8d96bd141a742e1434bc03ac1dd45dd988e7c22000b12dead1476b60dbf0de3f4c9662735d22ffec5a0c409259194eec96587ff261322f2564def625d16b797ae6f3e9dba9648c762624a308f69ea9a70dce12410541bd4fffff792a49a4c20790ffe14473686046de6eac310fdc4ad39c7729cf11ea5ff4ca69509249bbb3e9d5f205868407793bf345ce8ecfeac285e9d013bd1f8b716ba8c594f3e993fdbf801dc3837c870e8855675a6901e8108c71576bafb639eae6ccc4a2ec6cef90559818406b3fa8205db1a5047a645ac9803de68f1b72c5cee3eaa5b0ee900b338440121a64d7", 0x165}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 491.398007][T30189] IPVS: ftp: loaded support on port[0] = 21 [ 491.450922][T30182] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 491.574075][T30184] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 491.667916][T30184] bond45: (slave bridge88): making interface the new active one [ 491.705203][T30184] bond45: (slave bridge88): Enslaving as an active interface with an up link [ 491.737231][T30131] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 491.768858][T30131] device ipvlan2 entered promiscuous mode [ 492.040651][T30210] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 492.060797][T30210] device ipvlan2 entered promiscuous mode [ 493.091787][ T97] tipc: TX() has been purged, node left! 02:09:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="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", 0x165}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:09:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="390000001369090069000007a2e407edab00805804000000000003f5000000000000ef38bf461e59d700000000000000000000000000000000a0ce2decca6f89e1695410973365babe641220e194a661ebcd76b9f19892f5963aef234d795b13e4d147d48152ff2839911790097a0f90a2a1d2d95b53544cc4dab477426792778d96bd141a742e1434bc03ac1dd45dd988e7c22000b12dead1476b60dbf0de3f4c9662735d22ffec5a0c409259194eec96587ff261322f2564def625d16b797ae6f3e9dba9648c762624a308f69ea9a70dce12410541bd4fffff792a49a4c20790ffe14473686046de6eac310fdc4ad39c7729cf11ea5ff4ca69509249bbb3e9d5f205868407793bf345ce8ecfeac285e9d013bd1f8b716ba8c594f3e993fdbf801dc3837c870e8855675a6901e8108c71576bafb639eae6ccc4a2ec6cef90559818406b3fa8205db1a5047a645ac9803de68f1b72c5cee3eaa5b0ee900b338440121a64d702777a5610026a28f7c290d576def73e5aa036d96359ca8861", 0x17e}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:09:31 executing program 3: write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000001780)={0x34, r0, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffe00}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="200027bd7000fedbdf250400000008010000000000000000020014000100fe880000000000000000000047da5663afc886200000000108000700d9000000080008002e00000005000d000300000075a68e4442482ca7f2e6910560f5c0028e39c4befbc53d514194f010340da6ac2b68b494d35a4396a4238bdb5a8638cc78276b9fd42ed57030abcf107000407a32c1539fd52ebef7c9b95ca1e3f34bd1a2332c4ab9968d98b3ec352d89e9093046e049d43a6c3b1f1a7464d4207f58cac387f51851e2a3a50967c9d2942ff7b62554b0588370426e4f0eb238967bba32168c730d4b4bb46a04fda5f5bc"], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x4}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r1}) read(r2, &(0x7f0000000280)=""/212, 0xd4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000240)={0x2, 0x1a, 0x1, 0x0, 0x0, [{}]}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000000)={'bridge_slave_0\x00', 0x400}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040)='mptcp_pm\x00') 02:09:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x20}}, 0x0) 02:09:31 executing program 5: r0 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) accept4$bt_l2cap(r6, &(0x7f0000000140)={0x1f, 0x0, @none}, &(0x7f0000000180)=0xe, 0x80000) bind$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x4}, 0xe) connect$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'veth1_virt_wifi\x00', {0x7, 0x0, @local}}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000083f76f20bd88aaaaaaaaaabb08004500002c000000006805a10adce79645000000000000001ff864310000000c909e07bd49791fe33da7e913af8d82c28f2c182532d0023af2f635d6d02013cf3264b8e0bb18cdd8e17b8074adca555ef50ec94cb31864816c7d8b20282b4b15fa038546d4b283cc8d174ff72792a66d8fb08312a3a3fb"], 0x3e) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) [ 495.682989][T30312] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 495.827757][T30324] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 495.880079][T30324] bond46: (slave bridge89): making interface the new active one [ 495.905052][T30324] bond46: (slave bridge89): Enslaving as an active interface with an up link 02:09:31 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x0, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:09:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="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", 0x17e}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:09:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000"], 0x20}}, 0x0) 02:09:32 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:09:32 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000180)={@val, @void, @eth={@random="8bf76f00bd88", @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x3, 0x0, 0x0, 0x6, 0x0, @private, @local}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}, 0x3e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 496.141006][T30383] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 496.170746][T30384] IPVS: ftp: loaded support on port[0] = 21 02:09:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="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", 0x165}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 496.270203][T30389] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 496.366634][T30427] IPVS: ftp: loaded support on port[0] = 21 [ 496.371377][T30389] bond47: (slave bridge90): making interface the new active one [ 496.439945][T30389] bond47: (slave bridge90): Enslaving as an active interface with an up link 02:09:32 executing program 1: syz_emit_ethernet(0x616, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, r0, 0x0, 0xffffffff800) sendfile(r1, r0, &(0x7f0000000040), 0x100000001) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r4, 0x200}, 0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r7, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000000c0)={r4, 0x5, 0x4, 0x80, 0x5, 0x3, 0x8000, 0x0, {r7, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x8, 0x4, 0x2, 0xff, 0x2}}, &(0x7f0000000180)=0xb0) bind$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x4}, 0xe) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000080)={0x1, 0xb1c7, 0x3f, 0x6, 0xfffffffd}) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000640)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'rose0\x00'}}) 02:09:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="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", 0x14c}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:09:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000"], 0x20}}, 0x0) [ 496.740336][T30465] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 02:09:32 executing program 1: syz_emit_ethernet(0x616, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, r0, 0x0, 0xffffffff800) sendfile(r1, r0, &(0x7f0000000040), 0x100000001) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r4, 0x200}, 0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r7, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000000c0)={r4, 0x5, 0x4, 0x80, 0x5, 0x3, 0x8000, 0x0, {r7, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x8, 0x4, 0x2, 0xff, 0x2}}, &(0x7f0000000180)=0xb0) bind$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x4}, 0xe) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000080)={0x1, 0xb1c7, 0x3f, 0x6, 0xfffffffd}) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000640)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'rose0\x00'}}) 02:09:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="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", 0x133}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:09:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="390000001369090069000007a2e407edab00805804000000000003f5000000000000ef38bf461e59d700000000000000000000000000000000a0ce2decca6f89e1695410973365babe641220e194a661ebcd76b9f19892f5963aef234d795b13e4d147d48152ff2839911790097a0f90a2a1d2d95b53544cc4dab477426792778d96bd141a742e1434bc03ac1dd45dd988e7c22000b12dead1476b60dbf0de3f4c9662735d22ffec5a0c409259194eec96587ff261322f2564def625d16b797ae6f3e9dba9648c762624a308f69ea9a70dce12410541bd4fffff792a49a4c20790ffe14473686046de6eac310fdc4ad39c7729cf11ea5ff4ca69509249bbb3e9d5f205868407793bf345ce8ecfeac285e9d013bd1f8b716ba8c5", 0x11a}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 497.484440][T30478] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 497.506682][T30478] bond48: (slave bridge91): making interface the new active one [ 497.519002][T30478] bond48: (slave bridge91): Enslaving as an active interface with an up link 02:09:36 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x0, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:09:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="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", 0x101}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:09:36 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x4}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="73797a30d6603b2bfa288eec390e9273d501f90eb77e46887f97495c363b56367274fad9e07944c165e79224bae2488fc8a85fa4e089d5902140e1d71b9e95fc57922ab623a9ec528124102aa2d028bf0f26906c1d53ace746e1a1f402"], 0x5d) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000002c0)=0x2) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) getsockopt$inet6_dccp_int(r2, 0x21, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0x4) socket(0x0, 0x0, 0x0) r3 = socket(0x11, 0x2, 0x0) getsockopt$sock_timeval(r3, 0x1, 0x1c, 0x0, &(0x7f00000017c0)) r4 = accept4$alg(r3, 0x0, 0x0, 0x80000) write$binfmt_aout(r4, &(0x7f0000000000)={{0xcc, 0x0, 0x7, 0x1ba, 0x17a, 0x0, 0x3b7, 0x4}, "4de44962cee92415079954c4bd7e05a7356c52025dabaa10ed7ccebda3312c553b272a1f6a016faf61111a386d9c1da7617154f1df3fef10dd64234a324aaabb342a1eb151c5e6aa12893291915e871251fcaeff72c49d278b26fc389c21cf55a35cae01ecd3996b29880fb78e0d5dba294885ed42433e8d07eec4765b59bf38f33c95bea8e7cc436057e4ecb20dd4b22cc6e2bc03af3245fe97e51f0d129329fd2e52c704647c088fdf5a3a7918e4ce7253c19e84"}, 0xd5) socket$inet(0x2, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000180)=0x1ff, &(0x7f00000001c0)=0x2) 02:09:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000"], 0x20}}, 0x0) 02:09:36 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000008f40)={0xffffffffffffffff}) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f00000091c0)={&(0x7f0000008f80)={0x10, 0x0, 0x0, 0x800100}, 0xc, &(0x7f0000000180)={0x0}}, 0x4) getsockopt$inet_mreq(r2, 0x0, 0x24, &(0x7f0000000040)={@rand_addr, @initdev}, &(0x7f0000000140)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000180)={@val, @void, @eth={@random="8bf76f00bd88", @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @local}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}, 0x3e) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 02:09:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="24000000200003041ffffd946f6105000a00000a0600000000000f000800180022001200140000001a00ffffba16a0aa1c09000080000000", 0x38}], 0x1}, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x28, 0x3f7, 0x800, 0x70bd29, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}}, 0x28}, 0x1, 0x0, 0x0, 0x4004015}, 0x800) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000033000535a4abd32b8018007a0224fc605a0002400c000200053582c137153e370900018003391d00d1bd", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="24000000200003041ffffd946f6105000a00000a0600000000000f000800180022001200140000001a00ffffba16a0aa1c09000080000000", 0x38}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 02:09:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="390000001369090069000007a2e407edab00805804000000000003f5000000000000ef38bf461e59d700000000000000000000000000000000a0ce2decca6f89e1695410973365babe641220e194a661ebcd76b9f19892f5963aef234d795b13e4d147d48152ff2839911790097a0f90a2a1d2d95b53544cc4dab477426792778d96bd141a742e1434bc03ac1dd45dd988e7c22000b12dead1476b60dbf0de3f4c9662735d22ffec5a0c409259194eec96587ff261322f2564def625d16b797ae6f3e9dba9648c762624a308f69ea9a70dce12410541bd4fffff792a49a4c20790ffe14473686046", 0xe8}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 500.269365][T30576] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 500.294232][T30573] IPVS: ftp: loaded support on port[0] = 21 [ 500.344187][T30583] IPVS: ftp: loaded support on port[0] = 21 [ 500.438657][T30579] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 02:09:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="390000001369090069000007a2e407edab00805804000000000003f5000000000000ef38bf461e59d700000000000000000000000000000000a0ce2decca6f89e1695410973365babe641220e194a661ebcd76b9f19892f5963aef234d795b13e4d147d48152ff2839911790097a0f90a2a1d2d95b53544cc4dab477426792778d96bd141a742e1434bc03ac1dd45dd988e7c22000b12dead1476b60dbf0de3f4c9662735d22ffec5a0c409259194eec96587ff261322f2564def625d16b797ae6f3e9dba9648c762624a308f69ea9", 0xcf}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 500.570562][T30586] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 02:09:36 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x0, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) [ 500.629035][T30586] bond49: (slave bridge92): making interface the new active one [ 500.688791][T30586] bond49: (slave bridge92): Enslaving as an active interface with an up link 02:09:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32], 0x20}}, 0x0) 02:09:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="390000001369090069000007a2e407edab00805804000000000003f5000000000000ef38bf461e59d700000000000000000000000000000000a0ce2decca6f89e1695410973365babe641220e194a661ebcd76b9f19892f5963aef234d795b13e4d147d48152ff2839911790097a0f90a2a1d2d95b53544cc4dab477426792778d96bd141a742e1434bc03ac1dd45dd988e7c22000b12dead1476b60dbf0de3f4c9662735d22ffec5a0c409259194eec96587ff26132", 0xb6}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 500.830391][T30643] IPVS: ftp: loaded support on port[0] = 21 02:09:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="390000001369090069000007a2e407edab00805804000000000003f5000000000000ef38bf461e59d700000000000000000000000000000000a0ce2decca6f89e1695410973365babe641220e194a661ebcd76b9f19892f5963aef234d795b13e4d147d48152ff2839911790097a0f90a2a1d2d95b53544cc4dab477426792778d96bd141a742e1434bc03ac1dd45dd988e7c22000b12dead1476b60db", 0x9d}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 501.066682][T30582] IPVS: ftp: loaded support on port[0] = 21 [ 501.510643][T30648] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 501.550392][T30652] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 501.575956][T30652] bond50: (slave bridge93): making interface the new active one [ 501.585336][T30652] bond50: (slave bridge93): Enslaving as an active interface with an up link [ 501.906985][ T8068] tipc: TX() has been purged, node left! 02:09:41 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x0, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:09:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="390000001369090069000007a2e407edab00805804000000000003f5000000000000ef38bf461e59d700000000000000000000000000000000a0ce2decca6f89e1695410973365babe641220e194a661ebcd76b9f19892f5963aef234d795b13e4d147d48152ff2839911790097a0f90a2a1d2d95b53544cc4dab477426792778d96bd14", 