async) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0xdd860600, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x8, 0x1, 0x0, 0x1, [{0xc}, {0x8}, {0x1b}, {0x8}, {0x8}]}}, @AF_INET={0x29, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x10, 0xd}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) [ 1922.466286][T30052] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 06:17:24 executing program 3: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:25 executing program 5: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1922.905293][T30052] bond370: entered promiscuous mode [ 1922.910775][T30052] bond370: entered allmulticast mode [ 1922.917432][T30052] 8021q: adding VLAN 0 to HW filter on device bond370 06:17:25 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000a0000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:17:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @multicast}, 0x10) socket(0x21, 0x5, 0x8000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000040)=0x7aa, 0x4) 06:17:25 executing program 4: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:25 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="380000001214010000000000000000000900070073797a300000000008004100727865001400330073797a6b616c6c6572300000000000005c118b3027f6131fbd7929f1f4f5f70a3d9c3eca33f1b65b4b65b7ecf93c02af7ed50848827135bdfa2486bd268ab091d975a3f8248f7cf67312c6a604221f79fc1ef5a50c179a273d67c3eb09c36ed60479cef9d90d00710b71bc9a7d4df5af8cc1b55cd7ab2792691cd433c74c686a053653a4bfb9dc6d84dbc89c11ba4f1e900a87725459fbc88d0660adee046d31b1f4e2fbed48cd6da8275a227e4a09ed7a24f7e1ea795c03fe2b24159afd32d52055711a872197279b8bb32b2803940c11c639a272fcbb7569120aad095d4ac5f09302fdb659f5328c454abc715f27759ce44cbe10e7cd903ba3eb17dac63d2ed7722093f5bbf2ff9a3e4d91cb39ec57c0ba40d5fefab2e9828ac581757efe5d7c02586af9159b4e655e1427486b109909c780db9c"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:17:25 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000f0000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1923.961116][T30075] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 1924.222161][T30075] __nla_validate_parse: 1 callbacks suppressed [ 1924.222238][T30075] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:17:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @multicast}, 0x10) (async) socket(0x21, 0x5, 0x8000) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000040)=0x7aa, 0x4) [ 1924.385788][T30075] bond371: entered promiscuous mode [ 1924.391262][T30075] bond371: entered allmulticast mode [ 1924.398662][T30075] 8021q: adding VLAN 0 to HW filter on device bond371 06:17:26 executing program 5: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:26 executing program 4: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:26 executing program 3: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:26 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000120000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:17:27 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:17:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @multicast}, 0x10) socket(0x21, 0x5, 0x8000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000040)=0x7aa, 0x4) 06:17:27 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000170000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:17:27 executing program 4: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1925.687555][T30100] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 06:17:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000140)={0x0, "09991516044d53f91f7053adcf9cb3eb"}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000001140)={r3, 0x3f, 0x1}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) [ 1925.808196][T30103] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1925.924105][T30103] bond372: entered promiscuous mode [ 1925.929587][T30103] bond372: entered allmulticast mode [ 1925.936441][T30103] 8021q: adding VLAN 0 to HW filter on device bond372 06:17:28 executing program 5: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:28 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000180000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:17:28 executing program 3: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:28 executing program 4: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1926.413987][T30111] team0: entered promiscuous mode [ 1926.419280][T30111] team_slave_0: entered promiscuous mode [ 1926.524927][T30110] team0: left promiscuous mode [ 1926.529970][T30110] team_slave_0: left promiscuous mode 06:17:28 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:17:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000140)={0x0, "09991516044d53f91f7053adcf9cb3eb"}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000001140)={r3, 0x3f, 0x1}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) 06:17:29 executing program 4: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:29 executing program 5: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:29 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000001f0000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1927.215600][T30124] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 1927.264441][T30125] team0: entered promiscuous mode [ 1927.269748][T30125] team_slave_0: entered promiscuous mode 06:17:29 executing program 3: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1927.365024][T30123] team0: left promiscuous mode [ 1927.370164][T30123] team_slave_0: left promiscuous mode [ 1927.461248][T30124] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:17:29 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000140)={0x0, "09991516044d53f91f7053adcf9cb3eb"}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000001140)={r3, 0x3f, 0x1}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) 06:17:29 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000200000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1927.965063][T30124] bond373: entered promiscuous mode [ 1927.970537][T30124] bond373: entered allmulticast mode [ 1927.977270][T30124] 8021q: adding VLAN 0 to HW filter on device bond373 06:17:30 executing program 4: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:30 executing program 5: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1928.127104][T30142] team0: entered promiscuous mode [ 1928.132474][T30142] team_slave_0: entered promiscuous mode 06:17:30 executing program 3: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1928.214024][T30140] team0: left promiscuous mode [ 1928.219409][T30140] team_slave_0: left promiscuous mode 06:17:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') lseek(r2, 0x8, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r2, 0x89e4) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xdd860600, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x8, 0x1, 0x0, 0x1, [{0xc}, {0x8}, {0x1b}, {0x8}, {0x8}]}}, @AF_INET={0x29, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x10, 0xd}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x6, @multicast}, 0x10) 06:17:30 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x40, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:17:30 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000002b0000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:17:30 executing program 4: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1928.957755][T30157] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 1928.990793][T30158] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1929.000720][T30158] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1929.010927][T30158] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1929.020654][T30158] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1929.058019][T30163] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:17:31 executing program 5: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:31 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000032e0000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1929.279478][T30163] bond374: entered promiscuous mode [ 1929.285083][T30163] bond374: entered allmulticast mode [ 1929.291589][T30163] 8021q: adding VLAN 0 to HW filter on device bond374 06:17:31 executing program 3: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:31 executing program 4: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') lseek(r2, 0x8, 0x0) (async) ioctl$sock_rose_SIOCRSCLRRT(r2, 0x89e4) (async) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xdd860600, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x8, 0x1, 0x0, 0x1, [{0xc}, {0x8}, {0x1b}, {0x8}, {0x8}]}}, @AF_INET={0x29, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x10, 0xd}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x6, @multicast}, 0x10) 06:17:32 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x40, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:17:32 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000003c0000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1930.040234][T30179] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1930.051119][T30179] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1930.060868][T30179] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1930.070529][T30179] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.0'. 06:17:32 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:32 executing program 3: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:32 executing program 5: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') lseek(r2, 0x8, 0x0) (async) ioctl$sock_rose_SIOCRSCLRRT(r2, 0x89e4) r3 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xdd860600, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x8, 0x1, 0x0, 0x1, [{0xc}, {0x8}, {0x1b}, {0x8}, {0x8}]}}, @AF_INET={0x29, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x10, 0xd}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x6, @multicast}, 0x10) [ 1930.496176][T30185] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 06:17:32 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000003f0000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1930.651306][T30190] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1930.968660][T30190] bond375: entered promiscuous mode [ 1930.984950][T30190] bond375: entered allmulticast mode [ 1930.991528][T30190] 8021q: adding VLAN 0 to HW filter on device bond375 [ 1931.038792][T30198] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1931.048838][T30198] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1931.058580][T30198] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1931.068239][T30198] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.0'. 06:17:33 executing program 5: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:33 executing program 3: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000000)) 06:17:33 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:33 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x40, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:17:33 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000400000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:17:34 executing program 5: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1931.948152][T30216] team0: entered promiscuous mode [ 1931.953809][T30216] team_slave_0: entered promiscuous mode [ 1931.979337][T30215] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 1932.046485][T30212] team0: left promiscuous mode [ 1932.051681][T30212] team_slave_0: left promiscuous mode [ 1932.111551][T30221] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:17:34 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000ff600000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1932.277174][T30221] bond376: entered promiscuous mode [ 1932.282830][T30221] bond376: entered allmulticast mode [ 1932.289336][T30221] 8021q: adding VLAN 0 to HW filter on device bond376 06:17:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) (async) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000000)) 06:17:34 executing program 3: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:34 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:34 executing program 5: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1932.836145][T30232] team0: entered promiscuous mode [ 1932.841598][T30232] team_slave_0: entered promiscuous mode 06:17:35 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="380000001214010000000000000000000900070073797a300000000008004100727865001400330073797a6b616c6c6572300000000000005c118b3027f6131fbd7929f1f4f5f70a3d9c3eca33f1b65b4b65b7ecf93c02af7ed50848827135bdfa2486bd268ab091d975a3f8248f7cf67312c6a604221f79fc1ef5a50c179a273d67c3eb09c36ed60479cef9d90d00710b71bc9a7d4df5af8cc1b55cd7ab2792691cd433c74c686a053653a4bfb9dc6d84dbc89c11ba4f1e900a87725459fbc88d0660adee046d31b1f4e2fbed48cd6da8275a227e4a09ed7a24f7e1ea795c03fe2b24159afd32d52055711a872197279b8bb32b2803940c11c639a272fcbb7569120aad095d4ac5f09302fdb659f5328c454abc715f27759ce44cbe10e7cd903ba3eb17dac63d2ed7722093f5bbf2ff9a3e4d91cb39ec57c0ba40d5fefab2e9828ac581757efe5d7c02586af9159b4e655e1427486b109909c780db9c"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x44, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x4}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) [ 1932.926860][T30230] team0: left promiscuous mode [ 1932.931949][T30230] team_slave_0: left promiscuous mode 06:17:35 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000610000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:17:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) (rerun: 32) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000000)) 06:17:35 executing program 3: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:35 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:35 executing program 5: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1933.455517][T30241] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 06:17:35 executing program 4: r0 = syz_io_uring_setup(0x2c3, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1933.647488][T30247] bond377: entered promiscuous mode [ 1933.653102][T30247] bond377: entered allmulticast mode [ 1933.659640][T30247] 8021q: adding VLAN 0 to HW filter on device bond377 06:17:35 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000620000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1933.813261][T30246] team0: entered promiscuous mode [ 1933.818562][T30246] team_slave_0: entered promiscuous mode [ 1933.879791][T30243] team0: left promiscuous mode [ 1933.885307][T30243] team_slave_0: left promiscuous mode 06:17:36 executing program 3: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:36 executing program 5: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:36 executing program 4: r0 = syz_io_uring_setup(0x2c3, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') lseek(r3, 0x8, 0x0) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) 06:17:36 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x44, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x4}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:17:36 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000630000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:17:36 executing program 4: r0 = syz_io_uring_setup(0x2c3, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:36 executing program 3: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:36 executing program 5: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1934.811595][T30272] team0: entered promiscuous mode [ 1934.817446][T30272] team_slave_0: entered promiscuous mode [ 1934.888795][T30274] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 06:17:37 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000002680000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1934.940520][T30269] team0: left promiscuous mode [ 1934.946257][T30269] team_slave_0: left promiscuous mode [ 1935.064195][T30274] __nla_validate_parse: 1 callbacks suppressed [ 1935.064267][T30274] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:17:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') lseek(r3, 0x8, 0x0) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) [ 1935.161415][T30274] bond378: entered promiscuous mode [ 1935.167178][T30274] bond378: entered allmulticast mode [ 1935.180836][T30274] 8021q: adding VLAN 0 to HW filter on device bond378 06:17:37 executing program 5: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:37 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:37 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000690000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:17:37 executing program 3: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:37 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x44, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x4}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) [ 1935.739124][T30289] team0: entered promiscuous mode [ 1935.745110][T30289] team_slave_0: entered promiscuous mode [ 1935.848215][T30288] team0: left promiscuous mode [ 1935.853405][T30288] team_slave_0: left promiscuous mode 06:17:38 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000006a0000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:17:38 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:38 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') lseek(r3, 0x8, 0x0) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) 06:17:38 executing program 3: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1936.328025][T30301] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 1936.493885][T30306] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1936.749379][T30306] bond379: entered promiscuous mode [ 1936.754962][T30306] bond379: entered allmulticast mode [ 1936.761416][T30306] 8021q: adding VLAN 0 to HW filter on device bond379 06:17:38 executing program 3: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:38 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000006b0000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:17:38 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1936.870057][T30315] team0: entered promiscuous mode [ 1936.875764][T30315] team_slave_0: entered promiscuous mode [ 1936.965648][T30312] team0: left promiscuous mode [ 1936.970769][T30312] team_slave_0: left promiscuous mode 06:17:39 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:39 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x68, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x26, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890a"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x68}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:17:39 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) lseek(r1, 0x2, 0x0) 06:17:39 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000710000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:17:39 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1937.817212][T30327] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 1937.916976][T30329] team0: entered promiscuous mode [ 1937.922274][T30329] team_slave_0: entered promiscuous mode [ 1937.934862][T30331] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:17:40 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1938.092885][T30331] bond380: entered promiscuous mode [ 1938.098353][T30331] bond380: entered allmulticast mode [ 1938.105096][T30331] 8021q: adding VLAN 0 to HW filter on device bond380 06:17:40 executing program 3: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:40 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000720000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1938.268090][T30326] team0: left promiscuous mode [ 1938.273601][T30326] team_slave_0: left promiscuous mode [ 1938.347111][ T1191] ieee802154 phy0 wpan0: encryption failed: -22 [ 1938.353893][ T1191] ieee802154 phy1 wpan1: encryption failed: -22 06:17:40 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:40 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) lseek(r1, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) (async) lseek(r1, 0x2, 0x0) (async) 06:17:40 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x68, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x26, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890a"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x68}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:17:40 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:41 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000730000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1939.015429][T30348] team0: entered promiscuous mode [ 1939.020913][T30348] team_slave_0: entered promiscuous mode 06:17:41 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1939.357148][T30355] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 1939.428866][T30349] team0: left promiscuous mode [ 1939.434364][T30349] team_slave_0: left promiscuous mode 06:17:41 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) lseek(r1, 0x2, 0x0) 06:17:41 executing program 3: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1939.577949][T30361] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:17:41 executing program 5: r0 = syz_io_uring_setup(0x2c3, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:41 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000790000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1939.866155][T30361] bond381: entered promiscuous mode [ 1939.871689][T30361] bond381: entered allmulticast mode [ 1939.878370][T30361] 8021q: adding VLAN 0 to HW filter on device bond381 06:17:42 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1939.993077][T30367] team0: entered promiscuous mode [ 1939.998472][T30367] team_slave_0: entered promiscuous mode [ 1940.070025][T30366] team0: left promiscuous mode [ 1940.075521][T30366] team_slave_0: left promiscuous mode 06:17:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb) dup(r0) 06:17:42 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000007a0000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:17:42 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x68, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x26, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890a"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x68}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:17:42 executing program 5: r0 = syz_io_uring_setup(0x2c3, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:42 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:43 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000007b0000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1940.994794][T30386] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 1941.031445][T30387] team0: entered promiscuous mode [ 1941.037403][T30387] team_slave_0: entered promiscuous mode 06:17:43 executing program 5: r0 = syz_io_uring_setup(0x2c3, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:43 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1941.256032][T30388] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1941.444021][T30388] bond382: entered promiscuous mode [ 1941.449504][T30388] bond382: entered allmulticast mode [ 1941.456237][T30388] 8021q: adding VLAN 0 to HW filter on device bond382 06:17:43 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:43 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000002ac0000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:17:43 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1941.831629][T30384] team0: left promiscuous mode [ 1941.836991][T30384] team_slave_0: left promiscuous mode 06:17:43 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb) dup(r0) 06:17:44 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x78, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x37, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x78}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:17:44 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000e00000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:17:44 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:44 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1942.538716][T30415] team0: entered promiscuous mode [ 1942.550743][T30415] team_slave_0: entered promiscuous mode [ 1942.572395][T30417] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 06:17:44 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1942.751930][T30419] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1942.896854][T30419] bond383: entered promiscuous mode [ 1942.902330][T30419] bond383: entered allmulticast mode [ 1942.909107][T30419] 8021q: adding VLAN 0 to HW filter on device bond383 06:17:45 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000f10000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:17:45 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:45 executing program 3: r0 = syz_io_uring_setup(0x2c3, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1943.348266][T30413] team0: left promiscuous mode [ 1943.353402][T30413] team_slave_0: left promiscuous mode 06:17:45 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="380000001214010000000000000000000900070073797a300000000008004100727865001400330073797a6b616c6c6572300000000000005c118b3027f6131fbd7929f1f4f5f70a3d9c3eca33f1b65b4b65b7ecf93c02af7ed50848827135bdfa2486bd268ab091d975a3f8248f7cf67312c6a604221f79fc1ef5a50c179a273d67c3eb09c36ed60479cef9d90d00710b71bc9a7d4df5af8cc1b55cd7ab2792691cd433c74c686a053653a4bfb9dc6d84dbc89c11ba4f1e900a87725459fbc88d0660adee046d31b1f4e2fbed48cd6da8275a227e4a09ed7a24f7e1ea795c03fe2b24159afd32d52055711a872197279b8bb32b2803940c11c639a272fcbb7569120aad095d4ac5f09302fdb659f5328c454abc715f27759ce44cbe10e7cd903ba3eb17dac63d2ed7722093f5bbf2ff9a3e4d91cb39ec57c0ba40d5fefab2e9828ac581757efe5d7c02586af9159b4e655e1427486b109909c780db9c"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x78, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x37, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x78}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:17:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb) (async, rerun: 64) dup(r0) (rerun: 64) 06:17:45 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000ff0000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:17:46 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:46 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:46 executing program 3: r0 = syz_io_uring_setup(0x2c3, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1944.327595][T30444] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 1944.328061][T30445] team0: entered promiscuous mode [ 1944.341337][T30445] team_slave_0: entered promiscuous mode [ 1944.530573][T30451] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:17:46 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000400000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1944.684819][T30451] bond384: entered promiscuous mode [ 1944.690298][T30451] bond384: entered allmulticast mode [ 1944.697011][T30451] 8021q: adding VLAN 0 to HW filter on device bond384 06:17:46 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:46 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000001000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:17:46 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1945.112490][T30442] team0: left promiscuous mode [ 1945.117858][T30442] team_slave_0: left promiscuous mode 06:17:47 executing program 3: r0 = syz_io_uring_setup(0x2c3, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:47 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="380000001214010000000000000000000900070073797a300000000008004100727865001400330073797a6b616c6c6572300000000000005c118b3027f6131fbd7929f1f4f5f70a3d9c3eca33f1b65b4b65b7ecf93c02af7ed50848827135bdfa2486bd268ab091d975a3f8248f7cf67312c6a604221f79fc1ef5a50c179a273d67c3eb09c36ed60479cef9d90d00710b71bc9a7d4df5af8cc1b55cd7ab2792691cd433c74c686a053653a4bfb9dc6d84dbc89c11ba4f1e900a87725459fbc88d0660adee046d31b1f4e2fbed48cd6da8275a227e4a09ed7a24f7e1ea795c03fe2b24159afd32d52055711a872197279b8bb32b2803940c11c639a272fcbb7569120aad095d4ac5f09302fdb659f5328c454abc715f27759ce44cbe10e7cd903ba3eb17dac63d2ed7722093f5bbf2ff9a3e4d91cb39ec57c0ba40d5fefab2e9828ac581757efe5d7c02586af9159b4e655e1427486b109909c780db9c"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x78, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x37, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x78}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:17:47 executing program 0: inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x290) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000040)=0x9, 0x4) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) 06:17:47 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000004cd41100000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:17:47 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:47 executing program 3: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1945.818295][T30477] team0: entered promiscuous mode [ 1945.829363][T30477] team_slave_0: entered promiscuous mode [ 1945.831000][T30475] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 1945.919097][T30474] team0: left promiscuous mode [ 1945.930142][T30474] team_slave_0: left promiscuous mode 06:17:48 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000aad31a00000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1945.970202][T30475] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:17:48 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1946.132409][T30475] bond385: entered promiscuous mode [ 1946.138111][T30475] bond385: entered allmulticast mode [ 1946.144817][T30475] 8021q: adding VLAN 0 to HW filter on device bond385 06:17:48 executing program 0: inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x290) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000040)=0x9, 0x4) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) 06:17:48 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:48 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000601d00000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:17:48 executing program 3: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1946.740116][T30494] team0: entered promiscuous mode [ 1946.751161][T30494] team_slave_0: entered promiscuous mode 06:17:48 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="380000001214010000000000000000000900070073797a300000000008004100727865001400330073797a6b616c6c6572300000000000005c118b3027f6131fbd7929f1f4f5f70a3d9c3eca33f1b65b4b65b7ecf93c02af7ed50848827135bdfa2486bd268ab091d975a3f8248f7cf67312c6a604221f79fc1ef5a50c179a273d67c3eb09c36ed60479cef9d90d00710b71bc9a7d4df5af8cc1b55cd7ab2792691cd433c74c686a053653a4bfb9dc6d84dbc89c11ba4f1e900a87725459fbc88d0660adee046d31b1f4e2fbed48cd6da8275a227e4a09ed7a24f7e1ea795c03fe2b24159afd32d52055711a872197279b8bb32b2803940c11c639a272fcbb7569120aad095d4ac5f09302fdb659f5328c454abc715f27759ce44cbe10e7cd903ba3eb17dac63d2ed7722093f5bbf2ff9a3e4d91cb39ec57c0ba40d5fefab2e9828ac581757efe5d7c02586af9159b4e655e1427486b109909c780db9c"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x80, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x40, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d0200"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x80}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) [ 1946.843969][T30492] team0: left promiscuous mode [ 1946.851783][T30492] team_slave_0: left promiscuous mode 06:17:49 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:49 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:49 executing program 0: inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x290) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000040)=0x9, 0x4) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) 06:17:49 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000002000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1947.313954][T30504] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 06:17:49 executing program 3: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1947.534149][T30507] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1947.745041][T30507] bond386: entered promiscuous mode [ 1947.750533][T30507] bond386: entered allmulticast mode [ 1947.757217][T30507] 8021q: adding VLAN 0 to HW filter on device bond386 06:17:49 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1947.793044][T30516] team0: entered promiscuous mode [ 1947.798329][T30516] team_slave_0: entered promiscuous mode [ 1947.850507][T30511] team0: left promiscuous mode [ 1947.855828][T30511] team_slave_0: left promiscuous mode 06:17:49 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:50 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000004000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:17:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x4e21, @broadcast}}, 0x0, 0x0, 0x45, 0x0, "bc0b04ae8c42b7dfab8a57092fa7b78f6b17122cb09a125b0cd30286b30925a880591b12f1ae6e74281ae11aab1296293cf07b01db5ec0c4865c3e0bbb15bcb3d9fe72fd5ac44f742867a8c43ff361a7"}, 0xd8) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x7, 0x7}, 0x4) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) 06:17:50 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="380000001214010000000000000000000900070073797a300000000008004100727865001400330073797a6b616c6c6572300000000000005c118b3027f6131fbd7929f1f4f5f70a3d9c3eca33f1b65b4b65b7ecf93c02af7ed50848827135bdfa2486bd268ab091d975a3f8248f7cf67312c6a604221f79fc1ef5a50c179a273d67c3eb09c36ed60479cef9d90d00710b71bc9a7d4df5af8cc1b55cd7ab2792691cd433c74c686a053653a4bfb9dc6d84dbc89c11ba4f1e900a87725459fbc88d0660adee046d31b1f4e2fbed48cd6da8275a227e4a09ed7a24f7e1ea795c03fe2b24159afd32d52055711a872197279b8bb32b2803940c11c639a272fcbb7569120aad095d4ac5f09302fdb659f5328c454abc715f27759ce44cbe10e7cd903ba3eb17dac63d2ed7722093f5bbf2ff9a3e4d91cb39ec57c0ba40d5fefab2e9828ac581757efe5d7c02586af9159b4e655e1427486b109909c780db9c"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x80, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x40, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d0200"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x80}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:17:50 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:50 executing program 3: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:50 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1948.644981][T30531] team0: entered promiscuous mode [ 1948.650419][T30531] team_slave_0: entered promiscuous mode 06:17:50 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000001d6000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1948.731183][T30529] team0: left promiscuous mode [ 1948.737528][T30529] team_slave_0: left promiscuous mode 06:17:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x4e21, @broadcast}}, 0x0, 0x0, 0x45, 0x0, "bc0b04ae8c42b7dfab8a57092fa7b78f6b17122cb09a125b0cd30286b30925a880591b12f1ae6e74281ae11aab1296293cf07b01db5ec0c4865c3e0bbb15bcb3d9fe72fd5ac44f742867a8c43ff361a7"}, 0xd8) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x7, 0x7}, 0x4) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) [ 1948.956418][T30538] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 1949.149860][T30543] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:17:51 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:51 executing program 3: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1949.421509][T30543] bond387: entered promiscuous mode [ 1949.427208][T30543] bond387: entered allmulticast mode [ 1949.433916][T30543] 8021q: adding VLAN 0 to HW filter on device bond387 06:17:51 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000008000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:17:51 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1949.544327][T30550] team0: entered promiscuous mode [ 1949.549960][T30550] team_slave_0: entered promiscuous mode [ 1949.584771][T30547] team0: left promiscuous mode [ 1949.589931][T30547] team_slave_0: left promiscuous mode 06:17:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x4e21, @broadcast}}, 0x0, 0x0, 0x45, 0x0, "bc0b04ae8c42b7dfab8a57092fa7b78f6b17122cb09a125b0cd30286b30925a880591b12f1ae6e74281ae11aab1296293cf07b01db5ec0c4865c3e0bbb15bcb3d9fe72fd5ac44f742867a8c43ff361a7"}, 0xd8) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x7, 0x7}, 0x4) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x4e21, @broadcast}}, 0x0, 0x0, 0x45, 0x0, "bc0b04ae8c42b7dfab8a57092fa7b78f6b17122cb09a125b0cd30286b30925a880591b12f1ae6e74281ae11aab1296293cf07b01db5ec0c4865c3e0bbb15bcb3d9fe72fd5ac44f742867a8c43ff361a7"}, 0xd8) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) (async) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x7, 0x7}, 0x4) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) (async) 06:17:52 executing program 3: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:52 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000ffff8000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:17:52 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x80, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x40, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d0200"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x80}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:17:52 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1950.231763][T30563] team0: entered promiscuous mode [ 1950.238009][T30563] team_slave_0: entered promiscuous mode 06:17:52 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000e000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1950.571475][T30562] team0: left promiscuous mode [ 1950.577898][T30562] team_slave_0: left promiscuous mode 06:17:52 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r3 = openat$vcsu(0xffffff9c, &(0x7f0000000300), 0x8b0600, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x54276faf}}, './file0\x00'}) r5 = openat$vcsa(0xffffff9c, &(0x7f00000001c0), 0x400, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r4, &(0x7f0000000140)="62325d5325ad8da5315e42592af119dff830582aa394f7fc24c1fe94304993d885400fa990863c1c417f17828d882d2a3a4e08fba2a44efd510f50231d7f13dbc5df35865fb22e5a963e84cb857887a06f9749e55ab7fd7e6a9f94b9fd0c44cf9f", &(0x7f0000000200)=@tcp=r5, 0x1}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') lseek(r6, 0x8, 0x0) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') lseek(r7, 0x8, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10}, 0x20) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={r10, 0xfffffff8}, &(0x7f00000002c0)=0x8) 06:17:52 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:52 executing program 3: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1950.866433][T30575] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 06:17:53 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1951.006926][T30578] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1951.180149][T30578] bond388: entered promiscuous mode [ 1951.186185][T30578] bond388: entered allmulticast mode [ 1951.192897][T30578] 8021q: adding VLAN 0 to HW filter on device bond388 06:17:53 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000001000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1951.221861][T30584] team0: entered promiscuous mode [ 1951.227427][T30584] team_slave_0: entered promiscuous mode [ 1951.390941][T30579] team0: left promiscuous mode [ 1951.396579][T30579] team_slave_0: left promiscuous mode 06:17:53 executing program 3: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r3 = openat$vcsu(0xffffff9c, &(0x7f0000000300), 0x8b0600, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x54276faf}}, './file0\x00'}) r5 = openat$vcsa(0xffffff9c, &(0x7f00000001c0), 0x400, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r4, &(0x7f0000000140)="62325d5325ad8da5315e42592af119dff830582aa394f7fc24c1fe94304993d885400fa990863c1c417f17828d882d2a3a4e08fba2a44efd510f50231d7f13dbc5df35865fb22e5a963e84cb857887a06f9749e55ab7fd7e6a9f94b9fd0c44cf9f", &(0x7f0000000200)=@tcp=r5, 0x1}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') lseek(r6, 0x8, 0x0) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') lseek(r7, 0x8, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10}, 0x20) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={r10, 0xfffffff8}, &(0x7f00000002c0)=0x8) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) (async) openat$vcsu(0xffffff9c, &(0x7f0000000300), 0x8b0600, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x54276faf}}, './file0\x00'}) (async) openat$vcsa(0xffffff9c, &(0x7f00000001c0), 0x400, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r4, &(0x7f0000000140)="62325d5325ad8da5315e42592af119dff830582aa394f7fc24c1fe94304993d885400fa990863c1c417f17828d882d2a3a4e08fba2a44efd510f50231d7f13dbc5df35865fb22e5a963e84cb857887a06f9749e55ab7fd7e6a9f94b9fd0c44cf9f", &(0x7f0000000200)=@tcp=r5, 0x1}, 0x1c) (async) syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') (async) lseek(r6, 0x8, 0x0) (async) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) (async) syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') (async) lseek(r7, 0x8, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10}, 0x20) (async) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={r10, 0xfffffff8}, &(0x7f00000002c0)=0x8) (async) 06:17:53 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:54 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="380000001214010000000000000000000900070073797a300000000008004100727865001400330073797a6b616c6c6572300000000000005c118b3027f6131fbd7929f1f4f5f70a3d9c3eca33f1b65b4b65b7ecf93c02af7ed50848827135bdfa2486bd268ab091d975a3f8248f7cf67312c6a604221f79fc1ef5a50c179a273d67c3eb09c36ed60479cef9d90d00710b71bc9a7d4df5af8cc1b55cd7ab2792691cd433c74c686a053653a4bfb9dc6d84dbc89c11ba4f1e900a87725459fbc88d0660adee046d31b1f4e2fbed48cd6da8275a227e4a09ed7a24f7e1ea795c03fe2b24159afd32d52055711a872197279b8bb32b2803940c11c639a272fcbb7569120aad095d4ac5f09302fdb659f5328c454abc715f27759ce44cbe10e7cd903ba3eb17dac63d2ed7722093f5bbf2ff9a3e4d91cb39ec57c0ba40d5fefab2e9828ac581757efe5d7c02586af9159b4e655e1427486b109909c780db9c"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x84, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x44, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c6"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x84}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:17:54 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:54 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000002000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1952.120250][T30596] team0: entered promiscuous mode [ 1952.125823][T30596] team_slave_0: entered promiscuous mode 06:17:54 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000003000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:17:54 executing program 3: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1952.516724][T30606] team0: left promiscuous mode [ 1952.521845][T30606] team_slave_0: left promiscuous mode [ 1952.544910][T30611] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 06:17:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r1 = socket$packet(0x11, 0x2, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) (async) r3 = openat$vcsu(0xffffff9c, &(0x7f0000000300), 0x8b0600, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x54276faf}}, './file0\x00'}) (async) r5 = openat$vcsa(0xffffff9c, &(0x7f00000001c0), 0x400, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r4, &(0x7f0000000140)="62325d5325ad8da5315e42592af119dff830582aa394f7fc24c1fe94304993d885400fa990863c1c417f17828d882d2a3a4e08fba2a44efd510f50231d7f13dbc5df35865fb22e5a963e84cb857887a06f9749e55ab7fd7e6a9f94b9fd0c44cf9f", &(0x7f0000000200)=@tcp=r5, 0x1}, 0x1c) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') lseek(r6, 0x8, 0x0) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) (async, rerun: 32) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) (async, rerun: 32) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') lseek(r7, 0x8, 0x0) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10}, 0x20) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={r10, 0xfffffff8}, &(0x7f00000002c0)=0x8) [ 1952.675976][T30613] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:17:54 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1952.846148][T30613] bond389: entered promiscuous mode [ 1952.851634][T30613] bond389: entered allmulticast mode [ 1952.858452][T30613] 8021q: adding VLAN 0 to HW filter on device bond389 06:17:55 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:55 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000004000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1953.197075][T30622] team0: entered promiscuous mode [ 1953.203265][T30622] team_slave_0: entered promiscuous mode 06:17:55 executing program 3: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1953.294949][T30618] team0: left promiscuous mode [ 1953.305833][T30618] team_slave_0: left promiscuous mode 06:17:55 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:55 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x84, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x44, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c6"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x84}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:17:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000280), 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @dev, @remote}, &(0x7f0000000080)=0xc) sendto$packet(r1, &(0x7f0000000140)="2e4914cf183c8a5252168a634b5f8ac622095b5b544d27161182afe43c8d08607b16769dd5a7e35527689d75c678a438a40b61b23315514671d746bf0e1de2774a3b9d07b73e54d74494893cfbf2b42da7f5dee971a66dc7b521bd893991b044d099586cbd80688740e0491a2904c7d531ce2fce2c7b84798bbeda6d60c6f64b6e20c4d919e515c7a505789dd428c87a7a678fb01ce3805fce19cfd0017b54f9df5649c3b21563daa128ee1b9d823ac077873e8913d6d8948415605381acf6dd72f762e863c78de78854456799c1a2d3b2c799e877da7540db283f31649565d20f9daa", 0xe3, 0x20000800, &(0x7f00000000c0)={0x11, 0x16, r2, 0x1, 0x5}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) 06:17:55 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000005000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:17:55 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1954.071411][T30639] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 1954.103826][T30641] team0: entered promiscuous mode [ 1954.109226][T30641] team_slave_0: entered promiscuous mode [ 1954.154213][T30637] team0: left promiscuous mode [ 1954.159230][T30637] team_slave_0: left promiscuous mode [ 1954.189525][T30642] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1954.313642][T30642] bond390: entered promiscuous mode [ 1954.319270][T30642] bond390: entered allmulticast mode [ 1954.328940][T30642] 8021q: adding VLAN 0 to HW filter on device bond390 06:17:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000280), 0x4) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @dev, @remote}, &(0x7f0000000080)=0xc) sendto$packet(r1, &(0x7f0000000140)="2e4914cf183c8a5252168a634b5f8ac622095b5b544d27161182afe43c8d08607b16769dd5a7e35527689d75c678a438a40b61b23315514671d746bf0e1de2774a3b9d07b73e54d74494893cfbf2b42da7f5dee971a66dc7b521bd893991b044d099586cbd80688740e0491a2904c7d531ce2fce2c7b84798bbeda6d60c6f64b6e20c4d919e515c7a505789dd428c87a7a678fb01ce3805fce19cfd0017b54f9df5649c3b21563daa128ee1b9d823ac077873e8913d6d8948415605381acf6dd72f762e863c78de78854456799c1a2d3b2c799e877da7540db283f31649565d20f9daa", 0xe3, 0x20000800, &(0x7f00000000c0)={0x11, 0x16, r2, 0x1, 0x5}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) 06:17:56 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:56 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:56 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000006000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:17:56 executing program 3: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1954.776023][T30652] team0: entered promiscuous mode [ 1954.781508][T30652] team_slave_0: entered promiscuous mode 06:17:56 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x84, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x44, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c6"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x84}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) [ 1954.872594][T30651] team0: left promiscuous mode [ 1954.880125][T30651] team_slave_0: left promiscuous mode 06:17:57 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000280), 0x4) (async) setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000280), 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @dev, @remote}, &(0x7f0000000080)=0xc) sendto$packet(r1, &(0x7f0000000140)="2e4914cf183c8a5252168a634b5f8ac622095b5b544d27161182afe43c8d08607b16769dd5a7e35527689d75c678a438a40b61b23315514671d746bf0e1de2774a3b9d07b73e54d74494893cfbf2b42da7f5dee971a66dc7b521bd893991b044d099586cbd80688740e0491a2904c7d531ce2fce2c7b84798bbeda6d60c6f64b6e20c4d919e515c7a505789dd428c87a7a678fb01ce3805fce19cfd0017b54f9df5649c3b21563daa128ee1b9d823ac077873e8913d6d8948415605381acf6dd72f762e863c78de78854456799c1a2d3b2c799e877da7540db283f31649565d20f9daa", 0xe3, 0x20000800, &(0x7f00000000c0)={0x11, 0x16, r2, 0x1, 0x5}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) 06:17:57 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000007000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1955.495180][T30667] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 06:17:57 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1955.641834][T30670] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1955.837313][T30670] bond391: entered promiscuous mode [ 1955.843328][T30670] bond391: entered allmulticast mode [ 1955.849816][T30670] 8021q: adding VLAN 0 to HW filter on device bond391 [ 1955.873861][T30672] team0: entered promiscuous mode [ 1955.879155][T30672] team_slave_0: entered promiscuous mode 06:17:58 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:58 executing program 3: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:58 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000008000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1956.083693][T30669] team0: left promiscuous mode [ 1956.088929][T30669] team_slave_0: left promiscuous mode 06:17:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @local}, 0x10) 06:17:58 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x46, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:17:58 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:58 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000a000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:17:58 executing program 3: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1956.949770][T30690] team0: entered promiscuous mode [ 1956.956135][T30690] team_slave_0: entered promiscuous mode [ 1957.031295][T30692] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 1957.064295][T30688] team0: left promiscuous mode [ 1957.069462][T30688] team_slave_0: left promiscuous mode [ 1957.186748][T30696] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:17:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @local}, 0x10) 06:17:59 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:17:59 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000f000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1957.365741][T30696] bond392: entered promiscuous mode [ 1957.371329][T30696] bond392: entered allmulticast mode [ 1957.378036][T30696] 8021q: adding VLAN 0 to HW filter on device bond392 06:17:59 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1957.723685][T30707] team0: entered promiscuous mode [ 1957.729122][T30707] team_slave_0: entered promiscuous mode 06:17:59 