0x84}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:09:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32], 0x20}}, 0x0) 02:09:41 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) setsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f00000001c0)="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", 0x1000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@val, @void, @eth={@random="8bf76f00bd88", @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @local}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}, 0x3e) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) socket$rxrpc(0x21, 0x2, 0x2) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x4}, 0xe) connect$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) splice(r6, 0x0, r1, 0x0, 0x10005, 0x0) 02:09:41 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x4}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="73797a30d6603b2bfa288eec390e9273d501f90eb77e46887f97495c363b56367274fad9e07944c165e79224bae2488fc8a85fa4e089d5902140e1d71b9e95fc57922ab623a9ec528124102aa2d028bf0f26906c1d53ace746e1a1f402"], 0x5d) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000002c0)=0x2) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) getsockopt$inet6_dccp_int(r2, 0x21, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0x4) socket(0x0, 0x0, 0x0) r3 = socket(0x11, 0x2, 0x0) getsockopt$sock_timeval(r3, 0x1, 0x1c, 0x0, &(0x7f00000017c0)) r4 = accept4$alg(r3, 0x0, 0x0, 0x80000) write$binfmt_aout(r4, &(0x7f0000000000)={{0xcc, 0x0, 0x7, 0x1ba, 0x17a, 0x0, 0x3b7, 0x4}, "4de44962cee92415079954c4bd7e05a7356c52025dabaa10ed7ccebda3312c553b272a1f6a016faf61111a386d9c1da7617154f1df3fef10dd64234a324aaabb342a1eb151c5e6aa12893291915e871251fcaeff72c49d278b26fc389c21cf55a35cae01ecd3996b29880fb78e0d5dba294885ed42433e8d07eec4765b59bf38f33c95bea8e7cc436057e4ecb20dd4b22cc6e2bc03af3245fe97e51f0d129329fd2e52c704647c088fdf5a3a7918e4ce7253c19e84"}, 0xd5) socket$inet(0x2, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000180)=0x1ff, &(0x7f00000001c0)=0x2) [ 505.162673][T30782] IPVS: ftp: loaded support on port[0] = 21 [ 505.227419][T30794] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 02:09:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="390000001369090069000007a2e407edab00805804000000000003f5000000000000ef38bf461e59d700000000000000000000000000000000a0ce2decca6f89e1695410973365babe641220e194a661ebcd76b9f19892f5963aef234d795b13e4d147d48152ff28399117", 0x6b}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 505.299757][T30800] IPVS: ftp: loaded support on port[0] = 21 [ 505.372968][T30803] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 505.482597][T30803] bond51: (slave bridge94): making interface the new active one [ 505.507845][T30803] bond51: (slave bridge94): Enslaving as an active interface with an up link 02:09:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="390000001369090069000007a2e407edab00805804000000000003f5000000000000ef38bf461e59d700000000000000000000000000000000a0ce2decca6f89e1695410973365babe641220e194a661ebcd", 0x52}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:09:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32], 0x20}}, 0x0) 02:09:41 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x0, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:09:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="390000001369090069000007a2e407edab00805804000000000003f5000000000000ef38bf461e59d700"/57, 0x39}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:09:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="390000001369090069000007a2e407edab00805804000000000003f500000000", 0x20}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 506.012863][T30875] IPVS: ftp: loaded support on port[0] = 21 02:09:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 506.384759][T30865] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 506.472744][T30866] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 506.507368][T30866] bond52: (slave bridge95): making interface the new active one [ 506.529523][T30866] bond52: (slave bridge95): Enslaving as an active interface with an up link [ 507.166276][ T8068] tipc: TX() has been purged, node left! 02:09:45 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:09:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)='9', 0x1}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:09:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYRES32=r6], 0x20}}, 0x0) 02:09:45 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) pipe(&(0x7f0000000f40)={0xffffffffffffffff}) ioctl$SIOCX25GFACILITIES(r4, 0x89e2, &(0x7f0000000f80)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) setsockopt$inet_mreqsrc(r1, 0x0, 0x3, &(0x7f0000000040)={@rand_addr=0x64010101, @remote, @dev={0xac, 0x14, 0x14, 0x3e}}, 0xc) write$tun(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00e9ffff8af76f00bd88aaaaaaaaaabb0800b849002c000000000006907800000000ac1414aa00"/62], 0x3e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 509.551729][T31000] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 509.598904][T31003] IPVS: ftp: loaded support on port[0] = 21 [ 510.179494][T31005] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 510.200416][T31005] bond53: (slave bridge96): making interface the new active one [ 510.214242][T31005] bond53: (slave bridge96): Enslaving as an active interface with an up link 02:09:46 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:09:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:09:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:09:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYRES32=r6], 0x20}}, 0x0) 02:09:46 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) [ 510.569946][T31080] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 510.582180][T31078] IPVS: ftp: loaded support on port[0] = 21 02:09:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 510.719407][T31098] IPVS: ftp: loaded support on port[0] = 21 [ 510.740441][T31087] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 02:09:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:09:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 510.851478][T31087] bond54: (slave bridge97): making interface the new active one [ 510.888407][T31087] bond54: (slave bridge97): Enslaving as an active interface with an up link 02:09:46 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f0000000180)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x4}, 0xe) connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="000000008bf76f00bd88aaaaaaaaaabb2647ebf5fbf516215d3641b06c3a1c002c000000000006907800000000ac1414aa00003f00"/73], 0x3e) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x2}]}}]}, 0x48}}, 0x0) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000040)={r8, 0x1, 0x6, @random="f72f0bfbd537"}, 0x10) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) 02:09:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYRES32=r6], 0x20}}, 0x0) 02:09:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:09:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 511.454246][T31182] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 511.640443][T31187] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 511.721160][T31187] bond55: (slave bridge98): making interface the new active one [ 511.748477][T31187] bond55: (slave bridge98): Enslaving as an active interface with an up link 02:09:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:09:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:09:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:09:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=r6], 0x20}}, 0x0) 02:09:47 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) [ 511.878763][ T8068] tipc: TX() has been purged, node left! [ 511.898990][ T8068] tipc: TX() has been purged, node left! [ 511.932259][ T8068] tipc: TX() has been purged, node left! 02:09:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:09:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 512.034453][T31255] IPVS: ftp: loaded support on port[0] = 21 02:09:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 512.474703][T31253] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 512.556907][T31256] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 512.601453][T31256] bond56: (slave bridge99): making interface the new active one [ 512.627488][T31256] bond56: (slave bridge99): Enslaving as an active interface with an up link 02:09:48 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x1f, 0x1, 0xa2) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000040)="ac9aacb1b72b45afd715e875b6cff3a41122fab6b420d3eae8f2cc7f36d31fefaf", 0x21) close(r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) pipe(&(0x7f0000008f40)={0xffffffffffffffff}) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f00000091c0)={&(0x7f0000008f80)={0x10, 0x0, 0x0, 0x800100}, 0xc, &(0x7f0000000180)={0x0}}, 0x4) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'ip6gretap0\x00', 0x1000}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000200)={@val, @val={0x1, 0x1, 0x81, 0x75, 0x3, 0x28ca}, @eth={@random="8bf76f00bd88", @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x66, 0x0, 0x0, 0x6, 0x0, @private, @local}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}}}}}}}, 0x48) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:09:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:09:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:09:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=r6], 0x20}}, 0x0) 02:09:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 512.946274][T31343] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 512.996991][T31343] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 513.029222][T31343] bond57: (slave bridge100): making interface the new active one [ 513.040059][T31343] bond57: (slave bridge100): Enslaving as an active interface with an up link 02:09:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=r6], 0x20}}, 0x0) 02:09:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:09:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 513.238163][T31405] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 513.623029][T31412] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 513.674594][T31412] bond58: (slave bridge101): making interface the new active one [ 513.684664][T31412] bond58: (slave bridge101): Enslaving as an active interface with an up link 02:09:51 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:09:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:09:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:09:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d040000", @ANYRES32=r6], 0x20}}, 0x0) 02:09:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:09:51 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$unix(0x1, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000180)={@val, @void, @eth={@random="8bf76f00bd88", @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @local}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}, 0x3e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 515.181215][T31470] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 515.249998][T31513] IPVS: ftp: loaded support on port[0] = 21 [ 515.274036][T31512] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 02:09:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:09:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:09:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 515.394570][T31512] bond59: (slave bridge102): making interface the new active one [ 515.428731][T31512] bond59: (slave bridge102): Enslaving as an active interface with an up link 02:09:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d040000", @ANYRES32=r6], 0x20}}, 0x0) 02:09:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:09:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 515.765412][T31539] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 516.164409][T31548] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 516.197699][T31548] bond60: (slave bridge103): making interface the new active one [ 516.210441][T31548] bond60: (slave bridge103): Enslaving as an active interface with an up link 02:09:54 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:09:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:09:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:09:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:09:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d040000", @ANYRES32=r6], 0x20}}, 0x0) 02:09:54 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) write(r0, &(0x7f00000001c0)="0c9212f5832f038bc50c5977ebe4acf3e29237a9a61d0de3f16dfdba0c0e7969f48ea02a3c0ce4aac21268573be0af933da5b494716cf7ad54715153e493596825e119b08879fc53caaef7dda909d6d82c07a061202d35bad1472c523a6d5704e5b3c0c3fa883312651b4ebb3703e231a57d1dfd8fcb27ff9f3a6ba62ac34f9997d8a2e381b795258b70c63d31dc69b12f061bdb5fbeb159baf7ade141ae2e5a8987043b2dc7c5d544ba3ef233cf53626f5c011215db5f17c4314a6bc5aadf03a3ef7e16bb1aa3f11cf40eaa7ce768dbc32036bbdffa2e27b2a5", 0xda) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000180)={@val, @void, @eth={@random="8bf76f00bd88", @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @local}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}, 0x3e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 518.616305][T31636] IPVS: ftp: loaded support on port[0] = 21 02:09:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:09:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 518.669261][T31632] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 518.837246][T31641] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 02:09:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:09:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 518.939489][T31641] bond61: (slave bridge104): making interface the new active one [ 519.002238][T31641] bond61: (slave bridge104): Enslaving as an active interface with an up link 02:09:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d0400000000000000", @ANYRES32=r6], 0x20}}, 0x0) 02:09:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 519.582290][T31706] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 519.615836][T31708] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 519.638261][T31708] bond62: (slave bridge105): making interface the new active one [ 519.649628][T31708] bond62: (slave bridge105): Enslaving as an active interface with an up link 02:09:55 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:09:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:09:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:09:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:09:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d0400000000000000", @ANYRES32=r6], 0x20}}, 0x0) [ 519.838635][T31782] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 519.851081][T31781] IPVS: ftp: loaded support on port[0] = 21 [ 519.865904][T13970] tipc: TX() has been purged, node left! [ 520.027770][T31789] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 520.101087][T31789] bond63: (slave bridge106): making interface the new active one [ 520.140378][T31789] bond63: (slave bridge106): Enslaving as an active interface with an up link 02:09:56 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = openat$cgroup_ro(r1, &(0x7f0000000540)='pids.current\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r6, r5, 0x0, 0xffffffff800) sendfile(r6, r5, &(0x7f0000000040), 