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000010000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1957.811582][T30703] team0: left promiscuous mode [ 1957.817232][T30703] team_slave_0: left promiscuous mode 06:18:00 executing program 3: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:00 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x46, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:18:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @local}, 0x10) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @local}, 0x10) 06:18:00 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:00 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000012000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:00 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1958.633405][T30722] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 1958.688737][T30723] team0: entered promiscuous mode [ 1958.694590][T30723] team_slave_0: entered promiscuous mode [ 1958.744567][T30721] team0: left promiscuous mode [ 1958.749697][T30721] team_slave_0: left promiscuous mode [ 1958.773385][T30724] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1958.917784][T30724] bond393: entered promiscuous mode [ 1958.923477][T30724] bond393: entered allmulticast mode [ 1958.937588][T30724] 8021q: adding VLAN 0 to HW filter on device bond393 06:18:01 executing program 3: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:01 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [{{0x9, 0x7, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [{{0x9, 0x7, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}]}, 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) 06:18:01 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:01 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000017000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:01 executing program 3: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:01 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x46, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) [ 1959.787236][T30743] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 1959.876108][T30743] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 1959.979282][T30743] team0: entered promiscuous mode [ 1959.984977][T30743] team_slave_0: entered promiscuous mode [ 1960.029782][T30739] team0: left promiscuous mode [ 1960.035684][T30739] team_slave_0: left promiscuous mode [ 1960.080661][T30749] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 06:18:02 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [{{0x9, 0x7, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [{{0x9, 0x7, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}]}, 0x38}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) [ 1960.199282][T30752] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:18:02 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000018000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1960.364525][T30752] bond394: entered promiscuous mode [ 1960.370005][T30752] bond394: entered allmulticast mode [ 1960.376835][T30752] 8021q: adding VLAN 0 to HW filter on device bond394 06:18:02 executing program 3: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:02 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:02 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1960.704449][T30757] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 1960.747961][T30758] team0: entered promiscuous mode [ 1960.748830][T30757] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 1960.753550][T30758] team_slave_0: entered promiscuous mode [ 1960.844385][T30756] team0: left promiscuous mode [ 1960.849621][T30756] team_slave_0: left promiscuous mode 06:18:03 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="380000001214010000000000000000000900070073797a300000000008004100727865001400330073797a6b616c6c6572300000000000005c118b3027f6131fbd7929f1f4f5f70a3d9c3eca33f1b65b4b65b7ecf93c02af7ed50848827135bdfa2486bd268ab091d975a3f8248f7cf67312c6a604221f79fc1ef5a50c179a273d67c3eb09c36ed60479cef9d90d00710b71bc9a7d4df5af8cc1b55cd7ab2792691cd433c74c686a053653a4bfb9dc6d84dbc89c11ba4f1e900a87725459fbc88d0660adee046d31b1f4e2fbed48cd6da8275a227e4a09ed7a24f7e1ea795c03fe2b24159afd32d52055711a872197279b8bb32b2803940c11c639a272fcbb7569120aad095d4ac5f09302fdb659f5328c454abc715f27759ce44cbe10e7cd903ba3eb17dac63d2ed7722093f5bbf2ff9a3e4d91cb39ec57c0ba40d5fefab2e9828ac581757efe5d7c02586af9159b4e655e1427486b109909c780db9c"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x47, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:18:03 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000001f000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:03 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [{{0x9, 0x7, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [{{0x9, 0x7, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}]}, 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [{{0x9, 0x7, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [{{0x9, 0x7, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}]}, 0x38}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) (async) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) (async) 06:18:03 executing program 3: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:03 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1961.919204][T30774] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 1962.019870][T30780] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 1962.050274][T30779] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:18:04 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000020000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:04 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1962.122287][T30782] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 1962.254680][T30779] bond395: entered promiscuous mode [ 1962.260172][T30779] bond395: entered allmulticast mode [ 1962.266934][T30779] 8021q: adding VLAN 0 to HW filter on device bond395 06:18:04 executing program 3: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:04 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [{{0x9, 0x7, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) quotactl_fd$Q_SYNC(r1, 0xffffffff80000101, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) 06:18:04 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="380000001214010000000000000000000900070073797a300000000008004100727865001400330073797a6b616c6c6572300000000000005c118b3027f6131fbd7929f1f4f5f70a3d9c3eca33f1b65b4b65b7ecf93c02af7ed50848827135bdfa2486bd268ab091d975a3f8248f7cf67312c6a604221f79fc1ef5a50c179a273d67c3eb09c36ed60479cef9d90d00710b71bc9a7d4df5af8cc1b55cd7ab2792691cd433c74c686a053653a4bfb9dc6d84dbc89c11ba4f1e900a87725459fbc88d0660adee046d31b1f4e2fbed48cd6da8275a227e4a09ed7a24f7e1ea795c03fe2b24159afd32d52055711a872197279b8bb32b2803940c11c639a272fcbb7569120aad095d4ac5f09302fdb659f5328c454abc715f27759ce44cbe10e7cd903ba3eb17dac63d2ed7722093f5bbf2ff9a3e4d91cb39ec57c0ba40d5fefab2e9828ac581757efe5d7c02586af9159b4e655e1427486b109909c780db9c"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x47, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:18:05 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:05 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000002b000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1963.142138][T30799] netlink: 'syz-executor.0': attribute type 7 has an invalid length. 06:18:05 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:05 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [{{0x9, 0x7, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) quotactl_fd$Q_SYNC(r1, 0xffffffff80000101, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [{{0x9, 0x7, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) (async) quotactl_fd$Q_SYNC(r1, 0xffffffff80000101, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) (async) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) (async) 06:18:05 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000032e000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1963.542853][T30806] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 06:18:05 executing program 3: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1963.698319][T30809] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1963.889971][T30809] bond396: entered promiscuous mode [ 1963.895596][T30809] bond396: entered allmulticast mode [ 1963.902160][T30809] 8021q: adding VLAN 0 to HW filter on device bond396 06:18:06 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:06 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000003c000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:06 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x47, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:18:06 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [{{0x9, 0x7, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) quotactl_fd$Q_SYNC(r1, 0xffffffff80000101, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) 06:18:07 executing program 3: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:07 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1965.240238][T30829] validate_nla: 1 callbacks suppressed [ 1965.240314][T30829] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 1965.352489][T30833] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 06:18:07 executing program 4: syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:07 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000003f000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1965.504839][T30840] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:18:07 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') lseek(r0, 0x8, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec0000001000010800"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000cc001a8018000a8014000700fe8000000000000000000000000000aa30000280080001800c0000000000000008000000000000001b0000000000000008000000000000000800000000000000290002801400018010000d0000000000080000000000000018000a8014000700ff02000000000000000000000000000100000700ff02000000000000000000000000000100000700fe8000000000000000000000000000002800028024000180080000000000000008000000000000000800000000000000080000000000000004001c0000000a8000000700200100000000000000000000000000000000080000000000000008000000000000000700fe80000000000000000000000000000000000700ff020000000000000000000000000001000007002001000000000000000000000000000000000700fe8000000000000000000000000000000000080000000000000008000000000004001c00"], 0xec}}, 0x0) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(0xffffffffffffffff, 0xcb8, 0x2, &(0x7f0000000000)="7c727608339d49ba2e89336bb3789108bd09aeb446859c6662c5581389b2c8dc8838458181616b380cd5bc1758b49ce36c8b153eaf", 0x35) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [{{0x9, 0x7, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [{{0x9, 0x7, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000001c0)={0xaaa, 0x0, &(0x7f0000000180)=[r6, r7]}, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r8, 0x1, 0x6, @multicast}, 0x10) [ 1965.720168][T30840] bond397: entered promiscuous mode [ 1965.725748][T30840] bond397: entered allmulticast mode [ 1965.732275][T30840] 8021q: adding VLAN 0 to HW filter on device bond397 06:18:07 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:07 executing program 3: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:08 executing program 4: syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:08 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000040000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1966.296290][T30853] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 1966.597755][T30853] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 1966.644429][T30853] team0: entered promiscuous mode [ 1966.649806][T30853] team_slave_0: entered promiscuous mode 06:18:08 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="380000001214010000000000000000000900070073797a300000000008004100727865001400330073797a6b616c6c6572300000000000005c118b3027f6131fbd7929f1f4f5f70a3d9c3eca33f1b65b4b65b7ecf93c02af7ed50848827135bdfa2486bd268ab091d975a3f8248f7cf67312c6a604221f79fc1ef5a50c179a273d67c3eb09c36ed60479cef9d90d00710b71bc9a7d4df5af8cc1b55cd7ab2792691cd433c74c686a053653a4bfb9dc6d84dbc89c11ba4f1e900a87725459fbc88d0660adee046d31b1f4e2fbed48cd6da8275a227e4a09ed7a24f7e1ea795c03fe2b24159afd32d52055711a872197279b8bb32b2803940c11c639a272fcbb7569120aad095d4ac5f09302fdb659f5328c454abc715f27759ce44cbe10e7cd903ba3eb17dac63d2ed7722093f5bbf2ff9a3e4d91cb39ec57c0ba40d5fefab2e9828ac581757efe5d7c02586af9159b4e655e1427486b109909c780db9c"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x80, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x80}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) [ 1966.730072][T30850] team0: left promiscuous mode [ 1966.735686][T30850] team_slave_0: left promiscuous mode 06:18:08 executing program 4: syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:09 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') lseek(r0, 0x8, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec0000001000010800"/20, @ANYRES32=r3, @ANYBLOB="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"], 0xec}}, 0x0) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(0xffffffffffffffff, 0xcb8, 0x2, &(0x7f0000000000)="7c727608339d49ba2e89336bb3789108bd09aeb446859c6662c5581389b2c8dc8838458181616b380cd5bc1758b49ce36c8b153eaf", 0x35) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [{{0x9, 0x7, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [{{0x9, 0x7, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000001c0)={0xaaa, 0x0, &(0x7f0000000180)=[r6, r7]}, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r8, 0x1, 0x6, @multicast}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') (async) lseek(r0, 0x8, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) dup(r1) (async) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec0000001000010800"/20, @ANYRES32=r3, @ANYBLOB="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"], 0xec}}, 0x0) (async) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r3}, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt(0xffffffffffffffff, 0xcb8, 0x2, &(0x7f0000000000)="7c727608339d49ba2e89336bb3789108bd09aeb446859c6662c5581389b2c8dc8838458181616b380cd5bc1758b49ce36c8b153eaf", 0x35) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [{{0x9, 0x7, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [{{0x9, 0x7, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000001c0)={0xaaa, 0x0, &(0x7f0000000180)=[r6, r7]}, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000000c0)) (async) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r8, 0x1, 0x6, @multicast}, 0x10) (async) 06:18:09 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:09 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000011d44c000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:09 executing program 3: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1967.333540][T30862] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 1967.556273][T30865] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1967.608409][T30876] netlink: 'syz-executor.0': attribute type 7 has an invalid length. 06:18:09 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000061000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:09 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1967.932574][T30865] bond398: entered promiscuous mode [ 1967.938974][T30865] bond398: entered allmulticast mode [ 1967.953337][T30865] 8021q: adding VLAN 0 to HW filter on device bond398 [ 1968.116143][T30873] team0: entered promiscuous mode [ 1968.121582][T30873] team_slave_0: entered promiscuous mode 06:18:10 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:10 executing program 3: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:10 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000062000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:10 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="380000001214010000000000000000000900070073797a300000000008004100727865001400330073797a6b616c6c6572300000000000005c118b3027f6131fbd7929f1f4f5f70a3d9c3eca33f1b65b4b65b7ecf93c02af7ed50848827135bdfa2486bd268ab091d975a3f8248f7cf67312c6a604221f79fc1ef5a50c179a273d67c3eb09c36ed60479cef9d90d00710b71bc9a7d4df5af8cc1b55cd7ab2792691cd433c74c686a053653a4bfb9dc6d84dbc89c11ba4f1e900a87725459fbc88d0660adee046d31b1f4e2fbed48cd6da8275a227e4a09ed7a24f7e1ea795c03fe2b24159afd32d52055711a872197279b8bb32b2803940c11c639a272fcbb7569120aad095d4ac5f09302fdb659f5328c454abc715f27759ce44cbe10e7cd903ba3eb17dac63d2ed7722093f5bbf2ff9a3e4d91cb39ec57c0ba40d5fefab2e9828ac581757efe5d7c02586af9159b4e655e1427486b109909c780db9c"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x80, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x80}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) [ 1968.426853][T30873] team0: left promiscuous mode [ 1968.431886][T30873] team_slave_0: left promiscuous mode 06:18:10 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') lseek(r0, 0x8, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec0000001000010800"/20, @ANYRES32=r3, @ANYBLOB="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"], 0xec}}, 0x0) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(0xffffffffffffffff, 0xcb8, 0x2, &(0x7f0000000000)="7c727608339d49ba2e89336bb3789108bd09aeb446859c6662c5581389b2c8dc8838458181616b380cd5bc1758b49ce36c8b153eaf", 0x35) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [{{0x9, 0x7, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [{{0x9, 0x7, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000001c0)={0xaaa, 0x0, &(0x7f0000000180)=[r6, r7]}, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r8, 0x1, 0x6, @multicast}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') (async) lseek(r0, 0x8, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) dup(r1) (async) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec0000001000010800"/20, @ANYRES32=r3, @ANYBLOB="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"], 0xec}}, 0x0) (async) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r3}, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt(0xffffffffffffffff, 0xcb8, 0x2, &(0x7f0000000000)="7c727608339d49ba2e89336bb3789108bd09aeb446859c6662c5581389b2c8dc8838458181616b380cd5bc1758b49ce36c8b153eaf", 0x35) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [{{0x9, 0x7, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [{{0x9, 0x7, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000001c0)={0xaaa, 0x0, &(0x7f0000000180)=[r6, r7]}, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000000c0)) (async) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r8, 0x1, 0x6, @multicast}, 0x10) (async) 06:18:10 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1968.826319][T30895] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 06:18:11 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000063000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1968.990685][T30898] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1969.048557][T30900] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 1969.122547][T30898] bond399: entered promiscuous mode [ 1969.128279][T30898] bond399: entered allmulticast mode [ 1969.135061][T30898] 8021q: adding VLAN 0 to HW filter on device bond399 [ 1969.149695][T30900] netlink: 'syz-executor.0': attribute type 7 has an invalid length. 06:18:11 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:11 executing program 3: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1969.363622][T30900] team0: entered promiscuous mode [ 1969.369145][T30900] team_slave_0: entered promiscuous mode 06:18:11 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000268000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:11 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1969.636485][T30903] team0: left promiscuous mode [ 1969.641522][T30903] team_slave_0: left promiscuous mode 06:18:11 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) 06:18:11 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x80, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x80}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) [ 1970.364399][T30921] team0: entered promiscuous mode [ 1970.369676][T30921] team_slave_0: entered promiscuous mode 06:18:12 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000069000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1970.424994][T30918] team0: left promiscuous mode [ 1970.430111][T30918] team_slave_0: left promiscuous mode 06:18:12 executing program 3: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) (async) 06:18:12 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1970.755587][T30924] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 1970.868379][T30927] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1971.017162][T30927] bond400: entered promiscuous mode [ 1971.022835][T30927] bond400: entered allmulticast mode [ 1971.029298][T30927] 8021q: adding VLAN 0 to HW filter on device bond400 06:18:13 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000006a000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1971.249882][T30935] team0: entered promiscuous mode [ 1971.256034][T30935] team_slave_0: entered promiscuous mode 06:18:13 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1971.580587][T30938] team0: left promiscuous mode [ 1971.585892][T30938] team_slave_0: left promiscuous mode 06:18:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) 06:18:13 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:18:13 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000006b000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1972.136907][T30950] team0: entered promiscuous mode [ 1972.147771][T30950] team_slave_0: entered promiscuous mode 06:18:14 executing program 5: syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1972.219344][T30952] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 1972.230694][T30946] team0: left promiscuous mode [ 1972.236393][T30946] team_slave_0: left promiscuous mode 06:18:14 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000071000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) [ 1972.420902][T30954] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1972.584159][T30954] bond401: entered promiscuous mode [ 1972.589658][T30954] bond401: entered allmulticast mode [ 1972.596364][T30954] 8021q: adding VLAN 0 to HW filter on device bond401 06:18:14 executing program 3: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1972.817982][T30961] team0: entered promiscuous mode [ 1972.823622][T30961] team_slave_0: entered promiscuous mode 06:18:14 executing program 5: syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:14 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1972.964665][T30960] team0: left promiscuous mode [ 1972.969706][T30960] team_slave_0: left promiscuous mode 06:18:15 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:18:15 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) (async) 06:18:15 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000072000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:15 executing program 5: syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1973.495251][T30972] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 1973.583707][T30974] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1973.793651][T30974] bond402: entered promiscuous mode [ 1973.799132][T30974] bond402: entered allmulticast mode [ 1973.805778][T30974] 8021q: adding VLAN 0 to HW filter on device bond402 06:18:15 executing program 4: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:16 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000073000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:16 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) 06:18:16 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) [ 1975.020648][T31000] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 1975.041697][T31001] team0: entered promiscuous mode [ 1975.047482][T31001] team_slave_0: entered promiscuous mode [ 1975.095101][T30999] team0: left promiscuous mode [ 1975.100299][T30999] team_slave_0: left promiscuous mode [ 1975.156021][T31003] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1975.256510][T31003] bond403: entered promiscuous mode [ 1975.262006][T31003] bond403: entered allmulticast mode [ 1975.268681][T31003] 8021q: adding VLAN 0 to HW filter on device bond403 06:18:17 executing program 3: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:17 executing program 4: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:17 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:17 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000079000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:17 executing program 0: setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000)=0x3e2b, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) 06:18:17 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1975.796863][T31016] team0: entered promiscuous mode [ 1975.803168][T31016] team_slave_0: entered promiscuous mode 06:18:17 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000007a000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:17 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="380000001214010000000000000000000900070073797a300000000008004100727865001400330073797a6b616c6c6572300000000000005c118b3027f6131fbd7929f1f4f5f70a3d9c3eca33f1b65b4b65b7ecf93c02af7ed50848827135bdfa2486bd268ab091d975a3f8248f7cf67312c6a604221f79fc1ef5a50c179a273d67c3eb09c36ed60479cef9d90d00710b71bc9a7d4df5af8cc1b55cd7ab2792691cd433c74c686a053653a4bfb9dc6d84dbc89c11ba4f1e900a87725459fbc88d0660adee046d31b1f4e2fbed48cd6da8275a227e4a09ed7a24f7e1ea795c03fe2b24159afd32d52055711a872197279b8bb32b2803940c11c639a272fcbb7569120aad095d4ac5f09302fdb659f5328c454abc715f27759ce44cbe10e7cd903ba3eb17dac63d2ed7722093f5bbf2ff9a3e4d91cb39ec57c0ba40d5fefab2e9828ac581757efe5d7c02586af9159b4e655e1427486b109909c780db9c"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) getsockname$packet(r12, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, 0x0, 0x4000000) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r14, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r14}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) [ 1975.865085][T31015] team0: left promiscuous mode [ 1975.870234][T31015] team_slave_0: left promiscuous mode 06:18:18 executing program 0: setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000)=0x3e2b, 0x4) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) 06:18:18 executing program 5: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1976.546294][T31026] team0: entered promiscuous mode [ 1976.551691][T31026] team_slave_0: entered promiscuous mode 06:18:18 executing program 3: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1976.683736][T31024] team0: left promiscuous mode [ 1976.688859][T31024] team_slave_0: left promiscuous mode 06:18:18 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000007b000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:18 executing program 4: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:19 executing program 0: setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000)=0x3e2b, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) [ 1976.985590][T31029] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 1977.215167][T31035] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1977.400730][T31035] bond404: entered promiscuous mode [ 1977.406312][T31035] bond404: entered allmulticast mode [ 1977.412990][T31035] 8021q: adding VLAN 0 to HW filter on device bond404 [ 1977.493488][T31042] team0: entered promiscuous mode [ 1977.498892][T31042] team_slave_0: entered promiscuous mode 06:18:19 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000ffffff85000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:19 executing program 5: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1977.599511][T31040] team0: left promiscuous mode [ 1977.605710][T31040] team_slave_0: left promiscuous mode 06:18:19 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="380000001214010000000000000000000900070073797a300000000008004100727865001400330073797a6b616c6c6572300000000000005c118b3027f6131fbd7929f1f4f5f70a3d9c3eca33f1b65b4b65b7ecf93c02af7ed50848827135bdfa2486bd268ab091d975a3f8248f7cf67312c6a604221f79fc1ef5a50c179a273d67c3eb09c36ed60479cef9d90d00710b71bc9a7d4df5af8cc1b55cd7ab2792691cd433c74c686a053653a4bfb9dc6d84dbc89c11ba4f1e900a87725459fbc88d0660adee046d31b1f4e2fbed48cd6da8275a227e4a09ed7a24f7e1ea795c03fe2b24159afd32d52055711a872197279b8bb32b2803940c11c639a272fcbb7569120aad095d4ac5f09302fdb659f5328c454abc715f27759ce44cbe10e7cd903ba3eb17dac63d2ed7722093f5bbf2ff9a3e4d91cb39ec57c0ba40d5fefab2e9828ac581757efe5d7c02586af9159b4e655e1427486b109909c780db9c"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) getsockname$packet(r12, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, 0x0, 0x4000000) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r14, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r14}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:18:19 executing program 4: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='pimreg1\x00') r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x9, 0x4) 06:18:20 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000ffffff9c000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1978.630541][T31056] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 1978.705239][T31059] team0: entered promiscuous mode [ 1978.710538][T31059] team_slave_0: entered promiscuous mode [ 1978.777570][T31063] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1978.862900][T31063] bond405: entered promiscuous mode [ 1978.868459][T31063] bond405: entered allmulticast mode [ 1978.875241][T31063] 8021q: adding VLAN 0 to HW filter on device bond405 [ 1978.903789][T31058] team0: left promiscuous mode [ 1978.908986][T31058] team_slave_0: left promiscuous mode 06:18:21 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000ffffff9f000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:21 executing program 4: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:21 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000001ad3aa000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:21 executing program 3: syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='pimreg1\x00') (async) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='pimreg1\x00') socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x9, 0x4) 06:18:21 executing program 5: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:21 executing program 4: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:21 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) getsockname$packet(r12, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, 0x0, 0x4000000) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r14, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r14}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) [ 1980.049016][T31079] team0: entered promiscuous mode [ 1980.055444][T31079] team_slave_0: entered promiscuous mode [ 1980.159133][T31077] team0: left promiscuous mode [ 1980.164631][T31077] team_slave_0: left promiscuous mode 06:18:22 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000002ac000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1980.347324][T31080] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 06:18:22 executing program 4: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='pimreg1\x00') socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x9, 0x4) [ 1980.482601][T31085] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1980.683115][T31085] bond406: entered promiscuous mode [ 1980.688687][T31085] bond406: entered allmulticast mode [ 1980.696159][T31085] 8021q: adding VLAN 0 to HW filter on device bond406 06:18:22 executing program 5: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:23 executing program 3: syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:23 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000f1000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:23 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="380000001214010000000000000000000900070073797a300000000008004100727865001400330073797a6b616c6c6572300000000000005c118b3027f6131fbd7929f1f4f5f70a3d9c3eca33f1b65b4b65b7ecf93c02af7ed50848827135bdfa2486bd268ab091d975a3f8248f7cf67312c6a604221f79fc1ef5a50c179a273d67c3eb09c36ed60479cef9d90d00710b71bc9a7d4df5af8cc1b55cd7ab2792691cd433c74c686a053653a4bfb9dc6d84dbc89c11ba4f1e900a87725459fbc88d0660adee046d31b1f4e2fbed48cd6da8275a227e4a09ed7a24f7e1ea795c03fe2b24159afd32d52055711a872197279b8bb32b2803940c11c639a272fcbb7569120aad095d4ac5f09302fdb659f5328c454abc715f27759ce44cbe10e7cd903ba3eb17dac63d2ed7722093f5bbf2ff9a3e4d91cb39ec57c0ba40d5fefab2e9828ac581757efe5d7c02586af9159b4e655e1427486b109909c780db9c"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) [ 1981.166333][T31099] team0: entered promiscuous mode [ 1981.171857][T31099] team_slave_0: entered promiscuous mode [ 1981.193835][T31098] team0: left promiscuous mode [ 1981.198887][T31098] team_slave_0: left promiscuous mode 06:18:23 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) 06:18:23 executing program 4: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1981.590758][T31106] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 06:18:23 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000ff000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:23 executing program 3: syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1981.921541][T31110] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1982.063805][T31110] bond407: entered promiscuous mode [ 1982.069392][T31110] bond407: entered allmulticast mode [ 1982.082828][T31110] 8021q: adding VLAN 0 to HW filter on device bond407 06:18:24 executing program 5: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:24 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000060ff000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:24 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) (async) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) (async) 06:18:24 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="380000001214010000000000000000000900070073797a300000000008004100727865001400330073797a6b616c6c6572300000000000005c118b3027f6131fbd7929f1f4f5f70a3d9c3eca33f1b65b4b65b7ecf93c02af7ed50848827135bdfa2486bd268ab091d975a3f8248f7cf67312c6a604221f79fc1ef5a50c179a273d67c3eb09c36ed60479cef9d90d00710b71bc9a7d4df5af8cc1b55cd7ab2792691cd433c74c686a053653a4bfb9dc6d84dbc89c11ba4f1e900a87725459fbc88d0660adee046d31b1f4e2fbed48cd6da8275a227e4a09ed7a24f7e1ea795c03fe2b24159afd32d52055711a872197279b8bb32b2803940c11c639a272fcbb7569120aad095d4ac5f09302fdb659f5328c454abc715f27759ce44cbe10e7cd903ba3eb17dac63d2ed7722093f5bbf2ff9a3e4d91cb39ec57c0ba40d5fefab2e9828ac581757efe5d7c02586af9159b4e655e1427486b109909c780db9c"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:18:24 executing program 4: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:24 executing program 3: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:25 executing program 5: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1983.143677][T31137] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 06:18:25 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000080ffff000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:25 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) [ 1983.298631][T31143] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1983.483307][T31143] bond408: entered promiscuous mode [ 1983.488797][T31143] bond408: entered allmulticast mode [ 1983.495575][T31143] 8021q: adding VLAN 0 to HW filter on device bond408 06:18:25 executing program 4: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:25 executing program 3: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:26 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000085ffffff000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:26 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:18:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) 06:18:26 executing program 4: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:26 executing program 3: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1984.455562][T31166] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 06:18:26 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000009cffffff000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1984.583337][T31169] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:18:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) (async) [ 1984.823249][T31169] bond409: entered promiscuous mode [ 1984.828819][T31169] bond409: entered allmulticast mode [ 1984.835500][T31169] 8021q: adding VLAN 0 to HW filter on device bond409 06:18:27 executing program 5: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:27 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000009fffffff000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:27 executing program 3: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:27 executing program 4: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) (async) 06:18:27 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300), 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:18:27 executing program 4: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:27 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000020000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') lseek(r2, 0x8, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000000)=@req={0xfffffffd, 0x2, 0x8000, 0x6}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) 06:18:28 executing program 3: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1986.099284][T31199] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 1986.254690][T31200] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1986.438912][T31200] bond410: entered promiscuous mode [ 1986.445002][T31200] bond410: entered allmulticast mode [ 1986.451509][T31200] 8021q: adding VLAN 0 to HW filter on device bond410 06:18:28 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:28 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000030000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1986.746861][T31210] team0: entered promiscuous mode [ 1986.752243][T31210] team_slave_0: entered promiscuous mode 06:18:28 executing program 5: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1986.825911][T31208] team0: left promiscuous mode [ 1986.831055][T31208] team_slave_0: left promiscuous mode 06:18:29 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300), 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:18:29 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r1 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') lseek(r2, 0x8, 0x0) (async) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000000)=@req={0xfffffffd, 0x2, 0x8000, 0x6}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) 06:18:29 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000040000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1987.670458][T31222] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 06:18:29 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1987.906845][T31230] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:18:30 executing program 3: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:30 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000050000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1988.153110][T31230] bond411: entered promiscuous mode [ 1988.158640][T31230] bond411: entered allmulticast mode [ 1988.165254][T31230] 8021q: adding VLAN 0 to HW filter on device bond411 06:18:30 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') (async) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') lseek(r2, 0x8, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000000)=@req={0xfffffffd, 0x2, 0x8000, 0x6}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) 06:18:30 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300), 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:18:30 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000060000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:31 executing program 5: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:31 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:31 executing program 3: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1989.424138][T31254] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 1989.439367][T31253] team0: entered promiscuous mode [ 1989.447465][T31253] team_slave_0: entered promiscuous mode [ 1989.515114][T31249] team0: left promiscuous mode [ 1989.520299][T31249] team_slave_0: left promiscuous mode 06:18:31 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000070000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1989.665884][T31260] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:18:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [{{0x9, 0x7, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000011400020cbd7000ffdbdf2508000100010000000800010001000000"], 0x20}, 0x1, 0x0, 0x0, 0x24000014}, 0x4000040) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f00000001c0)=0xfffff000, 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001214010000000000000000000900070073797a3000000000080041007278650014004fdc2d330073797a6b616c6c65723000000000f50076a1a51b993f90917e0e448d3d08551787b114f2abf9913b752bf90368493e5cdacd0d9bfc213c8ce32fe08ddcd4d4eb53cb473221b0816f11a4a2daab7798d85d243788b021ffc3462122f9340ce9495f0242"], 0x38}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000200)=[0x0, 0x2, 0xa324, 0x0, 0x6, 0xdd], 0x6, 0x80000, 0x0, 0xffffffffffffffff}) setsockopt$inet6_tcp_int(r4, 0x6, 0x1, &(0x7f00000003c0)=0x101, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @multicast}, 0x10) [ 1989.977954][T31260] bond412: entered promiscuous mode [ 1989.983539][T31260] bond412: entered allmulticast mode [ 1989.990035][T31260] 8021q: adding VLAN 0 to HW filter on device bond412 06:18:32 executing program 4: r0 = syz_io_uring_setup(0x2c3, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1990.234947][T31271] netlink: 'syz-executor.0': attribute type 7 has an invalid length. 06:18:32 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000080000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:32 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="380000001214010000000000000000000900070073797a300000000008004100727865001400330073797a6b616c6c6572300000000000005c118b3027f6131fbd7929f1f4f5f70a3d9c3eca33f1b65b4b65b7ecf93c02af7ed50848827135bdfa2486bd268ab091d975a3f8248f7cf67312c6a604221f79fc1ef5a50c179a273d67c3eb09c36ed60479cef9d90d00710b71bc9a7d4df5af8cc1b55cd7ab2792691cd433c74c686a053653a4bfb9dc6d84dbc89c11ba4f1e900a87725459fbc88d0660adee046d31b1f4e2fbed48cd6da8275a227e4a09ed7a24f7e1ea795c03fe2b24159afd32d52055711a872197279b8bb32b2803940c11c639a272fcbb7569120aad095d4ac5f09302fdb659f5328c454abc715f27759ce44cbe10e7cd903ba3eb17dac63d2ed7722093f5bbf2ff9a3e4d91cb39ec57c0ba40d5fefab2e9828ac581757efe5d7c02586af9159b4e655e1427486b109909c780db9c"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) getsockname$packet(r12, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r14, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r14}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) [ 1990.280134][T31271] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 1990.318320][T31271] team0: entered promiscuous mode [ 1990.323988][T31271] team_slave_0: entered promiscuous mode [ 1990.415383][T31269] team0: left promiscuous mode [ 1990.420626][T31269] team_slave_0: left promiscuous mode 06:18:32 executing program 5: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [{{0x9, 0x7, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async, rerun: 32) r3 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 32) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000011400020cbd7000ffdbdf2508000100010000000800010001000000"], 0x20}, 0x1, 0x0, 0x0, 0x24000014}, 0x4000040) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f00000001c0)=0xfffff000, 0x4) (async, rerun: 64) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001214010000000000000000000900070073797a3000000000080041007278650014004fdc2d330073797a6b616c6c65723000000000f50076a1a51b993f90917e0e448d3d08551787b114f2abf9913b752bf90368493e5cdacd0d9bfc213c8ce32fe08ddcd4d4eb53cb473221b0816f11a4a2daab7798d85d243788b021ffc3462122f9340ce9495f0242"], 0x38}}, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000200)=[0x0, 0x2, 0xa324, 0x0, 0x6, 0xdd], 0x6, 0x80000, 0x0, 0xffffffffffffffff}) setsockopt$inet6_tcp_int(r4, 0x6, 0x1, &(0x7f00000003c0)=0x101, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @multicast}, 0x10) 06:18:32 executing program 3: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:32 executing program 4: r0 = syz_io_uring_setup(0x2c3, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1990.854508][T31279] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 1991.006665][T31281] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:18:33 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000a0000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1991.173344][T31281] bond413: entered promiscuous mode [ 1991.178816][T31281] bond413: entered allmulticast mode [ 1991.185456][T31281] 8021q: adding VLAN 0 to HW filter on device bond413 06:18:33 executing program 5: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:33 executing program 4: r0 = syz_io_uring_setup(0x2c3, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:33 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) getsockname$packet(r12, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r14, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r14}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:18:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$nl_rdma(0x10, 0x3, 0x14) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [{{0x9, 0x7, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [{{0x9, 0x7, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000011400020cbd7000ffdbdf2508000100010000000800010001000000"], 0x20}, 0x1, 0x0, 0x0, 0x24000014}, 0x4000040) (async) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000011400020cbd7000ffdbdf2508000100010000000800010001000000"], 0x20}, 0x1, 0x0, 0x0, 0x24000014}, 0x4000040) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f00000001c0)=0xfffff000, 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001214010000000000000000000900070073797a3000000000080041007278650014004fdc2d330073797a6b616c6c65723000000000f50076a1a51b993f90917e0e448d3d08551787b114f2abf9913b752bf90368493e5cdacd0d9bfc213c8ce32fe08ddcd4d4eb53cb473221b0816f11a4a2daab7798d85d243788b021ffc3462122f9340ce9495f0242"], 0x38}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000200)=[0x0, 0x2, 0xa324, 0x0, 0x6, 0xdd], 0x6, 0x80000, 0x0, 0xffffffffffffffff}) setsockopt$inet6_tcp_int(r4, 0x6, 0x1, &(0x7f00000003c0)=0x101, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @multicast}, 0x10) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @multicast}, 0x10) 06:18:34 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000f0000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1992.126753][T31300] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 06:18:34 executing program 3: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1992.340644][T31302] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1992.422063][T31311] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 1992.423683][T31309] netlink: 'syz-executor.0': attribute type 7 has an invalid length. 06:18:34 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f0000000000)=0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1992.560679][T31302] bond414: entered promiscuous mode [ 1992.566315][T31302] bond414: entered allmulticast mode [ 1992.572986][T31302] 8021q: adding VLAN 0 to HW filter on device bond414 06:18:34 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000100000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1992.664338][T31309] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 1992.747116][T31311] team0: entered promiscuous mode [ 1992.752502][T31311] team_slave_0: entered promiscuous mode [ 1993.026556][T31305] team0: left promiscuous mode [ 1993.031628][T31305] team_slave_0: left promiscuous mode 06:18:35 executing program 5: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:35 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="380000001214010000000000000000000900070073797a300000000008004100727865001400330073797a6b616c6c6572300000000000005c118b3027f6131fbd7929f1f4f5f70a3d9c3eca33f1b65b4b65b7ecf93c02af7ed50848827135bdfa2486bd268ab091d975a3f8248f7cf67312c6a604221f79fc1ef5a50c179a273d67c3eb09c36ed60479cef9d90d00710b71bc9a7d4df5af8cc1b55cd7ab2792691cd433c74c686a053653a4bfb9dc6d84dbc89c11ba4f1e900a87725459fbc88d0660adee046d31b1f4e2fbed48cd6da8275a227e4a09ed7a24f7e1ea795c03fe2b24159afd32d52055711a872197279b8bb32b2803940c11c639a272fcbb7569120aad095d4ac5f09302fdb659f5328c454abc715f27759ce44cbe10e7cd903ba3eb17dac63d2ed7722093f5bbf2ff9a3e4d91cb39ec57c0ba40d5fefab2e9828ac581757efe5d7c02586af9159b4e655e1427486b109909c780db9c"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) getsockname$packet(r12, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r14, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r14}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:18:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @random="dc8c0b076267"}, 0x10) 06:18:35 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f0000000000)=0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:35 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000120000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1993.755861][T31331] team0: entered promiscuous mode [ 1993.761319][T31331] team_slave_0: entered promiscuous mode [ 1993.786549][T31329] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 1993.834607][T31324] team0: left promiscuous mode [ 1993.839655][T31324] team_slave_0: left promiscuous mode 06:18:35 executing program 3: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:35 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000170000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:36 executing program 5: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1993.984901][T31336] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:18:36 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f0000000000)=0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @random="dc8c0b076267"}, 0x10) [ 1994.169030][T31336] bond415: entered promiscuous mode [ 1994.174732][T31336] bond415: entered allmulticast mode [ 1994.181430][T31336] 8021q: adding VLAN 0 to HW filter on device bond415 06:18:36 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000180000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:36 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @random="dc8c0b076267"}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @random="dc8c0b076267"}, 0x10) (async) 06:18:36 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) getsockname$packet(r12, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r14, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r14}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:18:37 executing program 5: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:37 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000002b0000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1995.290570][T31358] team0: entered promiscuous mode [ 1995.296499][T31358] team_slave_0: entered promiscuous mode [ 1995.382574][T31359] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 06:18:37 