0x100000001) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000012c0)={&(0x7f0000000040)="aff46fab7d132b10eb4ca374", &(0x7f00000001c0)=""/230, &(0x7f00000002c0)="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", &(0x7f0000000140)="41d7f699375c1d2c29ebde387ea7fad563b72982737cb7ec5176f7f2f15e0787d42e0b3814f2c61b7a84778d92c6dd", 0xd5b2, r6}, 0x38) write$tun(r1, &(0x7f0000001300)={@val, @void, @ipv4=@igmp={{0x1c, 0x4, 0x0, 0x2b, 0xf4, 0x66, 0x0, 0xff, 0x2, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x34, 0x5a, 0x1, 0x2, [{@private=0xa010101, 0x8000}, {@empty, 0xffffffff}, {@multicast2, 0x800}, {@remote, 0xffffffff}, {@multicast2, 0x382c}, {@private=0x4, 0x8}]}, @generic={0x89, 0x2}, @lsrr={0x83, 0xb, 0x2d, [@remote, @local]}, @ssrr={0x89, 0xf, 0x98, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @timestamp_addr={0x44, 0xc, 0x35, 0x1, 0x2, [{@private=0xa010101, 0x200}]}]}}, {0x15, 0x40, 0x0, @empty, "0717cacc351971e2c1fad559d7f0f3b44bae935585bb6320e5327fa7c0d640f2dbe7accf56146beee560fb0c000000000000c99b3dcca9621d422debfe95ad7258bec67cc248378c34a5c6ae88197170113da046fca69c878e0be999c01d15c1df5483baaecf5062589d5bf5cbc3fa499f1215217eb0378eb3ee1492"}}}, 0xf8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:09:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:09:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:09:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d0400000000000000", @ANYRES32=r6], 0x20}}, 0x0) [ 520.422127][T31864] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 02:09:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:09:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:09:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 520.617285][T31872] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 02:09:56 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:09:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:09:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d0400000000000000", @ANYRES32=r6], 0x20}}, 0x0) [ 520.677563][T31872] bond64: (slave bridge107): making interface the new active one [ 520.724163][T31872] bond64: (slave bridge107): Enslaving as an active interface with an up link 02:09:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d0400000000000000001000", @ANYRES32=r6], 0x20}}, 0x0) [ 520.812336][T31927] IPVS: ftp: loaded support on port[0] = 21 02:09:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 520.930380][T31930] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 520.998047][T31936] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 521.087883][T31936] bond4: (slave bridge10): making interface the new active one [ 521.113823][T31936] bond4: (slave bridge10): Enslaving as an active interface with an up link [ 521.477879][T31940] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 521.539939][T31978] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 521.562371][T31978] bond65: (slave bridge108): making interface the new active one [ 521.573872][T31978] bond65: (slave bridge108): Enslaving as an active interface with an up link 02:09:57 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000180)={@val, @void, @eth={@random="8bf76f00bd88", @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @local}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}, 0x3e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) socket$l2tp6(0xa, 0x2, 0x73) 02:09:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:09:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:09:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="390000001369090069000007a2e407edab00805804000000000003f5000000000000ef38bf461e59d700000000000000000000000000000000a0ce2decca6f89e1695410973365babe641220e194a661ebcd76b9f19892f5963aef234d795b13e4d147d48152ff2839911790097a0f90a2a1d2d95b53544cc4dab477426792778d96bd141a742e1434bc03ac1dd45dd988e7c22000b12dead1476b60dbf0de3f4c9662735d22ffec5a0c409259194eec96587ff261322f2564def625d16b797ae6f3e9dba9648c762624a308f69ea9", 0xcf}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:09:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d0400000000000000001000", @ANYRES32=r6], 0x20}}, 0x0) [ 521.721607][T32051] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 02:09:57 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:09:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:09:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 521.893968][T32102] IPVS: ftp: loaded support on port[0] = 21 [ 521.940428][T32060] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 02:09:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 522.026339][T32060] bond66: (slave bridge109): making interface the new active one [ 522.070829][T32060] bond66: (slave bridge109): Enslaving as an active interface with an up link 02:09:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:09:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d0400000000000000001000", @ANYRES32=r6], 0x20}}, 0x0) 02:09:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 522.285145][T32130] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 522.802639][T32141] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 522.830848][T32141] bond67: (slave bridge110): making interface the new active one [ 522.840502][T32141] bond67: (slave bridge110): Enslaving as an active interface with an up link 02:09:58 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x57, {0x2, 0x4e20, @loopback}}, 0x24) sendmmsg(r1, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000cbeb00000c0000000500000000000000"], 0x18}}], 0x2, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r3, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="ca9f0000000000001001000001000000ec000000000000003dafa8d70936ecc55e6bc20df9c758d80234f1e15f6203d0085168f820cf8abf1e26d8e0d46216d58ab00a3cfc125c9c4657885c76fd7ef28ede3cc8c9ad76b51a6b2806b068428ba1f19995bc2215496845a0aad38e2144b7cb0c1ab45d9000d2dcb4c6e82f3c02352e6b1e23d8e99baeec17d65d58202b37d4dfe410ef73b0952f"], 0x18}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0xc, "05"}], 0x18}}], 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000400)={0x0, 'vxcan1\x00', {}, 0x200}) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0xc, "05"}], 0x18}}], 0x2, 0x0) r4 = socket(0xa, 0x6, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, 0x7, 0x6, 0x300, 0x70bd2d, 0x25dfdbfb, {0xc, 0x0, 0x4}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xfff}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xfff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x30002}, 0x20000000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x7c, &(0x7f0000000000)={r6}, 0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000080)={r6, 0x400}, &(0x7f00000001c0)=0x8) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xac, 0x1, 0x2, 0x801, 0x0, 0x0, {0x2}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASK={0x44, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xfffffffb}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'tftp-20000\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xffffffff}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7}]}, 0xac}, 0x1, 0x0, 0x0, 0x44}, 0x40001) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x2}}, 0xae82, 0x1, 0x0, 0x0, 0x105, 0xfffffffe}, 0x9c) r7 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r7, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r7, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000"], 0x18}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0xc, "05"}], 0x18}}], 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r7, 0x84, 0x1c, &(0x7f0000000380), &(0x7f00000003c0)=0x4) 02:09:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:09:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:09:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d040000000000000000100000", @ANYRES32=r6], 0x20}}, 0x0) 02:09:58 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x3f, 0x203, 0x50d, 0x0, r5}, &(0x7f00000001c0)=0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) pipe(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$tipc(r7, &(0x7f0000001340)=@name, &(0x7f0000001380)=0x10) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000040), 0x4) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000180)={@val, @void, @eth={@random="8bf76f00bd88", @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @local}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}, 0x3e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:09:59 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) [ 523.045658][T32206] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 02:09:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 523.132428][T32213] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 02:09:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 523.270465][T32213] bond68: (slave bridge111): making interface the new active one [ 523.280997][T32255] IPVS: ftp: loaded support on port[0] = 21 02:09:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 523.333752][T32213] bond68: (slave bridge111): Enslaving as an active interface with an up link 02:09:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d040000000000000000100000", @ANYRES32=r6], 0x20}}, 0x0) 02:09:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:09:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 523.628565][T32277] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 523.723007][T32289] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 523.849196][T32289] bond69: (slave bridge112): making interface the new active one [ 523.898776][T32289] bond69: (slave bridge112): Enslaving as an active interface with an up link 02:10:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d040000000000000000100000", @ANYRES32=r6], 0x20}}, 0x0) 02:10:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:00 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) ioctl$PPPIOCATTACH(r3, 0x4004743d, &(0x7f0000000040)=0x4) write$tun(r1, &(0x7f0000000180)={@val, @void, @eth={@random="8bf76f00bd88", @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @local}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}, 0x3e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:10:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d040000000000000000100000", @ANYRES32=r6], 0x20}}, 0x0) [ 524.476891][T32358] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 524.588415][T32364] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 524.703590][T32364] bond5: (slave bridge11): making interface the new active one [ 524.750401][T32364] bond5: (slave bridge11): Enslaving as an active interface with an up link [ 524.797152][T32400] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 02:10:00 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r0, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r4, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r6}) 02:10:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 524.970258][T32406] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 02:10:01 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) [ 525.067091][T32406] bond70: (slave bridge113): making interface the new active one [ 525.082380][T32456] IPVS: ftp: loaded support on port[0] = 21 02:10:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 525.107243][T32406] bond70: (slave bridge113): Enslaving as an active interface with an up link [ 525.230700][T32462] IPVS: ftp: loaded support on port[0] = 21 02:10:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:02 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="000000008bf76f00bd88aaaaaaaaaabb08004500002c000000000006907800000000ac1414aa00b557b714c1d01c6fe88b6f0a00"/74], 0x3e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:10:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 527.214992][T13970] tipc: TX() has been purged, node left! [ 527.220830][T13970] tipc: TX() has been purged, node left! [ 527.230372][T13970] tipc: TX() has been purged, node left! [ 527.236592][T13970] tipc: TX() has been purged, node left! [ 527.242382][T13970] tipc: TX() has been purged, node left! 02:10:04 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r0, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r4, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r6}) 02:10:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:04 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000180)={@val, @void, @eth={@random="8bf76f00bd88", @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @local}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}, 0x3e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0x10000, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x6, 0x2}, 0x0, 0x0, &(0x7f0000000240)={0x1, 0xe, 0xfcc, 0x20}, &(0x7f0000000280)=0x200, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x4}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=r5, 0x4) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r5, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r6, 0x10, &(0x7f0000000140)={&(0x7f00000001c0)=""/66, 0x42, 0xffffffffffffffff}}, 0x10) [ 528.495503][T32572] IPVS: ftp: loaded support on port[0] = 21 02:10:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:04 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000180)={@val, @void, @eth={@random="8bf76f00bd88", @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @local}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}, 0x3e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) socket$l2tp6(0xa, 0x2, 0x73) 02:10:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:07 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r0, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r4, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r6}) 02:10:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:07 executing program 1 (fault-call:11 fault-nth:0): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:10:07 executing program 2: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r2, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r2, &(0x7f0000000100)=""/238, 0xee) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) ioctl$sock_ifreq(r2, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x19, &(0x7f00000000c0)={r4}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r4, 0x81}, &(0x7f0000000100)=0x8) 02:10:07 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) getpeername$tipc(r1, &(0x7f0000000040)=@name, &(0x7f0000000140)=0x10) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r5, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c}, 0x24) listen(r5, 0x0) listen(r5, 0x0) write$binfmt_script(r5, 0x0, 0x0) recvfrom$rxrpc(r5, &(0x7f00000001c0)=""/108, 0x6c, 0x1, &(0x7f0000000240)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2d}}}, 0x24) write$tun(r1, &(0x7f0000000180)={@val, @void, @eth={@random="8bf76f00bd88", @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @local}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}, 0x3e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:10:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 531.874349][T32673] IPVS: ftp: loaded support on port[0] = 21 [ 531.907990][T32678] FAULT_INJECTION: forcing a failure. [ 531.907990][T32678] name failslab, interval 1, probability 0, space 0, times 0 02:10:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 531.973996][T32664] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 532.015896][T32678] CPU: 0 PID: 32678 Comm: syz-executor.1 Not tainted 5.7.0-syzkaller #0 [ 532.024240][T32678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 532.034292][T32678] Call Trace: [ 532.037713][T32678] dump_stack+0x188/0x20d [ 532.042048][T32678] should_fail.cold+0x5/0xa [ 532.046644][T32678] ? lock_downgrade+0x840/0x840 [ 532.051500][T32678] ? fault_create_debugfs_attr+0x140/0x140 [ 532.057315][T32678] ? netlink_insert+0x180/0x1590 [ 532.062261][T32678] should_failslab+0x5/0xf [ 532.066673][T32678] kmem_cache_alloc_node+0x25c/0x760 [ 532.071966][T32678] __alloc_skb+0xba/0x5a0 [ 532.076297][T32678] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 532.081841][T32678] ? netlink_autobind.isra.0+0x21b/0x300 [ 532.087470][T32678] netlink_sendmsg+0x97b/0xe10 [ 532.092242][T32678] ? aa_af_perm+0x260/0x260 [ 532.096744][T32678] ? netlink_unicast+0x740/0x740 [ 532.101684][T32678] ? netlink_unicast+0x740/0x740 [ 532.106619][T32678] sock_sendmsg+0xcf/0x120 [ 532.111032][T32678] ____sys_sendmsg+0x6e6/0x810 [ 532.115808][T32678] ? kernel_sendmsg+0x50/0x50 [ 532.120481][T32678] ? _parse_integer+0x180/0x180 [ 532.125339][T32678] ___sys_sendmsg+0x100/0x170 [ 532.130012][T32678] ? debug_smp_processor_id+0x2f/0x185 [ 532.135472][T32678] ? sendmsg_copy_msghdr+0x70/0x70 [ 532.140605][T32678] ? __fget_files+0x32f/0x500 [ 532.145291][T32678] ? ksys_dup3+0x3c0/0x3c0 [ 532.149711][T32678] ? debug_smp_processor_id+0x2f/0x185 [ 532.155180][T32678] ? __fget_light+0x20e/0x270 [ 532.159866][T32678] __sys_sendmsg+0xe5/0x1b0 [ 532.164374][T32678] ? __sys_sendmsg_sock+0xb0/0xb0 [ 532.169399][T32678] ? vfs_write+0x161/0x5d0 [ 532.173828][T32678] ? do_syscall_64+0x21/0x7d0 [ 532.178505][T32678] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 532.184490][T32678] do_syscall_64+0xf6/0x7d0 [ 532.188998][T32678] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 532.194886][T32678] RIP: 0033:0x45ca69 [ 532.198778][T32678] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 532.218400][T32678] RSP: 002b:00007fde1ee6ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 532.226842][T32678] RAX: ffffffffffffffda RBX: 0000000000501a40 RCX: 000000000045ca69 [ 532.234814][T32678] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000007 [ 532.242792][T32678] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 532.250869][T32678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 532.258838][T32678] R13: 0000000000000a21 R14: 00000000004cd05a R15: 00007fde1ee6b6d4 02:10:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 532.271762][T32672] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 532.361492][T32672] bond6: (slave bridge12): making interface the new active one [ 532.382573][T32672] bond6: (slave bridge12): Enslaving as an active interface with an up link 02:10:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x0, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 532.993531][T32693] net veth1_virt_wifi @: renamed from virt_wifi0 02:10:09 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r4, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r6}) 02:10:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:10:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:09 executing program 2: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r2, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r2, &(0x7f0000000100)=""/238, 0xee) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) ioctl$sock_ifreq(r2, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x19, &(0x7f00000000c0)={r4}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r4, 0x81}, &(0x7f0000000100)=0x8) 02:10:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x0, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 533.574675][ T331] IPVS: ftp: loaded support on port[0] = 21 [ 533.882820][ T323] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 533.998259][ T330] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 534.097274][ T330] bond7: (slave bridge13): making interface the new active one [ 534.125682][ T330] bond7: (slave bridge13): Enslaving as an active interface with an up link [ 534.227792][ T334] bond7 (unregistering): (slave bridge13): Releasing active interface [ 534.385340][ T334] bond7 (unregistering): Released all slaves 02:10:10 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000040)={'veth1_macvtap\x00', {0x2, 0x4e21, @multicast2}}) write$tun(r1, &(0x7f0000000180)={@val, @void, @eth={@random="8bf76f00bd88", @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @local}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}, 0x3e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:10:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x0, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:10 executing program 2: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r2, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r2, &(0x7f0000000100)=""/238, 0xee) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) ioctl$sock_ifreq(r2, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x19, &(0x7f00000000c0)={r4}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r4, 0x81}, &(0x7f0000000100)=0x8) 02:10:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:10:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000009, 0x0, 0x0) [ 534.717066][ T434] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 535.282997][ T445] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 535.350123][ T445] bond7: (slave bridge14): making interface the new active one [ 535.384923][ T445] bond7: (slave bridge14): Enslaving as an active interface with an up link [ 535.457117][ T434] bond7 (unregistering): (slave bridge14): Releasing active interface [ 535.777316][ T434] bond7 (unregistering): Released all slaves [ 535.847509][ T490] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 535.894671][ T445] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:10:13 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r4, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r6}) 02:10:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:13 executing program 2: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r2, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r2, &(0x7f0000000100)=""/238, 0xee) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) ioctl$sock_ifreq(r2, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x19, &(0x7f00000000c0)={r4}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r4, 0x81}, &(0x7f0000000100)=0x8) 02:10:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000009, 0x0, 0x0) 02:10:13 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r2, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x13, @l2={'eth'}}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x400, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44055}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) connect$phonet_pipe(r1, &(0x7f0000000240)={0x23, 0x9, 0x80, 0x1}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="24000000200003041ffffd946f6105000a00000a0600000000000f000800180022001200140000001a00ffffba16a0aa1c09000080000000", 0x38}], 0x1}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x20, r7, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x8, 0x11d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5, 0x1, "aa"}]}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2100}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x7c, r7, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_SEQ={0xe, 0xa, "b663c2644534060aac9d"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "836b491e652ed4967b723d96ef"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "bee4fe0e14316382259e9ad6e8"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "8c6872bf1948ea61c87b933dd7"}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x41) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, r7, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x80}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044804}, 0x40010) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000180)={@val, @void, @eth={@random="8bf76f00bd88", @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @local}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}, 0x3e) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 02:10:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x2, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) [ 537.101387][ T539] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 537.130983][ T543] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 02:10:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000009, 0x0, 0x0) [ 537.245214][ T549] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 537.276225][ T548] IPVS: ftp: loaded support on port[0] = 21 02:10:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4), 0x1c) [ 537.391839][ T549] bond7: (slave bridge15): making interface the new active one [ 537.467339][ T549] bond7: (slave bridge15): Enslaving as an active interface with an up link 02:10:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 537.517635][ T578] bond7 (unregistering): (slave bridge15): Releasing active interface 02:10:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4), 0x1c) 02:10:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r1, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 537.994965][ T578] bond7 (unregistering): Released all slaves [ 538.231895][ T21] tipc: TX() has been purged, node left! [ 538.390108][ T543] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 538.424665][ T549] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:10:14 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r4, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r6}) 02:10:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4), 0x1c) 02:10:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r1, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:14 executing program 2: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r2, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r2, &(0x7f0000000100)=""/238, 0xee) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) ioctl$sock_ifreq(r2, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x19, &(0x7f00000000c0)={r4}, 0x8) [ 538.716308][ T701] IPVS: ftp: loaded support on port[0] = 21 [ 538.739495][ T566] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 02:10:14 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x8) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000180)={@val, @void, @eth={@random="8bf76f00bd88", @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @local}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}, 0x3e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:10:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:10:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r1, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:14 executing program 2: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) ioctl$sock_ifreq(r1, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 02:10:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4), 0x1c) [ 539.015632][ T739] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 02:10:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 539.191015][ T748] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:10:15 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r4, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r6}) 02:10:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 539.288884][ T748] bond7: (slave bridge16): making interface the new active one [ 539.321736][ T748] bond7: (slave bridge16): Enslaving as an active interface with an up link [ 539.376589][ T802] IPVS: ftp: loaded support on port[0] = 21 [ 539.383024][ T772] bond7 (unregistering): (slave bridge16): Releasing active interface 02:10:15 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x0, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:10:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 539.710552][ T813] IPVS: ftp: loaded support on port[0] = 21 [ 539.838121][ T772] bond7 (unregistering): Released all slaves 02:10:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 540.071272][ T748] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 540.445042][ T739] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:10:16 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000001c0)={@val, @void, @eth={@random="8bf76f00bd88", @remote, @val={@void, {0x8100, 0x2, 0x1}}, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @empty}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}, 0x42) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:10:16 executing program 2: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) ioctl$sock_ifreq(r1, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 02:10:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:10:16 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r4, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r6}) [ 540.878888][ T920] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 540.883798][ T917] IPVS: ftp: loaded support on port[0] = 21 02:10:16 executing program 3: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(0xffffffffffffffff, 0x1) r0 = socket$netlink(0x10, 0x3, 0x14) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r1, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 541.011853][ T927] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 541.036348][ T927] bond7: (slave bridge17): making interface the new active one [ 541.058014][ T927] bond7: (slave bridge17): Enslaving as an active interface with an up link [ 541.085032][ T954] bond7 (unregistering): (slave bridge17): Releasing active interface 02:10:17 executing program 3: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(0xffffffffffffffff, 0x1) r0 = socket$netlink(0x10, 0x3, 0x14) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r1, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:17 executing program 3: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(0xffffffffffffffff, 0x1) r0 = socket$netlink(0x10, 0x3, 0x14) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r1, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 541.314743][ T954] bond7 (unregistering): Released all slaves [ 541.972121][ T920] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 542.036338][ T927] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 543.992070][ T21] tipc: TX() has been purged, node left! [ 544.172974][ T21] tipc: TX() has been purged, node left! [ 544.352033][ T21] tipc: TX() has been purged, node left! 02:10:20 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x0, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:10:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x5, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:10:20 executing program 2: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) ioctl$sock_ifreq(r1, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 02:10:20 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x28202, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000180)={@val, @void, @eth={@random="8bf76f00bd88", @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @local}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}, 0x3e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:10:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 544.763461][ T1069] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 544.865743][ T1092] IPVS: ftp: loaded support on port[0] = 21 02:10:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 544.912975][ T1082] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 545.010636][ T1082] bond7: (slave bridge18): making interface the new active one 02:10:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, 