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1995.508964][T31365] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1995.633682][T31365] bond416: entered promiscuous mode [ 1995.639153][T31365] bond416: entered allmulticast mode [ 1995.645922][T31365] 8021q: adding VLAN 0 to HW filter on device bond416 [ 1995.682152][T31361] team0: left promiscuous mode [ 1995.687412][T31361] team_slave_0: left promiscuous mode 06:18:37 executing program 3: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') lseek(r2, 0x8, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=@deltaction={0x12c, 0x31, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0x14, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x59}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8d7}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x470}}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40}, 0x10) lseek(r1, 0x8, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000000)=@req3={0x5, 0x20000, 0x6, 0x0, 0x1, 0x8f1, 0x3}, 0x1c) 06:18:37 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000003c0000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:37 executing program 5: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:38 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:38 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) getsockname$packet(r12, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r14, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r14}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:18:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') lseek(r2, 0x8, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=@deltaction={0x12c, 0x31, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0x14, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x59}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8d7}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x470}}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40}, 0x10) lseek(r1, 0x8, 0x0) (async) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000000)=@req3={0x5, 0x20000, 0x6, 0x0, 0x1, 0x8f1, 0x3}, 0x1c) 06:18:38 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000610000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:39 executing program 5: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:39 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)=0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1997.003390][T31385] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 06:18:39 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') (async) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') lseek(r2, 0x8, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=@deltaction={0x12c, 0x31, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0x14, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x59}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8d7}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x470}}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40}, 0x10) (async) lseek(r1, 0x8, 0x0) (async) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000000)=@req3={0x5, 0x20000, 0x6, 0x0, 0x1, 0x8f1, 0x3}, 0x1c) [ 1997.176200][T31393] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:18:39 executing program 3: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:39 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000620000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1997.491945][T31393] bond417: entered promiscuous mode [ 1997.497633][T31393] bond417: entered allmulticast mode [ 1997.504791][T31393] 8021q: adding VLAN 0 to HW filter on device bond417 06:18:39 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)=0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:40 executing program 5: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:40 executing program 0: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) (fail_nth: 1) 06:18:40 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="380000001214010000000000000000000900070073797a300000000008004100727865001400330073797a6b616c6c6572300000000000005c118b3027f6131fbd7929f1f4f5f70a3d9c3eca33f1b65b4b65b7ecf93c02af7ed50848827135bdfa2486bd268ab091d975a3f8248f7cf67312c6a604221f79fc1ef5a50c179a273d67c3eb09c36ed60479cef9d90d00710b71bc9a7d4df5af8cc1b55cd7ab2792691cd433c74c686a053653a4bfb9dc6d84dbc89c11ba4f1e900a87725459fbc88d0660adee046d31b1f4e2fbed48cd6da8275a227e4a09ed7a24f7e1ea795c03fe2b24159afd32d52055711a872197279b8bb32b2803940c11c639a272fcbb7569120aad095d4ac5f09302fdb659f5328c454abc715f27759ce44cbe10e7cd903ba3eb17dac63d2ed7722093f5bbf2ff9a3e4d91cb39ec57c0ba40d5fefab2e9828ac581757efe5d7c02586af9159b4e655e1427486b109909c780db9c"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) getsockname$packet(r12, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r14, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r14}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:18:40 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000630000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:40 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)=0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:40 executing program 5: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:40 executing program 3: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:40 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000690000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1998.953668][T31422] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 06:18:41 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 1999.105038][T31426] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1999.290932][T31426] bond418: entered promiscuous mode [ 1999.296528][T31426] bond418: entered allmulticast mode [ 1999.303191][T31426] 8021q: adding VLAN 0 to HW filter on device bond418 06:18:41 executing program 0: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) (fail_nth: 2) 06:18:41 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000006a0000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:41 executing program 5: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:41 executing program 3: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:41 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:41 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) [ 1999.789067][ T1191] ieee802154 phy0 wpan0: encryption failed: -22 [ 1999.795846][ T1191] ieee802154 phy1 wpan1: encryption failed: -22 06:18:42 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000006b0000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:42 executing program 5: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:42 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2000.238250][T31450] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 2000.362777][T31454] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2000.453586][T31454] bond419: entered promiscuous mode [ 2000.459068][T31454] bond419: entered allmulticast mode [ 2000.466063][T31454] 8021q: adding VLAN 0 to HW filter on device bond419 06:18:42 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000710000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:42 executing program 5: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:42 executing program 3: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2000.994573][T31462] FAULT_INJECTION: forcing a failure. [ 2000.994573][T31462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2001.008725][T31462] CPU: 0 PID: 31462 Comm: syz-executor.0 Not tainted 6.3.0-rc7-syzkaller-g0255004d2a8e #0 [ 2001.018898][T31462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2001.029168][T31462] Call Trace: [ 2001.032593][T31462] [ 2001.035688][T31462] dump_stack_lvl+0x1cc/0x260 [ 2001.040765][T31462] dump_stack+0x1e/0x20 [ 2001.045196][T31462] should_fail_ex+0x748/0x7f0 [ 2001.050184][T31462] should_fail+0x2a/0x30 [ 2001.054654][T31462] should_fail_usercopy+0x2e/0x40 [ 2001.059936][T31462] _copy_from_user+0x33/0x150 [ 2001.064890][T31462] io_recvmsg_copy_hdr+0x1c8/0xe30 [ 2001.070367][T31462] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2001.076467][T31462] io_recvmsg+0x18b/0x3890 [ 2001.081150][T31462] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 2001.087713][T31462] ? mod_objcg_state+0xb2b/0x1180 [ 2001.093006][T31462] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2001.099073][T31462] ? __rcu_read_unlock+0x7a/0xd0 [ 2001.104288][T31462] ? __fget_files+0x4d7/0x540 [ 2001.109211][T31462] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2001.115259][T31462] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2001.121303][T31462] ? io_assign_file+0x642/0x6b0 [ 2001.126408][T31462] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2001.132458][T31462] io_issue_sqe+0x321/0x1050 [ 2001.137277][T31462] io_submit_sqes+0x11e2/0x2e10 [ 2001.142367][T31462] ? kmsan_internal_poison_memory+0x90/0xa0 [ 2001.148571][T31462] __se_sys_io_uring_enter+0x4ed/0x4300 [ 2001.154397][T31462] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2001.160534][T31462] __ia32_sys_io_uring_enter+0x119/0x1a0 [ 2001.166444][T31462] __do_fast_syscall_32+0xa2/0x100 [ 2001.171875][T31462] ? irqentry_exit+0x16/0x40 [ 2001.176695][T31462] ? exc_page_fault+0x38a/0x600 [ 2001.181928][T31462] do_fast_syscall_32+0x37/0x80 [ 2001.187042][T31462] do_SYSENTER_32+0x1f/0x30 [ 2001.191829][T31462] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2001.198448][T31462] RIP: 0023:0xf7f78579 [ 2001.202735][T31462] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2001.222621][T31462] RSP: 002b:00000000f7f735cc EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 2001.231298][T31462] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000022ff [ 2001.239453][T31462] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2001.247604][T31462] RBP: 00000000ffffff71 R08: 0000000000000000 R09: 0000000000000000 [ 2001.255763][T31462] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2001.263918][T31462] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2001.272109][T31462] 06:18:43 executing program 0: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) (fail_nth: 3) 06:18:43 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:43 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000720000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:43 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:18:43 executing program 5: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:44 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000730000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2002.220705][T31478] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 06:18:44 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:44 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2002.378538][T31483] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2002.417173][T31482] FAULT_INJECTION: forcing a failure. 06:18:44 executing program 3: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2002.417173][T31482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2002.431285][T31482] CPU: 1 PID: 31482 Comm: syz-executor.0 Not tainted 6.3.0-rc7-syzkaller-g0255004d2a8e #0 [ 2002.441475][T31482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2002.451781][T31482] Call Trace: [ 2002.455251][T31482] [ 2002.458363][T31482] dump_stack_lvl+0x1cc/0x260 [ 2002.463646][T31482] dump_stack+0x1e/0x20 [ 2002.468109][T31482] should_fail_ex+0x748/0x7f0 [ 2002.473094][T31482] should_fail+0x2a/0x30 [ 2002.477623][T31482] should_fail_usercopy+0x2e/0x40 [ 2002.482923][T31482] _copy_from_user+0x33/0x150 [ 2002.487851][T31482] io_recvmsg_copy_hdr+0x1c8/0xe30 [ 2002.493229][T31482] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2002.499280][T31482] io_recvmsg+0x18b/0x3890 [ 2002.504007][T31482] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2002.510055][T31482] ? __rcu_read_unlock+0x7a/0xd0 [ 2002.515262][T31482] ? __fget_files+0x4d7/0x540 [ 2002.520173][T31482] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2002.526213][T31482] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2002.532255][T31482] ? io_assign_file+0x642/0x6b0 [ 2002.537365][T31482] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2002.543409][T31482] io_issue_sqe+0x321/0x1050 [ 2002.548249][T31482] io_submit_sqes+0x11e2/0x2e10 [ 2002.553404][T31482] ? kmsan_internal_poison_memory+0x90/0xa0 [ 2002.559783][T31482] __se_sys_io_uring_enter+0x4ed/0x4300 [ 2002.565638][T31482] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2002.571713][T31482] __ia32_sys_io_uring_enter+0x119/0x1a0 [ 2002.577586][T31482] __do_fast_syscall_32+0xa2/0x100 [ 2002.582947][T31482] ? irqentry_exit+0x16/0x40 [ 2002.587745][T31482] ? exc_page_fault+0x38a/0x600 [ 2002.592830][T31482] do_fast_syscall_32+0x37/0x80 [ 2002.597935][T31482] do_SYSENTER_32+0x1f/0x30 [ 2002.602684][T31482] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2002.609268][T31482] RIP: 0023:0xf7f78579 [ 2002.613527][T31482] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2002.633560][T31482] RSP: 002b:00000000f7f735cc EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 2002.642297][T31482] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000022ff [ 2002.650458][T31482] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2002.658698][T31482] RBP: 00000000ffffff71 R08: 0000000000000000 R09: 0000000000000000 [ 2002.666857][T31482] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2002.675018][T31482] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2002.683187][T31482] [ 2003.009240][T31483] bond420: entered promiscuous mode [ 2003.014840][T31483] bond420: entered allmulticast mode [ 2003.021415][T31483] 8021q: adding VLAN 0 to HW filter on device bond420 06:18:45 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000790000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:45 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="380000001214010000000000000000000900070073797a300000000008004100727865001400330073797a6b616c6c6572300000000000005c118b3027f6131fbd7929f1f4f5f70a3d9c3eca33f1b65b4b65b7ecf93c02af7ed50848827135bdfa2486bd268ab091d975a3f8248f7cf67312c6a604221f79fc1ef5a50c179a273d67c3eb09c36ed60479cef9d90d00710b71bc9a7d4df5af8cc1b55cd7ab2792691cd433c74c686a053653a4bfb9dc6d84dbc89c11ba4f1e900a87725459fbc88d0660adee046d31b1f4e2fbed48cd6da8275a227e4a09ed7a24f7e1ea795c03fe2b24159afd32d52055711a872197279b8bb32b2803940c11c639a272fcbb7569120aad095d4ac5f09302fdb659f5328c454abc715f27759ce44cbe10e7cd903ba3eb17dac63d2ed7722093f5bbf2ff9a3e4d91cb39ec57c0ba40d5fefab2e9828ac581757efe5d7c02586af9159b4e655e1427486b109909c780db9c"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x0, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:18:45 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2003.856688][T31499] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 06:18:46 executing program 0: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) (fail_nth: 4) 06:18:46 executing program 3: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:46 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:46 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000007a0000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2004.028979][T31501] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:18:46 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2004.259729][T31501] bond421: entered promiscuous mode [ 2004.265370][T31501] bond421: entered allmulticast mode [ 2004.271962][T31501] 8021q: adding VLAN 0 to HW filter on device bond421 06:18:46 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:46 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000007b0000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:46 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x0, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) [ 2004.832466][T31520] FAULT_INJECTION: forcing a failure. [ 2004.832466][T31520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2004.846785][T31520] CPU: 0 PID: 31520 Comm: syz-executor.0 Not tainted 6.3.0-rc7-syzkaller-g0255004d2a8e #0 [ 2004.856966][T31520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2004.867220][T31520] Call Trace: [ 2004.870647][T31520] [ 2004.873720][T31520] dump_stack_lvl+0x1cc/0x260 [ 2004.878760][T31520] dump_stack+0x1e/0x20 [ 2004.883286][T31520] should_fail_ex+0x748/0x7f0 [ 2004.888307][T31520] should_fail+0x2a/0x30 [ 2004.892773][T31520] should_fail_usercopy+0x2e/0x40 [ 2004.898113][T31520] _copy_from_user+0x33/0x150 [ 2004.903059][T31520] io_recvmsg_copy_hdr+0x1c8/0xe30 [ 2004.908471][T31520] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2004.914554][T31520] io_recvmsg+0x18b/0x3890 [ 2004.919300][T31520] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2004.925369][T31520] ? __rcu_read_unlock+0x7a/0xd0 [ 2004.930577][T31520] ? __fget_files+0x4d7/0x540 [ 2004.935483][T31520] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2004.941533][T31520] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2004.947582][T31520] ? io_assign_file+0x642/0x6b0 [ 2004.952663][T31520] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2004.958756][T31520] io_issue_sqe+0x321/0x1050 [ 2004.963579][T31520] io_submit_sqes+0x11e2/0x2e10 [ 2004.968704][T31520] ? kmsan_internal_poison_memory+0x90/0xa0 [ 2004.974909][T31520] __se_sys_io_uring_enter+0x4ed/0x4300 [ 2004.980721][T31520] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2004.986758][T31520] __ia32_sys_io_uring_enter+0x119/0x1a0 [ 2004.992653][T31520] __do_fast_syscall_32+0xa2/0x100 [ 2004.998031][T31520] ? irqentry_exit+0x16/0x40 [ 2005.002841][T31520] ? exc_page_fault+0x38a/0x600 [ 2005.007942][T31520] do_fast_syscall_32+0x37/0x80 [ 2005.013083][T31520] do_SYSENTER_32+0x1f/0x30 [ 2005.017869][T31520] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2005.024486][T31520] RIP: 0023:0xf7f78579 [ 2005.028756][T31520] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2005.048620][T31520] RSP: 002b:00000000f7f735cc EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 2005.057278][T31520] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000022ff [ 2005.065447][T31520] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2005.073617][T31520] RBP: 00000000ffffff71 R08: 0000000000000000 R09: 0000000000000000 [ 2005.082409][T31520] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2005.090572][T31520] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2005.098770][T31520] 06:18:47 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:47 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2005.533773][T31523] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 06:18:47 executing program 3: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2005.679104][T31526] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:18:47 executing program 0: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) (fail_nth: 5) 06:18:47 executing program 5: r0 = syz_io_uring_setup(0x2c3, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:47 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000e00000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2005.978537][T31526] bond422: entered promiscuous mode [ 2005.984168][T31526] bond422: entered allmulticast mode [ 2005.990623][T31526] 8021q: adding VLAN 0 to HW filter on device bond422 06:18:48 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2006.185601][T31534] FAULT_INJECTION: forcing a failure. [ 2006.185601][T31534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2006.199782][T31534] CPU: 1 PID: 31534 Comm: syz-executor.0 Not tainted 6.3.0-rc7-syzkaller-g0255004d2a8e #0 [ 2006.209979][T31534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2006.220297][T31534] Call Trace: [ 2006.223767][T31534] [ 2006.226884][T31534] dump_stack_lvl+0x1cc/0x260 [ 2006.231904][T31534] dump_stack+0x1e/0x20 [ 2006.236378][T31534] should_fail_ex+0x748/0x7f0 [ 2006.241369][T31534] should_fail+0x2a/0x30 [ 2006.245899][T31534] should_fail_usercopy+0x2e/0x40 [ 2006.251188][T31534] _copy_from_user+0x33/0x150 [ 2006.256110][T31534] io_recvmsg_copy_hdr+0x1c8/0xe30 [ 2006.261484][T31534] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2006.267539][T31534] io_recvmsg+0x18b/0x3890 [ 2006.272275][T31534] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2006.278407][T31534] ? __rcu_read_unlock+0x7a/0xd0 [ 2006.283604][T31534] ? __fget_files+0x4d7/0x540 [ 2006.288541][T31534] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2006.294627][T31534] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2006.300769][T31534] ? io_assign_file+0x642/0x6b0 [ 2006.305853][T31534] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2006.311916][T31534] io_issue_sqe+0x321/0x1050 [ 2006.316744][T31534] io_submit_sqes+0x11e2/0x2e10 [ 2006.321838][T31534] ? kmsan_internal_poison_memory+0x90/0xa0 [ 2006.328037][T31534] __se_sys_io_uring_enter+0x4ed/0x4300 [ 2006.333870][T31534] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2006.339927][T31534] __ia32_sys_io_uring_enter+0x119/0x1a0 [ 2006.345831][T31534] __do_fast_syscall_32+0xa2/0x100 [ 2006.351303][T31534] ? irqentry_exit+0x16/0x40 [ 2006.356107][T31534] ? exc_page_fault+0x38a/0x600 [ 2006.361170][T31534] do_fast_syscall_32+0x37/0x80 [ 2006.366271][T31534] do_SYSENTER_32+0x1f/0x30 [ 2006.371027][T31534] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2006.377683][T31534] RIP: 0023:0xf7f78579 [ 2006.381935][T31534] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2006.401778][T31534] RSP: 002b:00000000f7f735cc EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 2006.410441][T31534] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000022ff [ 2006.418616][T31534] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2006.426780][T31534] RBP: 00000000ffffff71 R08: 0000000000000000 R09: 0000000000000000 [ 2006.434953][T31534] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2006.443108][T31534] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2006.451369][T31534] 06:18:48 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x0, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:18:48 executing program 5: r0 = syz_io_uring_setup(0x2c3, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:49 executing program 3: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:49 executing program 0: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) (fail_nth: 6) 06:18:49 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000f10000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2007.234988][T31545] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 2007.385591][T31549] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:18:49 executing program 3: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2007.541777][T31549] bond423: entered promiscuous mode [ 2007.547610][T31549] bond423: entered allmulticast mode [ 2007.554614][T31549] 8021q: adding VLAN 0 to HW filter on device bond423 06:18:49 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:49 executing program 5: r0 = syz_io_uring_setup(0x2c3, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2007.802563][T31558] FAULT_INJECTION: forcing a failure. [ 2007.802563][T31558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2007.816575][T31558] CPU: 0 PID: 31558 Comm: syz-executor.0 Not tainted 6.3.0-rc7-syzkaller-g0255004d2a8e #0 [ 2007.826756][T31558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2007.837024][T31558] Call Trace: [ 2007.840465][T31558] [ 2007.843544][T31558] dump_stack_lvl+0x1cc/0x260 [ 2007.848512][T31558] dump_stack+0x1e/0x20 [ 2007.852915][T31558] should_fail_ex+0x748/0x7f0 [ 2007.857834][T31558] should_fail+0x2a/0x30 [ 2007.862300][T31558] should_fail_usercopy+0x2e/0x40 [ 2007.867738][T31558] _copy_from_user+0x33/0x150 [ 2007.872711][T31558] io_recvmsg_copy_hdr+0x1c8/0xe30 [ 2007.878160][T31558] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2007.884364][T31558] io_recvmsg+0x18b/0x3890 [ 2007.889223][T31558] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2007.895297][T31558] ? __rcu_read_unlock+0x7a/0xd0 [ 2007.900522][T31558] ? __fget_files+0x4d7/0x540 [ 2007.905442][T31558] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2007.911962][T31558] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2007.918067][T31558] ? io_assign_file+0x642/0x6b0 [ 2007.923187][T31558] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2007.929278][T31558] io_issue_sqe+0x321/0x1050 [ 2007.934245][T31558] io_submit_sqes+0x11e2/0x2e10 [ 2007.939403][T31558] ? kmsan_internal_poison_memory+0x90/0xa0 [ 2007.945617][T31558] __se_sys_io_uring_enter+0x4ed/0x4300 [ 2007.951452][T31558] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2007.957521][T31558] __ia32_sys_io_uring_enter+0x119/0x1a0 [ 2007.963435][T31558] __do_fast_syscall_32+0xa2/0x100 [ 2007.968915][T31558] ? irqentry_exit+0x16/0x40 [ 2007.973729][T31558] ? exc_page_fault+0x38a/0x600 [ 2007.978821][T31558] do_fast_syscall_32+0x37/0x80 [ 2007.983941][T31558] do_SYSENTER_32+0x1f/0x30 [ 2007.988694][T31558] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2007.995312][T31558] RIP: 0023:0xf7f78579 [ 2007.999561][T31558] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2008.019429][T31558] RSP: 002b:00000000f7f735cc EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 2008.028109][T31558] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000022ff [ 2008.036280][T31558] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2008.044533][T31558] RBP: 00000000ffffff71 R08: 0000000000000000 R09: 0000000000000000 [ 2008.052708][T31558] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2008.060881][T31558] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2008.069062][T31558] 06:18:50 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000680200000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:50 executing program 3: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:50 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x0, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:18:50 executing program 0: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) (fail_nth: 