0x0) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 545.054617][ T1082] bond7: (slave bridge18): Enslaving as an active interface with an up link [ 545.102438][ T1100] bond7 (unregistering): (slave bridge18): Releasing active interface [ 545.364411][ T1100] bond7 (unregistering): Released all slaves 02:10:21 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r4, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r6}) 02:10:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, 0x0) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:21 executing program 2: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) ioctl$sock_ifreq(r1, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) socket$inet(0x2, 0x80001, 0x84) 02:10:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, 0x0) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 545.707180][ T1186] IPVS: ftp: loaded support on port[0] = 21 [ 546.061479][ T1069] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 546.132037][ T1082] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:10:24 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x0, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:10:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000), 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:24 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) writev(r2, &(0x7f0000000140)=[{&(0x7f00000002c0)="18e667b348cd86ad97fbd01e8342b89911f46debe4b91a49acdb64523def048223e0884a09b578397cbf7a60880089d0be3d2d1660454258906d911147ef65d574326d8afa97fc05e7c58ddf5b0182", 0x4f}, {&(0x7f0000000340)="a40d2704fda867e31e5d979633cf990c55cfe0db8092742b091d956e233593d761198a61555f3f320496def64c35586a9b6a44112daa94fc060ec354dcba4f7a4dd774301e076255e51d4065b860614bb189b3066766c0bee0382268f8e623be0b3dcfe4102ebd5d142602f6b0ce3b5cdeaad6", 0x73}], 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f00000015c0)=ANY=[@ANYBLOB="8100635b36dd2f5e3103"], 0xa) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xfef0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000001780)={0x34, r6, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffe00}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="200027bd7000fedbdf250400000008010000000000000000020014000100fe880000000000000000000047da5663afc886200000000108000700d9000000080008002e00000005000d000300000075a68e4442482ca7f2e6910560f5c0028e39c4befbc53d514194f010340da6ac2b68b494d35a4396a4238bdb5a8638cc78276b9fd42ed57030abcf107000407a32c1539fd52ebef7c9b95ca1e3f34bd1a2332c4ab9968d98b3ec352d89e9093046e049d43a6c3b1f1a7464d4207f58cac387f51851e2a3a50967c9d2942ff7b62554b0588370426e4f0eb238967bba32168c730d4b4bb46a04fda5f5bc"], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = openat$cgroup_ro(r5, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) write$tun(r7, &(0x7f00000001c0)={@void, @void, @eth={@remote, @random="82e06ec0eb20", @val={@val={0x9100, 0x3, 0x1, 0x1}, {0x8100, 0x1, 0x1}}, {@mpls_uc={0x8847, {[{0x6}, {0x0, 0x0, 0x1}, {}, {0x400, 0x0, 0x1}], @ipv4=@dccp={{0x5, 0x4, 0x2, 0x4, 0xa6, 0x65, 0x0, 0x1, 0x21, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x3d}}, {{0x4e21, 0x4e22, 0x4, 0x1, 0xf, 0x0, 0x0, 0xa, 0x4, "3348c5", 0x80, "c81fd9"}, "65cd0fe3bbcbecc43871ff933783d58ed4f6645a4609ca84de13cc7b4d6a33b58497715b189a34b3a27acc0d1157017bcb59a244f5e93cfae9f80b388961b65f24b5628dfb77314046c2b3312fb4448615f777b1294d46d81a4b8a968fa776c65e22f9b62414e61d7f68020f0abfee5b8168b7eb9775b7944920397762b599361cc0"}}}}}}}, 0xcc) write$tun(r1, &(0x7f0000000180)={@val, @void, @eth={@random="8bf76f00bd88", @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @local}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}, 0x3e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:10:24 executing program 2: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) ioctl$sock_ifreq(r1, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) socket$inet(0x2, 0x80001, 0x84) 02:10:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x6, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:10:24 executing program 4: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r2, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r2, &(0x7f0000000100)=""/238, 0xee) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) ioctl$sock_ifreq(r2, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x19, &(0x7f00000000c0)={r4}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r4, 0x81}, &(0x7f0000000100)=0x8) [ 548.876622][ T1278] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 548.974937][ T1286] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 548.988445][ T1308] IPVS: ftp: loaded support on port[0] = 21 02:10:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000), 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 549.022915][ T1286] bond7: (slave bridge19): making interface the new active one [ 549.032794][ T1286] bond7: (slave bridge19): Enslaving as an active interface with an up link [ 549.074573][ T1278] bond7 (unregistering): (slave bridge19): Releasing active interface 02:10:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000), 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(0xffffffffffffffff, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 549.483764][ T1278] bond7 (unregistering): Released all slaves 02:10:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(0xffffffffffffffff, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 549.639201][ T1336] net veth1_virt_wifi @: renamed from virt_wifi0 02:10:25 executing program 2: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) ioctl$sock_ifreq(r1, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:10:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(0xffffffffffffffff, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 550.121648][ T1286] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 550.175100][ T1278] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:10:26 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:10:26 executing program 4: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r2, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r2, &(0x7f0000000100)=""/238, 0xee) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) ioctl$sock_ifreq(r2, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x19, &(0x7f00000000c0)={r4}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r4, 0x81}, &(0x7f0000000100)=0x8) 02:10:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:26 executing program 2: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) ioctl$sock_ifreq(r1, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:10:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x7, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:10:26 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="000000008bf76f00bd88aaaaaaaaaabb08004500002c000000000006907800000000ac1414aa000000000000000000000000000000000000000000000000bdde6065c586c0366ef140b8b6996ace28134d4155ff6716ffbd697d27a89d7c8f4292f846af6849a90b26ee047405924159fdf277903d552f5d3c18b46620b0de0fb01a06222659fd150ae54013be8ab4bfaf8ca102ea6aaff6513d97777c20b5ff1e4ad1a9c7e530c7c79f8ce892bacc4ade98f6a8deba1dc07258ca1c4917352bbe7380bc0aac1d9a1f33e4ce968cf72f770b8e847705a87d3f1a00"/232], 0x3e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 550.578030][ T1455] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 550.615118][ T1461] IPVS: ftp: loaded support on port[0] = 21 02:10:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 550.936997][ T1463] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 550.992155][ T1463] bond7: (slave bridge20): making interface the new active one [ 551.030274][ T1463] bond7: (slave bridge20): Enslaving as an active interface with an up link [ 551.078436][ T1476] bond7 (unregistering): (slave bridge20): Releasing active interface 02:10:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 551.514606][ T1476] bond7 (unregistering): Released all slaves 02:10:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 551.974635][ T1455] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 552.022404][ T1463] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:10:28 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:10:28 executing program 2: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) ioctl$sock_ifreq(r1, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:10:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:28 executing program 4: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r2, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r2, &(0x7f0000000100)=""/238, 0xee) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) ioctl$sock_ifreq(r2, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x19, &(0x7f00000000c0)={r4}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r4, 0x81}, &(0x7f0000000100)=0x8) 02:10:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:10:28 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000140), 0xff4d) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x10}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 02:10:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 552.337647][ T1630] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 552.358587][ T1628] IPVS: ftp: loaded support on port[0] = 21 02:10:28 executing program 2: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) [ 552.534962][ T1639] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:10:28 executing program 4: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) ioctl$sock_ifreq(r1, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:10:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 552.634835][ T1639] bond7: (slave bridge21): making interface the new active one [ 552.694911][ T1639] bond7: (slave bridge21): Enslaving as an active interface with an up link [ 552.746455][ T1644] bond7 (unregistering): (slave bridge21): Releasing active interface 02:10:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 553.192801][ T1644] bond7 (unregistering): Released all slaves [ 553.246863][ T1630] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 553.303036][ T1639] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 553.352312][ T21] tipc: TX() has been purged, node left! [ 553.365679][ T21] tipc: TX() has been purged, node left! [ 553.386620][ T21] tipc: TX() has been purged, node left! 02:10:29 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:10:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0), 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:29 executing program 2: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:10:29 executing program 4: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) ioctl$sock_ifreq(r1, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:10:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x9, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:10:29 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000000058bf76f00bd88aaaaaaaaaabb08004500002c0000000000060377fffffb00000000aa000000000000000000000000000000000000000000000000f2420ebeedf023bc62e0035abc2f0969c75f8aa1a3ba0b5e26ab1b9e4a49a71564cddd3e919e4cceb68957cc5c4ffe5de3d940d37505df45b9975aa8851ab63381110d00000000000090206c4316561a5616eefb79b5"], 0x3e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:10:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0), 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 553.774633][ T1814] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 553.790253][ T1816] IPVS: ftp: loaded support on port[0] = 21 02:10:29 executing program 2: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) [ 553.941072][ T1821] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:10:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0), 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 554.065206][ T1821] bond7: (slave bridge22): making interface the new active one [ 554.097046][ T1821] bond7: (slave bridge22): Enslaving as an active interface with an up link [ 554.125494][ T1853] bond7 (unregistering): (slave bridge22): Releasing active interface 02:10:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{0x0}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{0x0}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{0x0}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 554.486930][ T1853] bond7 (unregistering): Released all slaves [ 554.875403][ T1821] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 554.951640][ T1814] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:10:31 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x0, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:10:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:31 executing program 2: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r1, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:10:31 executing program 4: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) ioctl$sock_ifreq(r1, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:10:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0xa, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:10:31 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) socketpair(0x2f, 0x1, 0x58, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r7, 0x200}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f00000005c0)={r7, 0x8001}, &(0x7f0000000600)=0x8) r8 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r8, &(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000240)={@val, @void, @eth={@random="8bf76f00bd88", @broadcast, @val={@val={0x9100, 0x0, 0x0, 0x2}, {0x8100, 0x3, 0x1, 0x1}}, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @local}, @name_distributor={{0x44, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x7, 0x0, 0x0, 0x6, 0x1, 0x3, 0x4e21, 0x4e24, 0x1, 0x3}, [{0xb783, 0xd6, 0x700000, 0x80000000, 0x4, 0x10000, 0x8, 0x2}]}}}}}}, 0x72) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 555.297191][ T1971] IPVS: ftp: loaded support on port[0] = 21 02:10:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 555.473831][ T1978] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 555.546373][ T1985] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 555.577947][ T1985] bond7: (slave bridge23): making interface the new active one [ 555.587979][ T1985] bond7: (slave bridge23): Enslaving as an active interface with an up link 02:10:31 executing program 2: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ioctl$sock_ifreq(r1, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:10:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:31 executing program 4: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) ioctl$sock_ifreq(r1, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) [ 555.621430][ T1986] bond7 (unregistering): (slave bridge23): Releasing active interface 02:10:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)='9\x00\x00\x00', 0x4}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)='9\x00\x00\x00', 0x4}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 555.955924][ T1986] bond7 (unregistering): Released all slaves [ 556.402826][ T1978] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 556.445563][ T1985] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:10:32 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x0, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:10:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)='9\x00\x00\x00', 0x4}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:32 executing program 4: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) ioctl$sock_ifreq(r1, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) 02:10:32 executing program 2: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ioctl$sock_ifreq(r1, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:10:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) [ 556.845281][ T2137] IPVS: ftp: loaded support on port[0] = 21 [ 556.897512][ T2133] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 557.330942][ T2141] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 557.350991][ T2141] bond7: (slave bridge24): making interface the new active one [ 557.359656][ T2141] bond7: (slave bridge24): Enslaving as an active interface with an up link [ 557.376785][ T2145] bond7 (unregistering): (slave bridge24): Releasing active interface [ 557.505396][ T2145] bond7 (unregistering): Released all slaves [ 557.582633][ T2133] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 557.672932][ T2141] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 557.723050][ T2141] bond7: (slave bridge25): making interface the new active one [ 557.739526][ T2141] bond7: (slave bridge25): Enslaving as an active interface with an up link 02:10:33 executing program 5: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={r0, 0x14, 0x1, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x3}, 0x20) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r2, &(0x7f0000000340)={@val, @void, @eth={@dev={[], 0x23}, @local, @void, {@ipv4={0x800, @tipc={{0x16, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @local, {[@lsrr={0x83, 0xb, 0xa2, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x39, 0x1, [{0x6, 0xf, "6e9c864368297eceaaa91737b2"}, {0x7, 0xb, "b98ee1cf481c89804f"}, {0x7, 0x12, "e4983c2a2728229f709e0c5eec3f6e96"}, {0x1, 0x7, "e0b8471812"}]}]}}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}, 0x82) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r6, &(0x7f0000000140), 0xff4d) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f00000001c0)={0x0, 0xa5, "d8707e5a1d726412dbe8127b5bb7ba666f10bb69a03ef320aa7a719c50d40e1e52af680f455c8d0303c8bd369d718672aa34fb136d4f585942fd80d329dd1f48ef382f7f2c2aa3e8d366fada8005982ae8972bff211634c0c1c361819cbce0cd5a5145983ef337edcaea5a29ac7b3760fd72600f6965d141b5a995ec42a07a93b0dc5ac7fe2d3cbec287dee4ee09d35e1c7878b9fe70d45e85d8c2acca97e55c5189b7234c"}, &(0x7f0000000040)=0xad) 02:10:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="390000001369", 0x6}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:33 executing program 4: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) 02:10:33 executing program 2: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ioctl$sock_ifreq(r1, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:10:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0xe, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:10:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="390000001369", 0x6}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:33 executing program 4: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) [ 558.065248][ T2294] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 558.159607][ T2301] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 558.211245][ T2301] bond8: (slave bridge26): making interface the new active one [ 558.220435][ T2301] bond8: (slave bridge26): Enslaving as an active interface with an up link [ 558.507121][ T2306] bond8 (unregistering): (slave bridge26): Releasing active interface [ 558.616676][ T2306] bond8 (unregistering): Released all slaves [ 558.949020][ T2294] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 558.988017][ T2301] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:10:36 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x0, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:10:36 executing program 2: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) read(r1, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r1, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:10:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="390000001369", 0x6}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:36 executing program 4: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) 02:10:36 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x4) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000180)={@val, @void, @eth={@random="8bf76f00bd88", @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @local}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}, 0x3e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:10:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x10, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) [ 560.959094][ T2413] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 560.997239][ T2417] IPVS: ftp: loaded support on port[0] = 21 02:10:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 561.059727][ T2422] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:10:37 executing program 4: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) [ 561.178410][ T2422] bond8: (slave bridge27): making interface the new active one [ 561.217274][ T2422] bond8: (slave bridge27): Enslaving as an active interface with an up link 02:10:37 executing program 2: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) read(r1, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r1, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:10:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:37 executing program 4: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) [ 561.432808][ T2413] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 561.461168][ T2422] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 561.523905][ T2422] bond8: (slave bridge28): Enslaving as an active interface with a down link 02:10:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:38 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:10:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x48, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:10:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:38 executing program 2: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) read(r1, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r1, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) [ 562.295426][ T2554] IPVS: ftp: loaded support on port[0] = 21 [ 562.789556][ T2548] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 562.845632][ T2555] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 562.867423][ T2555] bond9: (slave bridge29): making interface the new active one [ 562.877777][ T2555] bond9: (slave bridge29): Enslaving as an active interface with an up link [ 562.894467][ T2558] bond9 (unregistering): (slave bridge29): Releasing active interface 02:10:39 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x2, 0x2}, 0x6) close(r2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x4}, 0xe) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40106614, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000001c0)={@val={0x0, 0x890d}, @void, @eth={@random="8bf76f00bd88", @remote, @void, {@ipv4={0x800, @dccp={{0x1a, 0x4, 0x1, 0x6, 0x16a, 0x66, 0x0, 0x2, 0x21, 0x0, @broadcast, @remote, {[@ssrr={0x89, 0x1b, 0x24, [@dev={0xac, 0x14, 0x14, 0x12}, @private=0xa010101, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x23}]}, @timestamp_addr={0x44, 0xc, 0xd3, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}]}, @ssrr={0x89, 0xf, 0x73, [@private=0xa010102, @rand_addr=0x64010101, @local]}, @timestamp_addr={0x44, 0x1c, 0xe8, 0x1, 0x9, [{@remote, 0x6}, {@multicast1, 0x3f}, {@empty, 0x7c6}]}]}}, {{0x4e23, 0x4e21, 0x4, 0x1, 0x5, 0x0, 0x0, 0x3, 0x5, "44f647", 0x0, "1e6d54"}, "d028de736d52078dff688d7da889cf1bbac09d37f0c9197250c81d8fa2192ce75580fa161241dbc395530c22f6da963179374fe118e72dc90db077565a9d06d250ad5dc50f71c670eb258ec83d8d9d59fc94da8db5a2fb58a43c111f66ca49ad1108260f5599cf229e09b6d47449bd0ab458b44827a5cbcca7110f9d2612b76895d5c837c4e39dcfef0498030bdfb17a8f5ff9182d0179cdb12af8f1af85764ec8f7e81c2b07a8cb61a513556baf7f76e873d8feb0ac44fae524d2af18db7bc0171b94a508fb79458baf78a7c36400e8d407ed85bd4773cf8aaaebe5337673362c89e932c9165c666d2cd514713f5333ca60"}}}}}}, 0x17c) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:10:39 executing program 4: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) 02:10:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 563.031748][ T2558] bond9 (unregistering): Released all slaves [ 563.070548][ T2555] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 02:10:39 executing program 2: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r1, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) [ 563.147954][ T2548] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 563.191889][ T2548] bond9: (slave bridge30): making interface the new active one [ 563.211099][ T2548] bond9: (slave bridge30): Enslaving as an active interface with an up link 02:10:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x4c, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:10:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:39 executing program 4: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) 02:10:39 executing program 4: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) [ 563.524222][ T2707] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 563.607860][ T2711] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 563.654936][ T2711] bond10: (slave bridge31): making interface the new active one [ 563.685554][ T2711] bond10: (slave bridge31): Enslaving as an active interface with an up link [ 564.104054][ T2713] bond10 (unregistering): (slave bridge31): Releasing active interface [ 564.287459][ T2713] bond10 (unregistering): Released all slaves [ 564.333965][ T2707] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 564.429402][ T21] tipc: TX() has been purged, node left! [ 564.436061][ T21] tipc: TX() has been purged, node left! [ 564.440777][ T2711] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 564.459238][ T21] tipc: TX() has been purged, node left! [ 564.472894][ T21] tipc: TX() has been purged, node left! 02:10:41 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:10:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:41 executing program 4: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) 02:10:41 executing program 2: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r1, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:10:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x60, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:10:41 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000001c0)={@void, @void, @eth={@random="8bf76f00bd88", @remote, @void, {@ipv4={0x800, @igmp={{0x22, 0x4, 0x3, 0x3, 0xb5, 0x65, 0x0, 0x81, 0x2, 0x0, @multicast1, @rand_addr=0x64010102, {[@rr={0x7, 0xf, 0xb, [@broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0xb}]}, @timestamp_prespec={0x44, 0x2c, 0x6a, 0x3, 0x7, [{@remote, 0x8}, {@multicast1, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9000000}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x1000}]}, @generic={0x7, 0x12, "48ef9927410503da4b5f974c3cd2237e"}, @noop, @timestamp_prespec={0x44, 0x24, 0xd5, 0x3, 0x1, [{@local, 0x6}, {@loopback, 0x7}, {@local, 0x9}, {@empty}]}]}}, {0xb3ade7774500c164, 0x9, 0x0, @multicast2, "59b6401d9bad00ee405da0ac689a26ab4f8f62b68a19e0860da528b4d94da546f9f6501152"}}}}}}, 0xc3) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 565.465340][ T2811] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 565.557850][ T2838] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 565.589571][ T2838] bond10: (slave bridge32): making interface the new active one [ 565.600493][ T2838] bond10: (slave bridge32): Enslaving as an active interface with an up link 02:10:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:41 executing program 4: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) 02:10:41 executing program 2: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r1, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) [ 565.652529][ T2854] IPVS: ftp: loaded support on port[0] = 21 [ 565.782280][ T2861] bond10 (unregistering): (slave bridge32): Releasing active interface 02:10:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 566.133160][ T2861] bond10 (unregistering): Released all slaves 02:10:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 566.578361][ T2811] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 566.631434][ T2838] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:10:42 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:10:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:42 executing program 4: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) 02:10:42 executing program 2: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r1, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:10:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x68, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:10:42 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000180)={@val, @void, @eth={@random="8bf76f00bd88", @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @local}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}, 0x3e) r5 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.controllers\x00', 0x0, 0x0) ioctl$TUNGETFILTER(r5, 0x801054db, &(0x7f00000001c0)=""/254) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 566.942948][ T2966] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 02:10:43 executing program 4: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) [ 567.023148][ T2969] IPVS: ftp: loaded support on port[0] = 21 02:10:43 executing program 4: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) [ 567.102274][ T2974] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:10:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 567.172709][ T2974] bond10: (slave bridge33): making interface the new active one 02:10:43 executing program 4: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) r1 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) [ 567.235746][ T2974] bond10: (slave bridge33): Enslaving as an active interface with an up link 02:10:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 567.276816][ T2997] bond10 (unregistering): (slave bridge33): Releasing active interface 02:10:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 567.642626][ T2997] bond10 (unregistering): Released all slaves [ 567.850791][ T2966] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 567.910505][ T2974] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:10:46 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x0, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:10:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:46 executing program 2: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r1, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:10:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x6c, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:10:46 executing program 4: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) 02:10:46 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="ec0000008bf76f00bd88aaaaaaaaaabb08004000002c000000d3000006907800000000ac1414aa0035659790b21c315f9400000000000000000800"/72], 0x3e) r5 = socket$netlink(0x10, 0x3, 0xe) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000005c0)={@local}, &(0x7f0000000600)=0x14) sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="24000000200003041ffffd946f6105000a00000a0600000000000f000800180022001200140000001a00ffffba16a0aa1c09000080000000", 0x38}], 0x1}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r7, 0xb03, 0x0, 0x0, {0x13}}, 