7) 06:18:50 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:50 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:50 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000ac0200000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:51 executing program 3: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2009.040868][T31574] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 2009.145348][T31576] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2009.288563][T31576] bond424: entered promiscuous mode [ 2009.294225][T31576] bond424: entered allmulticast mode [ 2009.300736][T31576] 8021q: adding VLAN 0 to HW filter on device bond424 06:18:51 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2009.510994][T31587] FAULT_INJECTION: forcing a failure. [ 2009.510994][T31587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2009.530944][T31587] CPU: 1 PID: 31587 Comm: syz-executor.0 Not tainted 6.3.0-rc7-syzkaller-g0255004d2a8e #0 [ 2009.541143][T31587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2009.551442][T31587] Call Trace: [ 2009.554911][T31587] [ 2009.558029][T31587] dump_stack_lvl+0x1cc/0x260 [ 2009.563133][T31587] dump_stack+0x1e/0x20 [ 2009.567608][T31587] should_fail_ex+0x748/0x7f0 [ 2009.572627][T31587] should_fail+0x2a/0x30 [ 2009.577152][T31587] should_fail_usercopy+0x2e/0x40 [ 2009.582477][T31587] _copy_from_user+0x33/0x150 [ 2009.587566][T31587] io_recvmsg_copy_hdr+0x1c8/0xe30 [ 2009.593014][T31587] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2009.599149][T31587] io_recvmsg+0x18b/0x3890 [ 2009.603939][T31587] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2009.610036][T31587] ? __rcu_read_unlock+0x7a/0xd0 [ 2009.615268][T31587] ? __fget_files+0x4d7/0x540 [ 2009.620192][T31587] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2009.626243][T31587] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2009.632300][T31587] ? io_assign_file+0x642/0x6b0 [ 2009.637407][T31587] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2009.643474][T31587] io_issue_sqe+0x321/0x1050 [ 2009.648307][T31587] io_submit_sqes+0x11e2/0x2e10 [ 2009.653420][T31587] ? kmsan_internal_poison_memory+0x90/0xa0 [ 2009.659624][T31587] __se_sys_io_uring_enter+0x4ed/0x4300 [ 2009.665442][T31587] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2009.671488][T31587] __ia32_sys_io_uring_enter+0x119/0x1a0 [ 2009.677362][T31587] __do_fast_syscall_32+0xa2/0x100 [ 2009.682748][T31587] ? irqentry_exit+0x16/0x40 [ 2009.687554][T31587] ? exc_page_fault+0x38a/0x600 [ 2009.692630][T31587] do_fast_syscall_32+0x37/0x80 [ 2009.697745][T31587] do_SYSENTER_32+0x1f/0x30 [ 2009.702501][T31587] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2009.709133][T31587] RIP: 0023:0xf7f78579 [ 2009.713390][T31587] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2009.733275][T31587] RSP: 002b:00000000f7f735cc EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 2009.742121][T31587] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000022ff [ 2009.750298][T31587] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 06:18:51 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2009.758538][T31587] RBP: 00000000ffffff71 R08: 0000000000000000 R09: 0000000000000000 [ 2009.766705][T31587] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2009.774867][T31587] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2009.783067][T31587] 06:18:51 executing program 3: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:52 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:18:52 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000300000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:52 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:52 executing program 0: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) (fail_nth: 8) 06:18:52 executing program 3: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(0xffffffffffffffff, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:52 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2010.786433][T31602] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 06:18:52 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2010.896892][T31604] FAULT_INJECTION: forcing a failure. [ 2010.896892][T31604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2010.910527][T31604] CPU: 0 PID: 31604 Comm: syz-executor.0 Not tainted 6.3.0-rc7-syzkaller-g0255004d2a8e #0 [ 2010.920716][T31604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2010.931017][T31604] Call Trace: [ 2010.934564][T31604] [ 2010.937670][T31604] dump_stack_lvl+0x1cc/0x260 [ 2010.942657][T31604] dump_stack+0x1e/0x20 [ 2010.947114][T31604] should_fail_ex+0x748/0x7f0 [ 2010.952100][T31604] should_fail+0x2a/0x30 [ 2010.956614][T31604] should_fail_usercopy+0x2e/0x40 [ 2010.961932][T31604] _copy_from_user+0x33/0x150 [ 2010.966923][T31604] io_recvmsg_copy_hdr+0x1c8/0xe30 [ 2010.972369][T31604] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2010.978511][T31604] io_recvmsg+0x18b/0x3890 [ 2010.983289][T31604] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2010.989396][T31604] ? __rcu_read_unlock+0x7a/0xd0 06:18:53 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000002e0300000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2010.994679][T31604] ? __fget_files+0x4d7/0x540 [ 2010.999645][T31604] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2011.005749][T31604] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2011.011855][T31604] ? io_assign_file+0x642/0x6b0 [ 2011.016987][T31604] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2011.023266][T31604] io_issue_sqe+0x321/0x1050 [ 2011.028160][T31604] io_submit_sqes+0x11e2/0x2e10 [ 2011.033596][T31604] ? kmsan_internal_poison_memory+0x90/0xa0 [ 2011.039859][T31604] __se_sys_io_uring_enter+0x4ed/0x4300 [ 2011.045731][T31604] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2011.051910][T31604] __ia32_sys_io_uring_enter+0x119/0x1a0 [ 2011.057849][T31604] __do_fast_syscall_32+0xa2/0x100 [ 2011.063261][T31604] ? irqentry_exit+0x16/0x40 [ 2011.068083][T31604] ? exc_page_fault+0x38a/0x600 [ 2011.073157][T31604] do_fast_syscall_32+0x37/0x80 [ 2011.078259][T31604] do_SYSENTER_32+0x1f/0x30 [ 2011.083019][T31604] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2011.089706][T31604] RIP: 0023:0xf7f78579 [ 2011.093963][T31604] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2011.113804][T31604] RSP: 002b:00000000f7f735cc EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 2011.122469][T31604] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000022ff [ 2011.130634][T31604] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2011.138787][T31604] RBP: 00000000ffffff71 R08: 0000000000000000 R09: 0000000000000000 [ 2011.146949][T31604] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2011.155142][T31604] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2011.163376][T31604] 06:18:53 executing program 3: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:53 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:53 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="380000001214010000000000000000000900070073797a300000000008004100727865001400330073797a6b616c6c6572300000000000005c118b3027f6131fbd7929f1f4f5f70a3d9c3eca33f1b65b4b65b7ecf93c02af7ed50848827135bdfa2486bd268ab091d975a3f8248f7cf67312c6a604221f79fc1ef5a50c179a273d67c3eb09c36ed60479cef9d90d00710b71bc9a7d4df5af8cc1b55cd7ab2792691cd433c74c686a053653a4bfb9dc6d84dbc89c11ba4f1e900a87725459fbc88d0660adee046d31b1f4e2fbed48cd6da8275a227e4a09ed7a24f7e1ea795c03fe2b24159afd32d52055711a872197279b8bb32b2803940c11c639a272fcbb7569120aad095d4ac5f09302fdb659f5328c454abc715f27759ce44cbe10e7cd903ba3eb17dac63d2ed7722093f5bbf2ff9a3e4d91cb39ec57c0ba40d5fefab2e9828ac581757efe5d7c02586af9159b4e655e1427486b109909c780db9c"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:18:54 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000500000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:54 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:54 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2012.294090][T31625] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 2012.428783][T31628] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:18:54 executing program 3: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2012.577997][T31628] bond425: entered promiscuous mode [ 2012.584056][T31628] bond425: entered allmulticast mode [ 2012.593525][T31628] 8021q: adding VLAN 0 to HW filter on device bond425 06:18:55 executing program 0: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:55 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000600000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:55 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:55 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:55 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:18:55 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:55 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000700000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:55 executing program 3: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2013.641154][T31650] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 06:18:55 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2013.778190][T31652] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2013.957652][T31652] bond426: entered promiscuous mode [ 2013.963242][T31652] bond426: entered allmulticast mode [ 2013.969793][T31652] 8021q: adding VLAN 0 to HW filter on device bond426 06:18:56 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000a00000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:56 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:56 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:56 executing program 0: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:56 executing program 3: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:56 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000f00000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:56 executing program 4: syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:56 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x104, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:18:56 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2015.369989][T31682] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 06:18:57 executing program 4: syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2015.490650][T31682] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:18:57 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000001200000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:57 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2015.657661][T31682] bond427: entered promiscuous mode [ 2015.666142][T31682] bond427: entered allmulticast mode [ 2015.672804][T31682] 8021q: adding VLAN 0 to HW filter on device bond427 06:18:57 executing program 0: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x2000, 0x0, 0x0, 0xffffffffffffff71) 06:18:58 executing program 3: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:58 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="380000001214010000000000000000000900070073797a300000000008004100727865001400330073797a6b616c6c6572300000000000005c118b3027f6131fbd7929f1f4f5f70a3d9c3eca33f1b65b4b65b7ecf93c02af7ed50848827135bdfa2486bd268ab091d975a3f8248f7cf67312c6a604221f79fc1ef5a50c179a273d67c3eb09c36ed60479cef9d90d00710b71bc9a7d4df5af8cc1b55cd7ab2792691cd433c74c686a053653a4bfb9dc6d84dbc89c11ba4f1e900a87725459fbc88d0660adee046d31b1f4e2fbed48cd6da8275a227e4a09ed7a24f7e1ea795c03fe2b24159afd32d52055711a872197279b8bb32b2803940c11c639a272fcbb7569120aad095d4ac5f09302fdb659f5328c454abc715f27759ce44cbe10e7cd903ba3eb17dac63d2ed7722093f5bbf2ff9a3e4d91cb39ec57c0ba40d5fefab2e9828ac581757efe5d7c02586af9159b4e655e1427486b109909c780db9c"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x104, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:18:58 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000001700000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:58 executing program 0: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x20000000, 0x0, 0x0, 0xffffffffffffff71) 06:18:58 executing program 4: syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:59 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2017.052416][T31713] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 06:18:59 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:18:59 executing program 3: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2017.228094][T31713] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:18:59 executing program 0: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2017.330946][T31713] bond428: entered promiscuous mode [ 2017.336547][T31713] bond428: entered allmulticast mode [ 2017.343286][T31713] 8021q: adding VLAN 0 to HW filter on device bond428 06:18:59 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000001800000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:18:59 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="380000001214010000000000000000000900070073797a300000000008004100727865001400330073797a6b616c6c6572300000000000005c118b3027f6131fbd7929f1f4f5f70a3d9c3eca33f1b65b4b65b7ecf93c02af7ed50848827135bdfa2486bd268ab091d975a3f8248f7cf67312c6a604221f79fc1ef5a50c179a273d67c3eb09c36ed60479cef9d90d00710b71bc9a7d4df5af8cc1b55cd7ab2792691cd433c74c686a053653a4bfb9dc6d84dbc89c11ba4f1e900a87725459fbc88d0660adee046d31b1f4e2fbed48cd6da8275a227e4a09ed7a24f7e1ea795c03fe2b24159afd32d52055711a872197279b8bb32b2803940c11c639a272fcbb7569120aad095d4ac5f09302fdb659f5328c454abc715f27759ce44cbe10e7cd903ba3eb17dac63d2ed7722093f5bbf2ff9a3e4d91cb39ec57c0ba40d5fefab2e9828ac581757efe5d7c02586af9159b4e655e1427486b109909c780db9c"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x104, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:18:59 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:00 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:00 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000001f00000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2018.285828][T31734] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 2018.457784][T31737] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:19:00 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2018.624927][T31737] bond429: entered promiscuous mode [ 2018.630506][T31737] bond429: entered allmulticast mode [ 2018.637176][T31737] 8021q: adding VLAN 0 to HW filter on device bond429 06:19:00 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000002000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:19:00 executing program 0: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x2000, 0x0, 0xffffffffffffff71) 06:19:01 executing program 3: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:01 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) getsockname$packet(r12, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0xd8, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r14 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r15, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r15}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:19:01 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:01 executing program 4: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:01 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000002b00000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:19:01 executing program 0: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x20000000, 0x0, 0xffffffffffffff71) 06:19:01 executing program 3: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2019.710604][T31761] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 2019.867870][T31766] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:19:02 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2020.172594][T31766] bond430: entered promiscuous mode [ 2020.178179][T31766] bond430: entered allmulticast mode [ 2020.184830][T31766] 8021q: adding VLAN 0 to HW filter on device bond430 06:19:02 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000032e00000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:19:02 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) (fail_nth: 1) 06:19:02 executing program 3: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:02 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="380000001214010000000000000000000900070073797a300000000008004100727865001400330073797a6b616c6c6572300000000000005c118b3027f6131fbd7929f1f4f5f70a3d9c3eca33f1b65b4b65b7ecf93c02af7ed50848827135bdfa2486bd268ab091d975a3f8248f7cf67312c6a604221f79fc1ef5a50c179a273d67c3eb09c36ed60479cef9d90d00710b71bc9a7d4df5af8cc1b55cd7ab2792691cd433c74c686a053653a4bfb9dc6d84dbc89c11ba4f1e900a87725459fbc88d0660adee046d31b1f4e2fbed48cd6da8275a227e4a09ed7a24f7e1ea795c03fe2b24159afd32d52055711a872197279b8bb32b2803940c11c639a272fcbb7569120aad095d4ac5f09302fdb659f5328c454abc715f27759ce44cbe10e7cd903ba3eb17dac63d2ed7722093f5bbf2ff9a3e4d91cb39ec57c0ba40d5fefab2e9828ac581757efe5d7c02586af9159b4e655e1427486b109909c780db9c"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) getsockname$packet(r12, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0xd8, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r14 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r15, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r15}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:19:02 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000003c00000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:19:02 executing program 0: r0 = dup(0xffffffffffffffff) r1 = syz_io_uring_setup(0x2c5, &(0x7f0000000300)={0x0, 0xb67, 0x200, 0xfffffffb, 0x30b, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_setup(0x3403, &(0x7f0000000200)={0x0, 0xa424, 0x85cbdd08c48dc410, 0x2, 0x190, 0x0, r4}) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000f, 0x10, r4, 0x8000000) r7 = syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r11 = openat2(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', &(0x7f0000000600)={0xa0a81, 0x89, 0x10}, 0x18) io_uring_enter(r11, 0x4fbf, 0x6dba, 0x2, &(0x7f0000000640)={[0x1ff, 0xffff8b51]}, 0x8) syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') lseek(r12, 0x8, 0x0) faccessat2(r12, &(0x7f0000000740)='./bus\x00', 0x0, 0x3200) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./bus\x00', 0x0, 0x10}, 0x10) dup(r0) r14 = openat$vcs(0xffffff9c, &(0x7f00000006c0), 0x141883, 0x0) ioctl$int_in(r14, 0x5421, &(0x7f0000000700)=0x1200000000) syz_io_uring_submit(r6, r9, &(0x7f00000000c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r13, 0x0, 0x0, 0xcdd2, 0x2, 0x0, {0x0, 0x0, r4}}, 0x80) r15 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [{{0x9, 0x7, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r15, 0x4004f50d, &(0x7f0000000680)=0x1) execve(&(0x7f0000000140)='./bus\x00', &(0x7f00000003c0)=[&(0x7f0000000280)='],\x00', &(0x7f0000000380)='\x00'], &(0x7f0000000580)=[&(0x7f0000000400)='#%*\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)='%({[]/$.*\x00', &(0x7f00000004c0)='-!/^\x8c\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='\xe1\x00']) 06:19:03 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:03 executing program 3: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2c3, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:03 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2021.377407][T31790] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 2021.450430][T31789] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 2021.490135][T31793] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:19:03 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000003f00000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2021.666526][T31793] bond431: entered promiscuous mode [ 2021.672064][T31793] bond431: entered allmulticast mode [ 2021.678772][T31793] 8021q: adding VLAN 0 to HW filter on device bond431 06:19:03 executing program 0: r0 = dup(0xffffffffffffffff) r1 = syz_io_uring_setup(0x2c5, &(0x7f0000000300)={0x0, 0xb67, 0x200, 0xfffffffb, 0x30b, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) (async) io_uring_setup(0x3403, &(0x7f0000000200)={0x0, 0xa424, 0x85cbdd08c48dc410, 0x2, 0x190, 0x0, r4}) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) (async) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000f, 0x10, r4, 0x8000000) (async) r7 = syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r11 = openat2(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', &(0x7f0000000600)={0xa0a81, 0x89, 0x10}, 0x18) io_uring_enter(r11, 0x4fbf, 0x6dba, 0x2, &(0x7f0000000640)={[0x1ff, 0xffff8b51]}, 0x8) syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') lseek(r12, 0x8, 0x0) (async, rerun: 32) faccessat2(r12, &(0x7f0000000740)='./bus\x00', 0x0, 0x3200) (async, rerun: 32) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./bus\x00', 0x0, 0x10}, 0x10) dup(r0) r14 = openat$vcs(0xffffff9c, &(0x7f00000006c0), 0x141883, 0x0) ioctl$int_in(r14, 0x5421, &(0x7f0000000700)=0x1200000000) (async) syz_io_uring_submit(r6, r9, &(0x7f00000000c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r13, 0x0, 0x0, 0xcdd2, 0x2, 0x0, {0x0, 0x0, r4}}, 0x80) r15 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [{{0x9, 0x7, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) (async) ioctl$F2FS_IOC_SET_PIN_FILE(r15, 0x4004f50d, &(0x7f0000000680)=0x1) execve(&(0x7f0000000140)='./bus\x00', &(0x7f00000003c0)=[&(0x7f0000000280)='],\x00', &(0x7f0000000380)='\x00'], &(0x7f0000000580)=[&(0x7f0000000400)='#%*\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)='%({[]/$.*\x00', &(0x7f00000004c0)='-!/^\x8c\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='\xe1\x00']) 06:19:04 executing program 3: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2c3, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:04 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:04 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000004000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:19:04 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:04 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="380000001214010000000000000000000900070073797a300000000008004100727865001400330073797a6b616c6c6572300000000000005c118b3027f6131fbd7929f1f4f5f70a3d9c3eca33f1b65b4b65b7ecf93c02af7ed50848827135bdfa2486bd268ab091d975a3f8248f7cf67312c6a604221f79fc1ef5a50c179a273d67c3eb09c36ed60479cef9d90d00710b71bc9a7d4df5af8cc1b55cd7ab2792691cd433c74c686a053653a4bfb9dc6d84dbc89c11ba4f1e900a87725459fbc88d0660adee046d31b1f4e2fbed48cd6da8275a227e4a09ed7a24f7e1ea795c03fe2b24159afd32d52055711a872197279b8bb32b2803940c11c639a272fcbb7569120aad095d4ac5f09302fdb659f5328c454abc715f27759ce44cbe10e7cd903ba3eb17dac63d2ed7722093f5bbf2ff9a3e4d91cb39ec57c0ba40d5fefab2e9828ac581757efe5d7c02586af9159b4e655e1427486b109909c780db9c"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) getsockname$packet(r12, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0xd8, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r14 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r15, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r15}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) [ 2022.433934][T31809] netlink: 'syz-executor.0': attribute type 7 has an invalid length. 06:19:04 executing program 3: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2c3, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:04 executing program 0: r0 = dup(0xffffffffffffffff) syz_io_uring_setup(0x2c5, &(0x7f0000000300)={0x0, 0xb67, 0x200, 0xfffffffb, 0x30b, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000000)) (async) r1 = syz_io_uring_setup(0x2c5, &(0x7f0000000300)={0x0, 0xb67, 0x200, 0xfffffffb, 0x30b, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) r5 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_setup(0x3403, &(0x7f0000000200)={0x0, 0xa424, 0x85cbdd08c48dc410, 0x2, 0x190, 0x0, r4}) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000f, 0x10, r4, 0x8000000) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) (async) r7 = syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r11 = openat2(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', &(0x7f0000000600)={0xa0a81, 0x89, 0x10}, 0x18) io_uring_enter(r11, 0x4fbf, 0x6dba, 0x2, &(0x7f0000000640)={[0x1ff, 0xffff8b51]}, 0x8) (async) io_uring_enter(r11, 0x4fbf, 0x6dba, 0x2, &(0x7f0000000640)={[0x1ff, 0xffff8b51]}, 0x8) syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') lseek(r12, 0x8, 0x0) (async) lseek(r12, 0x8, 0x0) faccessat2(r12, &(0x7f0000000740)='./bus\x00', 0x0, 0x3200) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./bus\x00', 0x0, 0x10}, 0x10) (async) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./bus\x00', 0x0, 0x10}, 0x10) dup(r0) r14 = openat$vcs(0xffffff9c, &(0x7f00000006c0), 0x141883, 0x0) ioctl$int_in(r14, 0x5421, &(0x7f0000000700)=0x1200000000) (async) ioctl$int_in(r14, 0x5421, &(0x7f0000000700)=0x1200000000) syz_io_uring_submit(r6, r9, &(0x7f00000000c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r13, 0x0, 0x0, 0xcdd2, 0x2, 0x0, {0x0, 0x0, r4}}, 0x80) r15 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [{{0x9, 0x7, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r15, 0x4004f50d, &(0x7f0000000680)=0x1) execve(&(0x7f0000000140)='./bus\x00', &(0x7f00000003c0)=[&(0x7f0000000280)='],\x00', &(0x7f0000000380)='\x00'], &(0x7f0000000580)=[&(0x7f0000000400)='#%*\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)='%({[]/$.*\x00', &(0x7f00000004c0)='-!/^\x8c\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='\xe1\x00']) 06:19:04 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000ff6000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2022.894045][T31822] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 06:19:05 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2023.014037][T31825] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:19:05 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x2, 0x0, 0x0, 0xffffffffffffff71) [ 2023.176885][T31825] bond432: entered promiscuous mode [ 2023.182375][T31825] bond432: entered allmulticast mode [ 2023.189179][T31825] 8021q: adding VLAN 0 to HW filter on device bond432 06:19:05 executing program 3: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2023.397810][T31831] netlink: 'syz-executor.0': attribute type 7 has an invalid length. 