0x14}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x320, r7, 0x20, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x114, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x966}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_MEDIA={0xd4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xab}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x44}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc05}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa6dc}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x342}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5b0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xda23}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @private=0xa010102}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xbe}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x64ed}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x657}]}]}]}, 0x320}, 0x1, 0x0, 0x0, 0x20}, 0xe3db14718f8e35c) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x4}, 0xe) connect$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) ioctl$FS_IOC_FIEMAP(r8, 0xc020660b, &(0x7f0000000640)={0x10000, 0x18ec6394, 0x2, 0x20, 0x1, [{0x80000001, 0x9, 0x2, [], 0x128a}]}) [ 570.502613][ T3117] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 02:10:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 570.611282][ T3137] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 570.644717][ T3148] IPVS: ftp: loaded support on port[0] = 21 02:10:46 executing program 4: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) [ 570.756787][ T3137] bond10: (slave bridge34): making interface the new active one [ 570.800468][ T3137] bond10: (slave bridge34): Enslaving as an active interface with an up link 02:10:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 570.856745][ T3117] bond10 (unregistering): (slave bridge34): Releasing active interface 02:10:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 571.204410][ T3117] bond10 (unregistering): Released all slaves 02:10:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:47 executing program 2: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r1, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) [ 571.717316][ T3137] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 571.800900][ T3168] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 573.669318][ T97] tipc: TX() has been purged, node left! 02:10:49 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x0, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:10:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:49 executing program 4: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) 02:10:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x74, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:10:49 executing program 2: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r1, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:10:49 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000015c0)=ANY=[@ANYBLOB="8100635b36dd2f5e3103"], 0xa) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x3f, r3, 0x200, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x0, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) pipe(&(0x7f0000008f40)={0xffffffffffffffff}) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f00000091c0)={&(0x7f0000008f80)={0x10, 0x0, 0x0, 0x800100}, 0xc, &(0x7f0000000180)={0x0}}, 0x4) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000140)="fba4e707de64498066", &(0x7f00000004c0)=""/230, &(0x7f00000005c0)="9fb6054f963e16330a3ae652ffac8178d6d8a315c68763bda76ac63b7bd4ba24d5ecfd70a5550240d12f7df1a405f69406005cfd51bbc1b0384c1dcd94787840488438905ec9a0bb2d3b8f2d21b4d14fc771de722052b34538cdb3aec06d9896a0e94c5aefaabc820ef028b9fbd22a177d70a1c3aa9505746e5568850dcd67c895a3e3ae6932a6d76c747e8ab9745a66980452ec58f346f95bd9091915970bb2158cd4e90cc3d1bb7cab076806e0bc34eff8250647f26f25ccdcb4409f0270de81c5719269a10331abbb80eed2b226bdb956", &(0x7f00000006c0)="4126b5e19886c573799d8e864c1813fb17f6bede5133f1dceba4ed2b6b10f9a780d03c0f6825ccf37d5ef103884a5887535e844104de883421a4a82c494949bf6a2a7ca8aa7e660240449b423c4f2c94c900bf11cc5d0f21a0c3d8537ca6e2344414060f513333f0e573528640d83e027edc96f0b642510a87a8ebd9c7fb97cd4521042b65c85d09bfb4d2ca9c94fe5232e0ed0a39df824bead18974e46310a5f19a3d6f28a9d5722d4ab61e8053a4df7b5b8f014c9eb65eec7468475b53d75edc245e613e4306c400", 0x81}, 0x38) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000280)={0x0, 0x400, 0xed1, 0x8, 0x1f, 0x2000000}, 0x14) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="200027bd7000fedbdf250400000008010000000000000000020014000100fe880000000000000000000047da5663afc886200000000108000700d9000000080008002e00000005000d000300000075a68e4442482ca7f2e6910560f5c0028e39c4befbc53d514194f010340da6ac2b68b494d35a4396a4238bdb5a8638cc78276b9fd42ed57030abcf107000407a32c1539fd52ebef7c9b95ca1e3f34bd1a2332c4ab9968d98b3ec352d89e9093046e049d43a6c3b1f1a7464d4207f58cac387f51851e2a3a50967c9d2942ff7b62554b0588370426e4f0eb238967bba32168c730d4b4bb46a04fda5f5bc"], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000040)={'TPROXY\x00'}, &(0x7f0000000240)=0x1e) close(r2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000001600)={@void, @void, @ipv4=@dccp={{0x19, 0x4, 0x0, 0xa, 0x1074, 0x65, 0x0, 0x2, 0x21, 0x0, @empty, @multicast1, {[@ssrr={0x89, 0x17, 0xca, [@loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x21}, @loopback, @dev={0xac, 0x14, 0x14, 0x12}]}, @noop, @cipso={0x86, 0x37, 0x3, [{0x5, 0xb, "79a81b6cb29a1ad739"}, {0x7, 0x11, "2a470fb58f3d31f2a2e19c88e0bd44"}, {0x7, 0x3, "c4"}, {0x2, 0x4, "c23d"}, {0x0, 0x9, "e5fb746f56cb67"}, {0x0, 0x5, "fa94ae"}]}]}}, {{0x4e22, 0x4e24, 0x4, 0x1, 0x3, 0x0, 0x0, 0x2, 0x6, "e3d1c0", 0x0, '\x00,9'}, "1a0c85dc048e6bb70219047ffe33ab5a1d8205d7f0b1514749a3d7940b15476858ed0eadb655bd6f36aa50f83691de314dc08af0637f3e40165f4383e38e6e219c1547237ec31adc211439ce296c2c801d6f508c69a86fc18ae14ec2b1c9f5ef3e94c0a710a53e327556fac0c7ae811a536a1482be8959a597fcb5faf97007bdb04368467912ebcf2a5bacd14d1876a95619e32955f00e9c01fdb0663afd1577cb995b70c86b6f860e4883d0802a59c405cf95c69c4d3bdd3213652df10d176e1ffc61702af3eaa86640d5487783ea7a370dbb5f7220ef24e7e201d48904bfff2a887f3eb2539b637a76fa754b475e4de17bed52065039370b4307a7aa4d835fc6306b01ae86c0551d9678e0abd71d4f6a0add5205797771990774b70d8c5d1b072784d739faa562ceb4471560fe70e1bd2c2948080bbdebe64c1cf26a6dafcab8e23c0813f21da8ca6abe3fb5d5e9d2c849107108c36288fabb6d55049dae051f6b88fc6c3cf5ca1c106a9bc81145eb454f00bb53add1dafb68533fa51de41f0eec0e98f8fafade167dca4b29aca9ae3487a44d0f4100fb9334998445613902cf96723333c6085c708a4d4904e50aa366ffdc0150c1e196495186547c9534b1aee5441d2cacae578dd0446cb3f4aa30cc19a286d3a67232fb0931fdc07a9c75faab86637bded38a3ebf1cf0573a289d04a7b2c74d68e3d9956c18db11d4271b9200703fd82b7790fc36b9c25ba1b8c78b91d19d24fc41893f3a58dd676eb1fcdaa7fd043800eee7c7646ee2a9085624169cd6318fcef5d3837d92a11d567c5268dbf5063893084690450503c742d19cae8aa27b25d6a2ff958d6beb78927d04df4e261500737a64a1fe3b6b89aff7cb88244378adbe833e6ef4a575b010799dd853fdb711101c07854b6189d0834f32df99dd7218373a113e5a00aed997cd45c37bab2310291d220fcd03c3f072e157721f22dbdba287923ebf4cff13f9d5493826a7eda68ff356ec44124e03feaf881bc36802a68652465342ca3eddbbb15a73345f1b99bf769c8da7db7f153623f28fddd4dc53897ad487ef2556ed6db2f3375f187a32bdeff122183c99066b992deb28c60c8d1309a9a46263abd0730fd8c4ed02fb910ea4a8ca1583cf6052e9e80995066f242825d5c9c838f8e7680881ac96da88852b326f497df2dee87ca45dcd552dfc5671cb138a97ecb0514aa198cc198c5101e62cbf960e6e16c395e2e80fbca12c8e77e5146b15b548f7e6cbfff30cfb7c73532052f3b609057421f237c9029b05c2cefb0353a13ecbf7804d07141ca1f06535e0057bfd99b683c36a968fd4ecb3e773b217dd7c2307609e7801c3fa1b8f17d16da4a2a95a151158e51a9939e2fa9a7869efbf3f83b76be81dbe75295b60fca16469c31d8ef3ea8669e6e118826f5d99ba0ad1272b20e04f39f289011008a25be6eb5ed5382a3cf81018f21361683c13543842a86db92e3b1c47122f46f3b93c6b967ae9ce179f7aa3dbf16674d6a20440a0b1fb124349fcc7e39390f9824df7b26495e6b990320f050c285f5d28f06804c7dc615904b21098375e3d940528ce02c74a445a48510a122d299eb7b04d436f6bfaeeebd6847492bd8f0cc1d92d7c5eac78daf85f514d0ae29bc93e8b4b6826a4d08658275bf0735a12bf08d499ca158c4859a5050dc81dfc92b798c7c707357693e6e8114900c749e4b6e9ed2762d7531619e8acb7586a00260673c84e9b0fdc99481f0b268bf5bd6e96f0f30ab77fee3a20c9543bbb1afd57529c739837b2a3c3c4cb678bb8cc2d618c3c93987bbbc9d7d5ea1c93c2a6ab11acddecab2aee24aaabd54b241241493f990108f8306a407d55f771b7ddc3380a7a31ec790c82bed94427acd351d5171051820d9518a1ce478c7b277a6def57c1686c4c0cc7cc3a53ba3ca7fee5023c6b40da8fe6e05926e019fb5f6f4b3e8460254a21193178a729aeef2abb60e2d61b2c9a48bef2eb39807dbe4c286d5d9b52957ce50152522875b1d3dfc759cfb7787551c3b67dd86f21c26441a4004d41b040bc5f4665dea023350af750af60ea151f0899adf4c6cb8401fdaca72ce8d60685e278640d764369cb61df9282575d0d2182e61b6fee0392a34d932c19c2bfbf099cb2c106bad39079ebc1d589c22f19f94301a9793d2ea15c7a4e2bf54e5c024e4024064b939946fadd4abb0bc36aa62d3bf5bd18cf91ce05c1e6a3092dda8221949b80611f2980010d6359d49c386266db2e8ede7545dc673811333d37b73092c0e0a7502273f573ad5b76b3607858d2710fa8f2b32a108ce5799f0efef550cda917a33a199ccf4ed2299a8c9351b3a618035d85c8f290f8c58ea55f3cd33d90023c4dff929c3593c10849ef51f02c4c18c9ddb4b7e70e2f4206eecd65f817d69e422bbb45b4d17bc716513d37ac7e4446e42d492d29e47e7d5c0162dd8a88cccf55dd1c5fc1ba70d8822039e978e3c75f0ff5c2b9ef1e612ab32d9d65f2264badce4f4213be89eacaa883a074d57ec8de367dd792032d367ef98af28555e6b1c00b08deefd115896ec44ff23f3312ec3b6887de9ea9b22ea694a3250be9701af58a90cdf568d9ed10e87299c79b7072149e53004f5a4a4a55481e74d2f38bfeda74664181380aa7cec4ca006a99436c25595b6219fa48e090401d1d5e722536bf1c3997175dd6e5d7098be0583d8f52d5a1480d7b96f1c6bf89075ec49dcce593920fe043a137b7a599df7a764c24bf9d9855eecdda29b0ba3b753846125998992491a9ef0ba24bd640ebf00ad138f266842285e125ceccda376290c197d2c8666016a5f056d7d3a839bce339f8b722158e48c856e03f78bc00f07dd53c0e5fad616247ea2fa0f140f20cfc54de68780e634b27b23581ed2c6fa9d1e124163b27249b5c77b638372dcfa8eadc9a74ee4b6dffcfaa74d2133615f038c946b8f464a075fd220874140e3917fa83190bf30111f97ed0870b26803d01345886a50c25d6a50ed3dfd3360b2bd1e1a3ebedcfff84eda470229584f6faba185c6de784912ca4effc60f4252a4b4be187059f602b7c350829e56298cc7b13b9bada5f23ed55036737fc97fe29185ea3972704a714227085261f086fc9d8d61632a6dfe5a044e87761c24ed60c31eed6b19fe5cba8421644d4ff9787c4754fe9e65b9ee20909be3b21b073a0f674c4f5e1753eebccc4e5de97804f9d614e99f9b67789b95f628dda658b74008006f0416e018826298b151a2ff95ee2f72ec072f46cb406ba3a1e90dc84b048047dace17e60695c20546dc8855b34b6932e32857565674444288a5f9164e4aa95564ed9b0ac0e180459622fec406a9fc73bd67cedaa64b8c150530d3c5a72d6cf04dd750ad74f8442a3ae38110015522f951d56368a9dadda0862dc7585ac044946ecf94b6f5923ec180a4398af8f9bbacd7157caf81f94ebbc4a2a7103d273803e14da542a4d74c2415652c28146ed46478c30972225df1c7b63f2be30c7d73394d941b07613043efca70272a9a2de172a4f4d48d6d5a4e8e1d92ea2abe56f915055a72675ad7484511739d21377332afdd38993ad5bd27ddca42880ce38f53641c90f45db372652b4505bb48f3c2e3bf63e3654c89a214abb340425d1443423e31fca442d5e1a8addc000b6aa518a7f660e6e795029cfbd36fa5e1f5d2eddf050116b7e2d877cd28cf1e040d0dda1ab85d42316be0bbb7966a14d5e8d32aa91d4382b5a5522731c0d780642be479e4579d5be9a201276a9ddff25ef4a384222d780faf1ab78e91adad80c514898e219397eb53f0464bec362162d4b0dc39dd5d2c8f570d6ec21a6e53b1bb27c2a53b082736c61fa36724a674f293296b752181829301c84f22563091fd31553b5bed1eeac36ae98faa531e3eba46266cfcd2a620bd652e73701201dea03130543b1eaa4090f8186989bca88b94e356911a14b88a16ab0975570f4ee61ca48883e02ce0c57fbb624c0d76b3a2cb21d0266486029cdf0d63993426361ff0904bd5908a972cc0526e31068244919e1b12a4b47ff445cefe3b73bf594a21591de6ffa902b894ac8e307e7e7de6067576cb4d05ea79bc642249ee434478f80d046bc7029d951472d980f5cddae3b9d548af2064c1cf25a541f037d32ca16a685802301cc71545df66058efbd12a539697135f32d3968132e624e1c68182691026db5ad8bd8ac4eb59fd58eae71faf278752552fa578ef77d43b07e7916f89f612a48e8e6e8356f5fbaba32cc2ec5e69559c257fe05bee7f8a508bbe7bd3c268453f1028a9b9cbad6cf727c23bd6b485c07e678c4f0fe7e5e3acffa5bdc20db7cd07c5658e9d8b9398dd57671eb57e11ffb10607296a74e0871c929ffd3133c9e5cc0e17d73af7715c7acdd7b243d8fa2b4e92cea58fe1af37ad35795ba3c82ecf4295d7545d2cdef9c3e89b8d139cb9560166430d1f5998fa41a2e399b2fbb1be6a9e30c55e6d21a0bbfbf2ff07c93a6a18af0930cf91c8b5af62ae7bb6e3b53ffdb7d86b32a60d3a448d33b68c575c5e2af01f21d82c0dc23e8d5c24a038679394ed69eb30d8b29ed6d0996cfb973ef909f603f6011d7a90bc148aabbe9003436bdc498732d4c919e55262757151e8eab638b0abe6930600a33a34da606d237ddf2a57138837327fc09c77f49d3697292178ed75c63912bacbb932308f886fbd831392946636bdf58714144c22c4a0d1287cf6f701208d5bd7ffbda7b0b2bf673b0cf316042ddfda06c6e5be2beb79e052b8e0be07e86c9fdffadfe990f40a3a7f89b178f620e9c79136f211d748ab85506caa9fde63c7d87f2af7da73304141d9f18323d29f04fb465f19a73c7e2d91e4cf2433622d6a8539e012390ef859863fb929a06d9fe436e6b5f4e30d44fed7d4a237cca0f1a448adf3e67dd7d575335dd402d7c674ba3e30acfb422b15bf22d0aac7e397950b0c8d2a251254f89baac00c93a91a73e70b9679ef6e6593e8b263c09e08bce826c941c88f13efd9b9fb2ad2ffc5f1b5f90b9faf0b6f2e06f446dd120dfd94bb2d6751972dfa5dad6d7283fa36783ab1931003a69051dfa71fc202b2b91b73de1ae90d7ea583d628d7456fa6eb7a5e072c290ef4b299f61a184b9cbaed4f0483b83065c532c9708430b9007b52aa89a54553c79226b69e26b478920bc8c150dc0486b736e4c42f8f05a34ac5fb481b71fc953fe639bd58852ff257e12afda8c316219de64c5aeaf653e9a00c965f2ad379e54311a256020923a8290e5eb9920cc7916c601198ab3c04416dbbf684f97ffb68314980fa0a913b76a990d112215f7efbd12436ae3decd419c101601640b945b6f870192cdb9f52b449d94d633ad339967e34f596421ad3d66a4c3bd0beca126b46757f0b6b3c37e4fb49f4c7f1ff883788ebc3ab97859a992446fd3ec6575a0437fb0419819ca6676897f03795b5424f248e525ee1e2ea7b9e4c49fbf04cf7f04b6ff416e5cf139d7e1052d20d5407df5333df23072987e765f3ce7586470388dcddb9dff007bd5231fdf128d39c50111cf9c2a64f0dd4479c34a02ef80ed19b9adb831788c0602e2031cd0c6898ddd484ed8dfa6007fc5aff4af73f1b789d1ce88394683664e6a6a280baae37877349d022fb435a1c33a321ea7754ea7bc468d86e71e8d156c164be184bd4f8b1486a932923f43a4bd305783cc4b3b1264ab55afacb732c6b7ec8e8e544c233bb4e8fa71ab928252515926d7379ab031f0a105c632802eb40e2a878a208ecc25312c06f2"}}}, 0x1074) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) socket$inet6(0xa, 0x800, 0x9) 02:10:49 executing program 4: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) [ 573.800805][ T3286] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 573.852304][ T3294] IPVS: ftp: loaded support on port[0] = 21 02:10:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 573.923704][ T3300] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 573.986956][ T3300] bond10: (slave bridge35): making interface the new active one [ 574.011691][ T3300] bond10: (slave bridge35): Enslaving as an active interface with an up link 02:10:50 executing program 2: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r1, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:10:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 574.173271][ T3332] bond10 (unregistering): (slave bridge35): Releasing active interface 02:10:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 574.571985][ T3332] bond10 (unregistering): Released all slaves [ 574.935034][ T3286] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 574.980727][ T3300] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:10:53 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x0, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:10:53 executing program 4: r0 = socket$inet(0x2b, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) 02:10:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x7a, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:10:53 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000001c0)={@val, @void, @eth={@random="8bf76f00bd88", @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @local}, @payload_mcast={{{{{{0x2d, 