06:19:05 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000006100000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:19:05 executing program 0: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) r4 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x8000, 0x0) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000080), 0x4) 06:19:05 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x4, 0x0, 0x0, 0xffffffffffffff71) 06:19:05 executing program 3: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:06 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x100, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:19:06 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:06 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000006200000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:19:06 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x6, 0x0, 0x0, 0xffffffffffffff71) [ 2024.601225][T31854] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 06:19:06 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:06 executing program 3: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2024.759017][T31857] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:19:07 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000006300000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2024.944669][T31857] bond433: entered promiscuous mode [ 2024.950260][T31857] bond433: entered allmulticast mode [ 2024.957404][T31857] 8021q: adding VLAN 0 to HW filter on device bond433 06:19:07 executing program 3: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:07 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0xc, 0x0, 0x0, 0xffffffffffffff71) 06:19:07 executing program 0: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) (async) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) (async) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 32) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) (async, rerun: 32) r4 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x8000, 0x0) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000080), 0x4) 06:19:07 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x100, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:19:07 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000026800000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:19:07 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2025.995094][T31878] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 06:19:08 executing program 3: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2026.125817][T31878] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:19:08 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x12, 0x0, 0x0, 0xffffffffffffff71) 06:19:08 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000006900000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2026.263698][T31878] bond434: entered promiscuous mode [ 2026.269183][T31878] bond434: entered allmulticast mode [ 2026.275937][T31878] 8021q: adding VLAN 0 to HW filter on device bond434 06:19:08 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x18, 0x0, 0x0, 0xffffffffffffff71) 06:19:08 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:08 executing program 0: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) (async) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) (async) r4 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x8000, 0x0) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000080), 0x4) 06:19:08 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x100, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:19:08 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000006a00000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:19:09 executing program 3: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:09 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x1e, 0x0, 0x0, 0xffffffffffffff71) 06:19:09 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000006b00000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2027.578253][T31916] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 06:19:09 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2027.796086][T31916] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:19:10 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x24, 0x0, 0x0, 0xffffffffffffff71) [ 2027.956206][T31916] bond435: entered promiscuous mode [ 2027.961699][T31916] bond435: entered allmulticast mode [ 2027.968498][T31916] 8021q: adding VLAN 0 to HW filter on device bond435 06:19:10 executing program 3: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:10 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000007100000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:19:10 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="380000001214010000000000000000000900070073797a300000000008004100727865001400330073797a6b616c6c6572300000000000005c118b3027f6131fbd7929f1f4f5f70a3d9c3eca33f1b65b4b65b7ecf93c02af7ed50848827135bdfa2486bd268ab091d975a3f8248f7cf67312c6a604221f79fc1ef5a50c179a273d67c3eb09c36ed60479cef9d90d00710b71bc9a7d4df5af8cc1b55cd7ab2792691cd433c74c686a053653a4bfb9dc6d84dbc89c11ba4f1e900a87725459fbc88d0660adee046d31b1f4e2fbed48cd6da8275a227e4a09ed7a24f7e1ea795c03fe2b24159afd32d52055711a872197279b8bb32b2803940c11c639a272fcbb7569120aad095d4ac5f09302fdb659f5328c454abc715f27759ce44cbe10e7cd903ba3eb17dac63d2ed7722093f5bbf2ff9a3e4d91cb39ec57c0ba40d5fefab2e9828ac581757efe5d7c02586af9159b4e655e1427486b109909c780db9c"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:19:10 executing program 0: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) syz_io_uring_setup(0x190c, &(0x7f0000000040)={0x0, 0xcb70, 0x20, 0x0, 0xb7}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000140)) r6 = syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') lseek(r10, 0x8, 0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000240)=@IORING_OP_LINKAT={0x27, 0x8, 0x0, r3, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='./bus\x00', r10, 0x400, 0x727c6e6407dbb4b}, 0x7) 06:19:10 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:10 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x2a, 0x0, 0x0, 0xffffffffffffff71) 06:19:11 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000007200000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:19:11 executing program 3: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2029.121229][T31939] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 2029.281693][T31940] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2029.436845][T31940] bond436: entered promiscuous mode [ 2029.442319][T31940] bond436: entered allmulticast mode [ 2029.449042][T31940] 8021q: adding VLAN 0 to HW filter on device bond436 06:19:11 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x30, 0x0, 0x0, 0xffffffffffffff71) 06:19:11 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:11 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000007300000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:19:11 executing program 3: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:12 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:19:12 executing program 0: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) (async) r4 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) (async) syz_io_uring_setup(0x190c, &(0x7f0000000040)={0x0, 0xcb70, 0x20, 0x0, 0xb7}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000140)) (async) r6 = syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x0) (async) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') lseek(r10, 0x8, 0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000240)=@IORING_OP_LINKAT={0x27, 0x8, 0x0, r3, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='./bus\x00', r10, 0x400, 0x727c6e6407dbb4b}, 0x7) 06:19:12 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x36, 0x0, 0x0, 0xffffffffffffff71) 06:19:12 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000007900000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2030.464107][T31965] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 06:19:12 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2030.677716][T31971] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:19:12 executing program 3: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2031.009607][T31971] bond437: entered promiscuous mode [ 2031.015422][T31971] bond437: entered allmulticast mode [ 2031.022408][T31971] 8021q: adding VLAN 0 to HW filter on device bond437 06:19:13 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x3c, 0x0, 0x0, 0xffffffffffffff71) 06:19:13 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000007a00000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:19:13 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:19:13 executing program 0: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) (async) r4 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) syz_io_uring_setup(0x190c, &(0x7f0000000040)={0x0, 0xcb70, 0x20, 0x0, 0xb7}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000140)) (async) r6 = syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x0) (async) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') lseek(r10, 0x8, 0x0) (async) syz_io_uring_submit(r5, r8, &(0x7f0000000240)=@IORING_OP_LINKAT={0x27, 0x8, 0x0, r3, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='./bus\x00', r10, 0x400, 0x727c6e6407dbb4b}, 0x7) 06:19:13 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000007b00000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:19:13 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x600, 0x0, 0x0, 0xffffffffffffff71) [ 2031.981540][T31993] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 06:19:14 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:14 executing program 3: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2032.408205][T31999] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:19:14 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000002ac00000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2032.553557][T31999] bond438: entered promiscuous mode [ 2032.559041][T31999] bond438: entered allmulticast mode [ 2032.565703][T31999] 8021q: adding VLAN 0 to HW filter on device bond438 06:19:14 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0xc00, 0x0, 0x0, 0xffffffffffffff71) 06:19:14 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) getsockname$packet(r12, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x100, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r14 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r15, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r15}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:19:15 executing program 0: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') lseek(r5, 0x8, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./bus\x00', r5, 0x0, 0x1, {0x0, r6}}, 0x401) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0xa, 0x1, 0x0, 0x8}, 0x4) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:15 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000e000000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:19:15 executing program 3: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2033.619860][T32021] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 06:19:15 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x1200, 0x0, 0x0, 0xffffffffffffff71) [ 2033.917906][T32026] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:19:16 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000f100000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2034.061116][T32026] bond439: entered promiscuous mode [ 2034.067125][T32026] bond439: entered allmulticast mode [ 2034.073921][T32026] 8021q: adding VLAN 0 to HW filter on device bond439 06:19:16 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:16 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x1800, 0x0, 0x0, 0xffffffffffffff71) 06:19:16 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff00000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:19:16 executing program 3: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:16 executing program 0: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) (async) r3 = openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) (async) r4 = socket$igmp(0x2, 0x3, 0x2) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') lseek(r5, 0x8, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./bus\x00', r5, 0x0, 0x1, {0x0, r6}}, 0x401) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0xa, 0x1, 0x0, 0x8}, 0x4) (async) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:16 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) getsockname$packet(r12, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x100, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r14 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r15, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r15}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:19:17 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x1e00, 0x0, 0x0, 0xffffffffffffff71) 06:19:17 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000004000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:19:17 executing program 3: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2035.399556][T32056] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 06:19:17 executing program 0: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') lseek(r5, 0x8, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./bus\x00', r5, 0x0, 0x1, {0x0, r6}}, 0x401) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0xa, 0x1, 0x0, 0x8}, 0x4) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) (async) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') (async) lseek(r5, 0x8, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./bus\x00', r5, 0x0, 0x1, {0x0, r6}}, 0x401) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0xa, 0x1, 0x0, 0x8}, 0x4) (async) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) (async) [ 2035.520755][T32056] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:19:17 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2035.717827][T32056] bond440: entered promiscuous mode [ 2035.723498][T32056] bond440: entered allmulticast mode [ 2035.730001][T32056] 8021q: adding VLAN 0 to HW filter on device bond440 06:19:17 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x2000, 0x0, 0x0, 0xffffffffffffff71) 06:19:17 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000010000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:19:18 executing program 3: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:18 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) getsockname$packet(r12, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x100, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r14 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r15, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r15}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:19:18 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x2400, 0x0, 0x0, 0xffffffffffffff71) 06:19:18 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:18 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000004cd411000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2037.120896][T32087] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 06:19:19 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x2a00, 0x0, 0x0, 0xffffffffffffff71) [ 2037.240333][T32095] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:19:19 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000aad31a000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2037.377196][T32095] bond441: entered promiscuous mode [ 2037.382802][T32095] bond441: entered allmulticast mode [ 2037.389326][T32095] 8021q: adding VLAN 0 to HW filter on device bond441 06:19:19 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x3000, 0x0, 0x0, 0xffffffffffffff71) 06:19:20 executing program 0: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)=ANY=[@ANYBLOB="7eeed9446184cd6663b43000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r1 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, r0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:20 executing program 3: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:20 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:20 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000601d000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:19:20 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) getsockname$packet(r12, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r14 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r15, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r15}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:19:20 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x3600, 0x0, 0x0, 0xffffffffffffff71) [ 2038.571318][T32117] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 2038.706737][T32123] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:19:20 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000020000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:19:20 executing program 3: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2038.894228][T32123] bond442: entered promiscuous mode [ 2038.899816][T32123] bond442: entered allmulticast mode [ 2038.909342][T32123] 8021q: adding VLAN 0 to HW filter on device bond442 06:19:21 executing program 0: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)=ANY=[@ANYBLOB="7eeed9446184cd6663b43000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r1 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, r0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) (async) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) (async) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:21 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:21 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x3c00, 0x0, 0x0, 0xffffffffffffff71) 06:19:21 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="380000001214010000000000000000000900070073797a300000000008004100727865001400330073797a6b616c6c6572300000000000005c118b3027f6131fbd7929f1f4f5f70a3d9c3eca33f1b65b4b65b7ecf93c02af7ed50848827135bdfa2486bd268ab091d975a3f8248f7cf67312c6a604221f79fc1ef5a50c179a273d67c3eb09c36ed60479cef9d90d00710b71bc9a7d4df5af8cc1b55cd7ab2792691cd433c74c686a053653a4bfb9dc6d84dbc89c11ba4f1e900a87725459fbc88d0660adee046d31b1f4e2fbed48cd6da8275a227e4a09ed7a24f7e1ea795c03fe2b24159afd32d52055711a872197279b8bb32b2803940c11c639a272fcbb7569120aad095d4ac5f09302fdb659f5328c454abc715f27759ce44cbe10e7cd903ba3eb17dac63d2ed7722093f5bbf2ff9a3e4d91cb39ec57c0ba40d5fefab2e9828ac581757efe5d7c02586af9159b4e655e1427486b109909c780db9c"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) getsockname$packet(r12, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r14 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r15, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r15}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:19:21 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000040000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:19:21 executing program 0: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)=ANY=[@ANYBLOB="7eeed9446184cd6663b43000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) r1 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, r0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) (async) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) (async, rerun: 64) r4 = socket$igmp(0x2, 0x3, 0x2) (rerun: 64) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) (async) io_uring_enter(r1, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:22 executing program 3: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2040.233741][T32146] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 06:19:22 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x60ff, 0x0, 0x0, 0xffffffffffffff71) 06:19:22 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000001d60000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2040.400151][T32149] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2040.564033][T32149] bond443: entered promiscuous mode [ 2040.569517][T32149] bond443: entered allmulticast mode [ 2040.576192][T32149] 8021q: adding VLAN 0 to HW filter on device bond443 06:19:22 executing program 0: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000040)={0x0, 0x200, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:22 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x40000, 0x0, 0x0, 0xffffffffffffff71) 06:19:22 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:23 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000080000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:19:23 executing program 3: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:23 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) getsockname$packet(r12, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r14 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r15, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r15}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:19:23 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x1000000, 0x0, 0x0, 0xffffffffffffff71) 06:19:24 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000ffff80000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:19:24 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x2000000, 0x0, 0x0, 0xffffffffffffff71) [ 2042.153676][T32178] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 06:19:24 executing program 3: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2042.326254][T32181] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:19:24 executing program 0: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000040)={0x0, 0x200, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) syz_io_uring_setup(0x2c3, &(0x7f0000000040)={0x0, 0x200, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000000)) (async) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) (async) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) (async) [ 2042.451709][T32181] bond444: entered promiscuous mode [ 2042.457350][T32181] bond444: entered allmulticast mode [ 2042.464028][T32181] 8021q: adding VLAN 0 to HW filter on device bond444 06:19:24 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:24 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000e0000071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:19:24 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x4000000, 0x0, 0x0, 0xffffffffffffff71) 06:19:25 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0xf4, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:19:25 executing program 3: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2043.726290][T32200] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 2043.861062][T32208] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:19:25 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000010071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2044.055682][T32208] bond445: entered promiscuous mode [ 2044.061146][T32208] bond445: entered allmulticast mode [ 2044.067820][T32208] 8021q: adding VLAN 0 to HW filter on device bond445 06:19:26 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x6000000, 0x0, 0x0, 0xffffffffffffff71) 06:19:26 executing program 3: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:26 executing program 0: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000040)={0x0, 0x200, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) syz_io_uring_setup(0x2c3, &(0x7f0000000040)={0x0, 0x200, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000000)) (async) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) (async) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) (async) 06:19:26 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000020071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:19:26 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0xf4, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:19:26 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:27 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0xc000000, 0x0, 0x0, 0xffffffffffffff71) [ 2045.433253][T32228] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 06:19:27 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x12000000, 0x0, 0x0, 0xffffffffffffff71) 06:19:27 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000030071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2045.660411][T32235] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:19:27 executing program 3: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2045.908834][T32235] bond446: entered promiscuous mode [ 2045.914497][T32235] bond446: entered allmulticast mode [ 2045.921075][T32235] 8021q: adding VLAN 0 to HW filter on device bond446 06:19:28 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000040071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:19:28 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:28 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x18000000, 0x0, 0x0, 0xffffffffffffff71) 06:19:28 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0xf4, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:19:28 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000050071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:19:29 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x1e000000, 0x0, 0x0, 0xffffffffffffff71) 06:19:29 executing program 3: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2047.390964][T32258] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 06:19:29 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000060071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2047.507370][T32260] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2047.676957][T32260] bond447: entered promiscuous mode [ 2047.682549][T32260] bond447: entered allmulticast mode [ 2047.689228][T32260] 8021q: adding VLAN 0 to HW filter on device bond447 06:19:29 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:29 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x20000000, 0x0, 0x0, 0xffffffffffffff71) 06:19:30 executing program 0: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/module/eeepc_laptop', 0x80, 0x103) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x7, 0x4, 0x4cc, 0x0, 0x10c, 0x0, 0x3ec, 0x3ec, 0x3ec, 0x4, &(0x7f0000000080), {[{{@arp={@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0xe}, 0xffffffff, 0xffffff00, 0xe, 0xb, {@mac=@random="6be39e30ebb5", {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0xff, 0x0, 0xff]}}, 0x0, 0x3f, 0x6, 0x8000, 0x4, 0xdad, 'xfrm0\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x0, 0x40}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @private=0xa010100, @private=0xa010100, 0x1}}}, {{@uncond, 0xbc, 0xfc}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x4, 0x1, {0x80000000}}}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 0xb, 0xa, {@empty, {[0xff, 0xff, 0x0, 0x0, 0x80]}}, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0xd100, 0xf800, 0x4, 0x8, 0x2, 0x8, 'bond0\x00', 'syz_tun\x00', {}, {}, 0x0, 0x257}, 0xbc, 0x1e4}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x9, 'system_u:object_r:semanage_store_t:s0\x00'}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x518) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={0x0, @private, @multicast2}, &(0x7f0000000180)=0xc) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0xdd860600, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x8, 0x1, 0x0, 0x1, [{0xc}, {0x8}, {0x1b}, {0x8}, {0x8}]}}, @AF_INET={0x29, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x10, 0xd}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0xdd860600, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r14}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x8, 0x1, 0x0, 0x1, [{0xc}, {0x8}, {0x1b}, {0x8}, {0x8}]}}, @AF_INET={0x29, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x10, 0xd}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) r15 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup(r16) getsockname$packet(r17, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r15, &(0x7f0000000080)={0x0, 0xdd860600, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r18}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x8, 0x1, 0x0, 0x1, [{0xc}, {0x8}, {0x1b}, {0x8}, {0x8}]}}, @AF_INET={0x29, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x10, 0xd}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000008c0)={0x168, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x4}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x20008855}, 0x880) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) fcntl$F_GET_RW_HINT(r16, 0x40b, &(0x7f0000000280)) 06:19:30 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000070071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2048.204568][T32271] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2048.214268][T32271] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2048.224000][T32271] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2048.233646][T32271] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2048.299902][T32273] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2048.310821][T32273] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2048.320561][T32273] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2048.330178][T32273] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.0'. 06:19:30 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x100, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) [ 2048.341156][T32273] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 06:19:31 executing program 3: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2049.000459][T32283] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 06:19:31 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x24000000, 0x0, 0x0, 0xffffffffffffff71) 06:19:31 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000080071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2049.310629][T32284] bond448: entered promiscuous mode [ 2049.316274][T32284] bond448: entered allmulticast mode [ 2049.322940][T32284] 8021q: adding VLAN 0 to HW filter on device bond448 06:19:31 executing program 0: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) (async) r4 = socket$igmp(0x2, 0x3, 0x2) (async) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/module/eeepc_laptop', 0x80, 0x103) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x7, 0x4, 0x4cc, 0x0, 0x10c, 0x0, 0x3ec, 0x3ec, 0x3ec, 0x4, &(0x7f0000000080), {[{{@arp={@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0xe}, 0xffffffff, 0xffffff00, 0xe, 0xb, {@mac=@random="6be39e30ebb5", {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0xff, 0x0, 0xff]}}, 0x0, 0x3f, 0x6, 0x8000, 0x4, 0xdad, 'xfrm0\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x0, 0x40}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @private=0xa010100, @private=0xa010100, 0x1}}}, {{@uncond, 0xbc, 0xfc}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x4, 0x1, {0x80000000}}}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 0xb, 0xa, {@empty, {[0xff, 0xff, 0x0, 0x0, 0x80]}}, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0xd100, 0xf800, 0x4, 0x8, 0x2, 0x8, 'bond0\x00', 'syz_tun\x00', {}, {}, 0x0, 0x257}, 0xbc, 0x1e4}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x9, 'system_u:object_r:semanage_store_t:s0\x00'}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x518) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={0x0, @private, @multicast2}, &(0x7f0000000180)=0xc) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0xdd860600, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x8, 0x1, 0x0, 0x1, [{0xc}, {0x8}, {0x1b}, {0x8}, {0x8}]}}, @AF_INET={0x29, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x10, 0xd}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0xdd860600, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r14}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x8, 0x1, 0x0, 0x1, [{0xc}, {0x8}, {0x1b}, {0x8}, {0x8}]}}, @AF_INET={0x29, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x10, 0xd}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) (async) r15 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup(r16) getsockname$packet(r17, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r15, &(0x7f0000000080)={0x0, 0xdd860600, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r18}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x8, 0x1, 0x0, 0x1, [{0xc}, {0x8}, {0x1b}, {0x8}, {0x8}]}}, @AF_INET={0x29, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x10, 0xd}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000008c0)={0x168, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x4}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x20008855}, 0x880) (async, rerun: 32) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) (async, rerun: 32) fcntl$F_GET_RW_HINT(r16, 0x40b, &(0x7f0000000280)) 06:19:31 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:31 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x2a000000, 0x0, 0x0, 0xffffffffffffff71) 06:19:32 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000a0071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:19:32 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x100, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:19:32 executing program 3: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:32 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x30000000, 0x0, 0x0, 0xffffffffffffff71) 06:19:32 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000f0071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:19:32 executing program 0: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) (async) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/module/eeepc_laptop', 0x80, 0x103) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x7, 0x4, 0x4cc, 0x0, 0x10c, 0x0, 0x3ec, 0x3ec, 0x3ec, 0x4, &(0x7f0000000080), {[{{@arp={@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0xe}, 0xffffffff, 0xffffff00, 0xe, 0xb, {@mac=@random="6be39e30ebb5", {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0xff, 0x0, 0xff]}}, 0x0, 0x3f, 0x6, 0x8000, 0x4, 0xdad, 'xfrm0\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x0, 0x40}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @private=0xa010100, @private=0xa010100, 0x1}}}, {{@uncond, 0xbc, 0xfc}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x4, 0x1, {0x80000000}}}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 0xb, 0xa, {@empty, {[0xff, 0xff, 0x0, 0x0, 0x80]}}, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0xd100, 0xf800, 0x4, 0x8, 0x2, 0x8, 'bond0\x00', 'syz_tun\x00', {}, {}, 0x0, 0x257}, 0xbc, 0x1e4}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x9, 'system_u:object_r:semanage_store_t:s0\x00'}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x518) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) (async) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={0x0, @private, @multicast2}, &(0x7f0000000180)=0xc) (async) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0xdd860600, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x8, 0x1, 0x0, 0x1, [{0xc}, {0x8}, {0x1b}, {0x8}, {0x8}]}}, @AF_INET={0x29, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x10, 0xd}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0xdd860600, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r14}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x8, 0x1, 0x0, 0x1, [{0xc}, {0x8}, {0x1b}, {0x8}, {0x8}]}}, @AF_INET={0x29, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x10, 0xd}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) r15 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = dup(r16) getsockname$packet(r17, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r15, &(0x7f0000000080)={0x0, 0xdd860600, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r18}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x8, 0x1, 0x0, 0x1, [{0xc}, {0x8}, {0x1b}, {0x8}, {0x8}]}}, @AF_INET={0x29, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x10, 0xd}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000008c0)={0x168, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x4}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x20008855}, 0x880) (async) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) fcntl$F_GET_RW_HINT(r16, 0x40b, &(0x7f0000000280)) [ 2050.968401][T32313] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 06:19:33 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x36000000, 0x0, 0x0, 0xffffffffffffff71) 06:19:33 executing program 5: syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2051.273114][T32318] bond449: entered promiscuous mode [ 2051.278589][T32318] bond449: entered allmulticast mode [ 2051.285277][T32318] 8021q: adding VLAN 0 to HW filter on device bond449 06:19:33 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000100071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:19:33 executing program 0: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe4) r1 = getgid() r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [{{0x9, 0x7, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [{{0x9, 0x7, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfb, 0x2}, 0xc, &(0x7f0000000080), 0x0, &(0x7f0000000140)=[@cred={{0x18, 0x1, 0x2, {0x0, r0, r1}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}], 0x38, 0x8000}, 0x20080) r4 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r4, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:34 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x3c000000, 0x0, 0x0, 0xffffffffffffff71) [ 2051.920051][T32337] netlink: 'syz-executor.0': attribute type 7 has an invalid length. 06:19:34 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x100, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) [ 2051.998462][T32337] netlink: 'syz-executor.0': attribute type 7 has an invalid length. 06:19:34 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000120071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:19:34 executing program 5: syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2052.489022][T32341] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 2052.618347][T32344] __nla_validate_parse: 5 callbacks suppressed [ 2052.618420][T32344] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:19:34 executing program 3: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:34 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0xa1ffffff, 0x0, 0x0, 0xffffffffffffff71) 06:19:34 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000170071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2052.878339][T32344] bond450: entered promiscuous mode [ 2052.883945][T32344] bond450: entered allmulticast mode [ 2052.890500][T32344] 8021q: adding VLAN 0 to HW filter on device bond450 06:19:35 executing program 5: syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:35 executing program 0: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe4) (async) r1 = getgid() (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [{{0x9, 0x7, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [{{0x9, 0x7, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfb, 0x2}, 0xc, &(0x7f0000000080), 0x0, &(0x7f0000000140)=[@cred={{0x18, 0x1, 0x2, {0x0, r0, r1}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}], 0x38, 0x8000}, 0x20080) (async) r4 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) (async) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) (async) r7 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) (async) io_uring_enter(r4, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:35 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0xeffdffff, 0x0, 0x0, 0xffffffffffffff71) 06:19:35 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000180071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:19:35 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2053.535181][T32362] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 2053.595194][T32363] netlink: 'syz-executor.0': attribute type 7 has an invalid length. 06:19:35 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:19:35 executing program 0: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe4) (async) r1 = getgid() (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [{{0x9, 0x7, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [{{0x9, 0x7, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfb, 0x2}, 0xc, &(0x7f0000000080), 0x0, &(0x7f0000000140)=[@cred={{0x18, 0x1, 0x2, {0x0, r0, r1}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}], 0x38, 0x8000}, 0x20080) (async) r4 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) (async) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) (async) r7 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) (async) io_uring_enter(r4, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:36 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000001f0071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:19:36 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0xff600000, 0x0, 0x0, 0xffffffffffffff71) [ 2054.175711][T32375] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 2054.320047][T32379] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 2054.338505][T32377] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 06:19:36 executing program 3: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:36 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff71) [ 2054.493480][T32379] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 2054.591020][T32377] bond451: entered promiscuous mode [ 2054.596827][T32377] bond451: entered allmulticast mode [ 2054.603465][T32377] 8021q: adding VLAN 0 to HW filter on device bond451 06:19:36 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000200071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:19:36 executing program 0: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000040)=r3, 0x1) 06:19:36 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0xfffffdef, 0x0, 0x0, 0xffffffffffffff71) 06:19:37 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:37 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:19:37 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000002b0071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:19:37 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0xffffffa1, 0x0, 0x0, 0xffffffffffffff71) 06:19:37 executing program 0: syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)) (async) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) (async) r3 = openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000040)=r3, 0x1) [ 2055.881300][T32407] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 06:19:38 executing program 3: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:38 executing program 5: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x1, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:38 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000032e0071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2056.129522][T32409] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2056.236172][T32409] bond452: entered promiscuous mode [ 2056.241652][T32409] bond452: entered allmulticast mode [ 2056.248384][T32409] 8021q: adding VLAN 0 to HW filter on device bond452 06:19:38 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0xffffffff, 0x0, 0x0, 0xffffffffffffff71) 06:19:38 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x108, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) 06:19:39 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000003c0071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:19:39 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:39 executing program 5: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:39 executing program 0: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) (async) r4 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) (async, rerun: 32) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000040)=r3, 0x1) (rerun: 32) [ 2057.585808][T32436] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 06:19:39 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000003f0071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2057.709200][T32438] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2057.850194][T32438] bond453: entered promiscuous mode [ 2057.855772][T32438] bond453: entered allmulticast mode [ 2057.862242][T32438] 8021q: adding VLAN 0 to HW filter on device bond453 06:19:40 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000400071102a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:19:40 executing program 3: timer_settime(0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffffff, &(0x7f0000002040)='./bus\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)=@x25={0x9, @remote}, 0x80, 0x0}, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x56c, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x22ff, 0x0, 0x0, 0x0, 0xffffffffffffff71) 06:19:40 executing program 4: r0 = syz_io_uring_setup(0x2c3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$igmp(0x2, 0x3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22ff, 0x0, 0x2, 0x0, 0xffffffffffffff71) 06:19:40 executing program 1: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r0 = socket(0xa, 0x3, 0x87) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000e00)={0x0}, 0x1, 0x0, 0x0, 0xc810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee01}}, './file0\x00'}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES16=r5, @ANYRESDEC=r7, @ANYRESOCT=r8], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x240040c1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=@can_newroute={0x2c, 0x18, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_LIM_HOPS={0x5, 0xd, 0x6}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}, @CGW_LIM_HOPS={0x5, 0xd, 0x96}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2004c804) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6gre0\x00', 0x0, 0x0, 0x61, 0x1, 0x7, 0x12, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x40, 0x5, 0x1}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@ipv6_getroute={0x88, 0x1a, 0x2, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, 0xfe, 0x0, 0x0, 0xb, 0x2b00}, [@RTA_UID={0x8}, @RTA_METRICS={0x48, 0x8, 0x0, 0x1, "09f088ae8c3b0fadd6d16c1ee8e24af573995cf13eda30c16b5bb4e94a77c962890aa24326de59cc7b48d9481c79a1704e360f27d1a3a00edc1d020036f5f8c65d01ac58"}, @RTA_MULTIPATH={0xc, 0x9, {0x1f, 0x1, 0x0, r5}}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_MARK={0x8, 0x10, 0x5}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0xe0, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r16, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xd48e}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x1c4c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x8000}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x48814) [ 2058.801391][T32445] ===================================================== [ 2058.808688][T32445] BUG: KMSAN: uninit-value in io_submit_flush_completions+0x880/0xcd0 [ 2058.817210][T32445] io_submit_flush_completions+0x880/0xcd0 [ 2058.823304][T32445] io_submit_sqes+0x2883/0x2e10 [ 2058.828325][T32445] __se_sys_io_uring_enter+0x4ed/0x4300 [ 2058.834142][T32445] __ia32_sys_io_uring_enter+0x119/0x1a0 [ 2058.839951][T32445] __do_fast_syscall_32+0xa2/0x100 [ 2058.845365][T32445] do_fast_syscall_32+0x37/0x80 [ 2058.850414][T32445] do_SYSENTER_32+0x1f/0x30 [ 2058.855206][T32445] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2058.861742][T32445] [ 2058.864243][T32445] Uninit was stored to memory at: [ 2058.869496][T32445] io_recvmsg+0x309d/0x3890 [ 2058.874284][T32445] io_issue_sqe+0x321/0x1050 [ 2058.879035][T32445] io_submit_sqes+0x11e2/0x2e10 [ 2058.884147][T32445] __se_sys_io_uring_enter+0x4ed/0x4300 [ 2058.889869][T32445] __ia32_sys_io_uring_enter+0x119/0x1a0 [ 2058.895904][T32445] __do_fast_syscall_32+0xa2/0x100 [ 2058.901233][T32445] do_fast_syscall_32+0x37/0x80 [ 2058.906385][T32445] do_SYSENTER_32+0x1f/0x30 [ 2058.911097][T32445] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2058.917720][T32445] [ 2058.920139][T32445] Local variable iomsg created at: [ 2058.925455][T32445] io_recvmsg+0x50/0x3890 [ 2058.929987][T32445] io_issue_sqe+0x321/0x1050 [ 2058.934846][T32445] [ 2058.937266][T32445] CPU: 1 PID: 32445 Comm: syz-executor.0 Not tainted 6.3.0-rc7-syzkaller-g0255004d2a8e #0 [ 2058.947461][T32445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2058.957760][T32445] ===================================================== [ 2058.964931][T32445] Disabling lock debugging due to kernel taint [ 2058.971202][T32445] Kernel panic - not syncing: kmsan.panic set ... [ 2058.977745][T32445] CPU: 1 PID: 32445 Comm: syz-executor.0 Tainted: G B 6.3.0-rc7-syzkaller-g0255004d2a8e #0 [ 2058.989302][T32445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 2058.999506][T32445] Call Trace: [ 2059.002879][T32445] [ 2059.005908][T32445] dump_stack_lvl+0x1cc/0x260 [ 2059.010792][T32445] dump_stack+0x1e/0x20 [ 2059.015102][T32445] panic+0x4e2/0xc70 [ 2059.019161][T32445] ? add_taint+0x108/0x1a0 [ 2059.023751][T32445] kmsan_report+0x2d0/0x2d0 [ 2059.028449][T32445] ? __msan_warning+0x96/0x110 [ 2059.033363][T32445] ? io_submit_flush_completions+0x880/0xcd0 [ 2059.039519][T32445] ? io_submit_sqes+0x2883/0x2e10 [ 2059.044721][T32445] ? __se_sys_io_uring_enter+0x4ed/0x4300 [ 2059.050625][T32445] ? __ia32_sys_io_uring_enter+0x119/0x1a0 [ 2059.056598][T32445] ? __do_fast_syscall_32+0xa2/0x100 [ 2059.062062][T32445] ? do_fast_syscall_32+0x37/0x80 [ 2059.067262][T32445] ? do_SYSENTER_32+0x1f/0x30 [ 2059.072107][T32445] ? entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2059.079333][T32445] ? __rcu_read_unlock+0x7a/0xd0 [ 2059.084518][T32445] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2059.090514][T32445] ? __io_fill_cqe_req+0x8cf/0xc20 [ 2059.095806][T32445] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2059.101774][T32445] __msan_warning+0x96/0x110 [ 2059.106515][T32445] io_submit_flush_completions+0x880/0xcd0 [ 2059.112521][T32445] io_submit_sqes+0x2883/0x2e10 [ 2059.117563][T32445] ? kmsan_internal_poison_memory+0x90/0xa0 [ 2059.123676][T32445] __se_sys_io_uring_enter+0x4ed/0x4300 [ 2059.129412][T32445] ? kmsan_get_shadow_origin_ptr+0x4d/0xa0 [ 2059.135389][T32445] __ia32_sys_io_uring_enter+0x119/0x1a0 [ 2059.141204][T32445] __do_fast_syscall_32+0xa2/0x100 [ 2059.146501][T32445] ? exit_to_user_mode_prepare+0x117/0x230 [ 2059.152540][T32445] do_fast_syscall_32+0x37/0x80 [ 2059.157591][T32445] do_SYSENTER_32+0x1f/0x30 [ 2059.162282][T32445] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2059.168792][T32445] RIP: 0023:0xf7f78579 [ 2059.173065][T32445] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2059.192863][T32445] RSP: 002b:00000000f7f735cc EFLAGS: 00000296 ORIG_RAX: 00000000000001aa [ 2059.201444][T32445] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000022ff [ 2059.209551][T32445] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2059.217729][T32445] RBP: 00000000ffffff71 R08: 0000000000000000 R09: 0000000000000000 [ 2059.225922][T32445] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2059.234037][T32445] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2059.242146][T32445] [ 2059.245486][T32445] Kernel Offset: disabled [ 2059.249890][T32445] Rebooting in 86400 seconds..