0x0, 0x0, 0x1, 0x0, 0xb, 0x3, 0x2, 0x69, 0x0, 0x2, 0x6, 0x3, 0x1, 0x2e, 0x2, 0x4, 0x4e21, 0x4e22}, 0x4, 0x3}}, 0x2}}, [0x0]}}}}}}, 0x53) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa) 02:10:53 executing program 2: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r1, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:10:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:53 executing program 4: r0 = socket$inet(0x2b, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) [ 577.918527][ T3480] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 577.994951][ T3487] IPVS: ftp: loaded support on port[0] = 21 02:10:54 executing program 4: r0 = socket$inet(0x2b, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) 02:10:54 executing program 4: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) 02:10:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 578.202530][ T3486] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 578.293267][ T3486] bond10: (slave bridge36): making interface the new active one [ 578.314607][ T3486] bond10: (slave bridge36): Enslaving as an active interface with an up link [ 578.343793][ T3512] bond10 (unregistering): (slave bridge36): Releasing active interface 02:10:54 executing program 4: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) [ 578.661570][ T3512] bond10 (unregistering): Released all slaves [ 578.948374][ T3480] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 578.999232][ T3486] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:10:55 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:10:55 executing program 4: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) 02:10:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0xf0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:10:55 executing program 2: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r1, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:10:55 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000e874c69f140012000900010076657468000000000400020008000300c91e25de29b04b74231c3fce927ac1d17df92bbb725c938eade5cdd64c85e6ea52e994d419c9e53a7cc3c80f0a049582017e34839d8f76105bd8210019073273e596cb31ff2b3fee10561c07a78164da04fe37d4f4bdbc50ef88e94aa19301259efd1a5da0232b0823e3aaa458db72444ee0342000bb8f4245b88329a87f0e9d23ca0e06d2f3b904c3c16129f6f108901f9a09d2aa3d7d51b2f657e33b0502be70be3059ab62e61d41371429bbd24f49997149c353b0895a0e2b25b00f3fe61e40b246c573cd45faf89164f7738428b1cc55b18278d0a63af79b0c6832c76a9af60700980fbdb686b1ab9de1316b9fd2c3ac6ef7c879b32cca5a8d572cdbd8f990bd94e2695618a6bc1eac4bce35bf880be69bec6e7754111772c1e07819260a9d37f183f1d41f109c269afde14b6fa736b0dbf9c165fa991803464d711d3ea5c82de1976a208d213dbdf87e5bbb1da7f3bc3a4246c3fcffb54ede9c0000000000000000000000001cc349624e5c0fb44569d4e7d48953201a47e16c198484a17ac592b2e54af1d024e2fd5612e12d477a1bb9e3f38bff00b3dd8bb5b9c4f38ca380a9611c14f2be766c4df23133a9b8c6df014b00"/481, @ANYRES32=0x0, @ANYBLOB="0945f4a27d5870db644dcc49c7a599c428df020c13b8d4b28e3b11eca70616ca4cf8"], 0x3c}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f00000000c0), 0x5a, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000180)={@val, @void, @eth={@random="8bf76f00bd88", @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @local}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}, 0x3e) sendmsg$nl_netfilter(r0, &(0x7f0000001240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x1058, 0xb, 0x6, 0x101, 0x70bd2d, 0x25dfdbfe, {0x7, 0x0, 0xa}, [@nested={0x1041, 0xa, 0x0, 0x1, [@typed={0x14, 0x4c, 0x0, 0x0, @ipv6=@private1}, @generic="513126977f5b68e1e2429fd30128a3e6afe8b90188cd7c4f40391a30360caa9f89fa4251a0e634d57e97b6514bd21e7787005b4a58d1063d9c3e2e031b92ac95f8f5c458f41ec415b0496e3b7b8974ba7cc36e3cf3f7cc71cc8b1acce0d92f4dfba124feeea4f38fae79a2f15bd6ad00822b531c9346b52d725a3f7271dd7a16cf48bfd2af7656b66c7c2dcfe0684188dc61eb1d0c1995f7f5d19223d4635e2d86c73a2dbeb631cb47d823d060f7f83a7fc71562131cbac64b81aa6b62e68991ca55a3a747c4a84e30509e2bf59637e375267a4388cd568b32117e2fb23bcce4ff1b43800c998c23e791ee9dc5cacd3b7ff1a109fa549b00fd20796709ff5ad4b4b2607a4f85721238b5473b90e99683468b49d9fbd3d7301b483f70018dac99ced9e90e214bc4fc70d1e645b090c46ad8dc59308e67122c847f59c4ef8e07c30cb92abb16a6a14c2b4249994ce6ee5c04beb6a2bd6b7ba40fb5453b95f3e9fe537b3cfcd6fc45788aab7bc6fe094f75f06fd42d3db868584270a842cb6d607018fc5cb7161537331197d3c6e674c6668175c6c7c1a196c60a269f8489c48b3ad1fa8ed703e8c4848bc0e9392d06080d64a37049b842f1ac9e580fa1656bb2bb26b993675a0371a2b2ae5d57f820b77b7a2a8c141ace235f2e46b4f81c210c21c71ba326a03fd4d18c18c7c43938a81a071840de15c45885d052a95765b0060097efb3d0cace9991e96ca84dc043500f2900ced05a75a8e5bfea91f0f4398a6dbd8c5424c7544a266ac65a661b8efe3fcc714c62379261a1496a9faec00e7da366a814ddc8bd2642d35463e354926e150418cfb12bb5173640b3e86ccf7f77408d2b5635fe254d5ee7af88466439da98e70c7cc4c9534c86b1a4dbb1d2a9a8d97032c17513718ee6f0f8c2f414e9e5e8717346b4891c53d471409aef599209be5c45cebbe685b6470f78621b0efe7e08fe403682cfd05a9110a58cc9125d5304ae89a15feeabd2a026404a6a78126b34e67ad527ae1031e4fcf120cf34733787c339fd3b8b70848fdc5c1695615daae983b338b03f3537c9a21e3c9c2897652ee14246ff94468f9f5df422094e5eea86c7ad52c6ec8595e41394d70b3349d51a64cca8169503c3d9365d1687872c1d009437cfddf11de07c37e8f50ca2e773fe5a0ff259fbc4b64833370865798e4afc9508b10e3264bd23624dbb6de2af6722c865921f369dc750eb88ee78556603bdcbd7045109d55669a6262089d310d3a971d01b9d0f8e50bc5797ea8c42971380b5c9624fdc259e13664abcb1821cadf1a29b2e5c5b2a697e17bbd9e7d647ee0e7d12e78b26622ac6fc55b4f80ff7fdd1833a3c0d7e1548e43c8b6c8bd262d3437483b6de1856031411cf8315d8d88383304332ec3ce644437bd0b70743fad9b8fd8a01bedc21378fb67be0a059ec987be4118b3c9904bac38a8b576aa231a4cad2528cfe4286f32ef86c9588750019113f5b15acca5e27479270ebd02cebc44f45f0e1c2e4b862f21fea5632a8944de41b385e701dc5ee6c95ffac2e454b027a169bed071d5449869bdc8f6e15808ee2ec48d87cddcbf5a78f0b9a7cb133be91239735ed94df83863b7d79e3b2e0d4c04920fbcca653fbc02f018d3b18d24f9f1bbe32533070309927f646aa9bbf3b7a29caa72b0c03687267ca2d1144f132b209714d59127260aa32ff27a9674d877c3ad448e5b174c01275859c1831e98fe4deffff0660cb9bfa88173d3e357b3b437535f8c950a63df30cd3c398febdc1f5f777f8bb088fbab58316c011994db936fdcb45e743936946081996ee9ed7f497bb1b935a0cf395ca6917556ac7f535535373b27aa914271a6f42d70d9be035008b1582c3bdfc422439b3401f4463738889422c6c3269483e4e357fb790527dd09853e89ea6548f918ad29bd5c5ab79e4bd5c9b824eadf4a67abee6ddcd0006568f3e0ec40172af083b6717cec5864e225dcbadcbf058b8b9e35104000fcfe069f819fdede986d033a9250e30238bd0aaae0d172e17e6b963d1305bbf38e5bbd082dbd9d98fca26cbbf233710c0ab14fa179c9083f7d9c24c3220787d106a0a52533f2551bb07dd6738950f7028049201b4fa9d0f94b087f39273a47fd648fcf10dd885d5efeebaa33dc88546b4abaf639026d453e5710ed2715dfe9658885b3748e5566c496e59669cbc11a5e69ba977d2f828126f55d7d155d5a228cd9a39a9d70952cbd0ac2838e9f257b0e61e646644bd01bfa9013fbef5f1ba841a1d1b70138a00098e6af9ffba2fd5d9a428ce61e2239081a260181a1de23c3d066a754b37495add0841dbec1310465bdee61146b1a5ebd92329b94179263843b989d694133f8d9283534ad8a43a84ac955db4fca1568a1ab3d8f266325653537b2506e6459c143482616d553f609e713fc7c8a8185a57b6a48571b6d7599fe8437e3c37924d8925627b5ffdc9ab042a5de52a54734f0bcca5b6c80d68c6d1274277a4adbfe74dcd80c54aafe9d91d3f3e11c325bbb50392d85860216d6bdac938e65db8d4dd80e6c6461b40d2980665e4e004960b90ca07e00a80cfeb38d4438e75808877d1fe88dd0b5060e99314d7a308deafdfcfd2a2720ea0350bad8a556ea7135cdd3c790a4f64b7c3d5b50253d1d353193b5871449cf8b10118501e74b198bf8a7c757e9d75382b8131724c04333bbdc8bfe9c304f12f5c4a2eeb1de13c13e79d5b3469a8d5664df3f4ba467ca72c1160d640acc0fccc92990e24f114ff122e4c508af4306f43697d38ce2b19fef50ac443e01e63e27607e713253e6b71461d57e6271f5828538eac1eee27646f91a19a024018797d1b34434fceac14fa3e4e236e703df45275ea713276f6f4b3122252bbd61665b439281bdf45995625fae14500958e935cff231f44a57b9a754ce17555656177bf88934e614a1616cfef3258d530e2850fbe71b964faa8fd472176358214e0933965fee2d38e12ea20a0faec8765a5c2902cb2defe91f43f011d0ba482b28f5f7c5d362820d34b5adc2d0a9cfe91c5bbb3f65e4dbe2af604105a109182a487edf24c0a8156d39a1a9f6ce594d111b494b11a67453c859b0400a0792b5b5df312a9152442e4ae3e609ac29c24ead74a3b2af5cb4cc8e4fd953ccd74106fe00c9790875d865f750c31847341410d9ebe26a4bd631bf85a811c52838ccefdd1004281e29507d35731e1ed4625b5da8fd29cccc8f3d87dd37b4171ae3af079f88bf0cd45dc1dc786ca711abaf968efd00b98c6218f677c7eb7d81deda2faa0584b3319cdb6fa78e38ebe18b28374c2de8bc4f21f865dfa657474fbfa43a6a8e0fd873cd7ccda803622ea75ebcf361cd0e260588314e8bcf1cd51fce4c5b6a28bf77d1af04d1f49d85b2c255fd6df81029856a5989e08c12739303ae0c3152dc999a6c534c64a85936d857990e38763812d64f843adf4146aab3e227e1cc564a4b327a3514f73f3c7db09ac14fd5768d468427761d9f9f8e6020f34eedcd87d5c1ce733dbf7e49de658ae2efc58f086ed7d81d0bc098ef9ac7a3f6d413c002ad1a2af5601089106153cbd303a20e802667ad6a9cfd589c119d4d80dffa6fcf5864fce685e6201fc6fe87a54a0fb8a7a6e28fb3337c215ebf2a0c967247e3d490d33ee0fce09a28dbaea291f3a458921bfb07386a77ad4e9a048fe50ba4d85b4da5809df2762d62ba6796fb24a1db216e5d54ffd2748ff51762bd6fd973e8b0c3236969a819ef42d5547f34cde29c64b301f537d3d1092c5c472d07807d42b45e37a58de38e6ff53d73d081f6d3998460f4fa86537ee2b442e90b4a7f0c5659c431566caf72580822655ccde1d6ba42a0966445355304e04e706dd27b7b87f09f833e5a0ae89facd4441de3d3e8bdb694217d0dd9229b50e93eb68093f8eda950edb70cdda3d5f6294c619ac52d60e11df6553cabe474517a11a3c5eaa667c46f57923eccd12b938007a6e9baa2491d43fc27ac434ab2ae6fa052548c8b16a6a8605b98391be228af824243ca8668cdb0734d8ab73e901fd0fd73dacab08425b220232561caf4e2b1b813544766f2715867625d2d300e0a9a6e7eb1ded3a97aba2d6a295d9440f861be84590f7ff2d5b18cbfcb829e91b72e52e64e0efd8c91e966338213338897553838b83fc7b970ad0a76d776595e064c84c39036313e17943968c8031116e61671905a07726e1367ea46eeadedfe271507851b0a4d30d2f21878134a174792660142c3dfd963a82a24ed97d3eb74b2106747bbf0054b8a403e9dd04a3dcae487b1864f8ecc7f15cc372d4b37bcf51ca0ed3e997c9173bb2c50708a41a313a0df2abc6505b01ce50ae38f085c5c70aa03b10ae5d7882a2edf027f656bb1848113ea83421a1b93758e807d5758c1fb7cf0537916679a8905d7db78bd9b404ef1739cc0777cc930ba9d5f9ab012ba5716700f48f35eb7365ae6555df8334d5fd4f92213b8b1877b505d39d0ad958ee300227e5506a0f34483b8e06dbcbc1cc76d55d0e4d9e2678fa89cf0aeadf9c072229bd51d345d081307162da8794da3bc187de37fe8320152ac74e9393b3c83163e58c3d169ddf0233146c153fef88d30d37b844c430da6b1f3d4f7404bf45333a3e98308d341228dc1dfcfb2d11643e0a235f0f93e9f9999bc7f4ac4e14f2ce21ddd830c055be516335722a3dcbd9fc517820dab207036d414519095a5dd568362213d0d27d08db0bc68493d89f0ebf944ee11a4dece853ece505c004887f7127dbfda7b173af7c4e453459d5b0b3ec814c951ee4e43d87ba70c2d0814920f91b9131752bb1dd48d90122f9e67913e5de71e26e90395a7c47a570df19132f5fbbf755b76a043d83e23b0a8d219b977a7928264c22f8d09b0f4f7066b24eb4c2c986ad9abaf8a769d31d8b0160068fea333dabf3964ab5f897b7e887ac5a95bae5686fc955ebbeb7c0cc9df0286cf7d8b77fced2ce0e9c0d5d4be068cd68d8a446f2651d24b409a38ab5a1879638f8cea88dc124b389afa933adc4697292a745a2d36f9812f6fddb12de5e802c7f26613089f6ded1377ba088e2d9e0141baabb6da2f0728b56da109c63cc9b3efbd24e8e9636400dcf14425dae145d11175759e19bc25dda4e41a1f8efcee2c5a8652eb9a3f4629f9e3aa0d812b8090c507f04b78f1f7fb6adfb783a8078cb759c7b5b060e3cf8c687b3ab998839137eac401d861a8190cc08bcfc6a38cc6735d52c7771f9a089d80bbd75dcca43e003adba4f497e60b7b29ba161f88c07fb3f6653a3d90352b411878cb212a81737028cac005233313a2982bd1aa7fc0cc70be02f930a7789ab556d6373bd946aa7ca815b28dbde641e3dde42e548eb52bb338e354f79a301b3bb4b2c032c59c08c6732401af866df956a840be01b95874bfe4cce68cc810a6d1c330c27a26072f233f5b18a46bcc70d7bb039aeb4f4f718d09defb7f326e6b5a265c2f94eecd7d15a832e0c8c27c7c4741ff8f05f59a9416f7555617c40aa5646d3e7dc69ec9c1cf7b877870b92d4b5b75df09dd64b3cf6d4e54dd17cd76ad186b91a3dbd5389d2294a04b27d1ade0f75ce62bf721e1b12b38c6cd56c6734ce7db45ba8e16ff9d1f0b54654536ea051fc88870cba10231990b69a3c9bdf9d449cf0225cd2bb5d884460606f350b787e66efd065b435a1fdb016728b7134a2c17483ff05c018dc26db3a3feb8a5f2ff4af92f145afc7228b4261fbd450012a86170d795235b851040ae851ffd5273dbbab63b40021", @generic="93f61c7457a35a76df207da297031d33a69407b4d03b4a5f59dbebcdf440519b5f", @typed={0x8, 0x80, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x1058}, 0x1, 0x0, 0x0, 0x40004}, 0x20044000) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:10:55 executing program 4: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) 02:10:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 579.339050][ T9783] tipc: TX() has been purged, node left! [ 579.350216][ T3629] IPVS: ftp: loaded support on port[0] = 21 02:10:55 executing program 4: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) [ 579.407072][ T3630] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 02:10:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:55 executing program 4: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) [ 579.564918][ T3641] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 579.606923][ T3641] bond10: (slave bridge37): making interface the new active one [ 579.616541][ T3641] bond10: (slave bridge37): Enslaving as an active interface with an up link 02:10:55 executing program 4: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) [ 579.655688][ T3644] bond10 (unregistering): (slave bridge37): Releasing active interface [ 579.974381][ T3644] bond10 (unregistering): Released all slaves [ 580.291673][ T3630] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 580.339807][ T3641] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:10:56 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:10:56 executing program 4: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) 02:10:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:56 executing program 2: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r1, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:10:56 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x4}, 0xe) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) bind(r3, &(0x7f00000001c0)=@ethernet={0x1, @dev={[], 0xc}}, 0x80) close(r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000180)={@val, @void, @eth={@random="8bf76f00bd88", @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @local}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}, 0x3e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:10:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:10:56 executing program 4: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) [ 580.666706][ T3776] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 580.675565][ T3778] IPVS: ftp: loaded support on port[0] = 21 02:10:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:56 executing program 4: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) [ 580.933908][ T3824] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:10:56 executing program 2: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(0xffffffffffffffff, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:10:56 executing program 4: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) [ 581.033220][ T3824] bond10: (slave bridge38): making interface the new active one [ 581.065444][ T3824] bond10: (slave bridge38): Enslaving as an active interface with an up link 02:10:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 581.107309][ T3776] bond10 (unregistering): (slave bridge38): Releasing active interface [ 581.402446][ T3776] bond10 (unregistering): Released all slaves [ 581.645833][ T3824] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 02:10:57 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:10:57 executing program 4: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) 02:10:57 executing program 2: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(0xffffffffffffffff, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:10:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x37f, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:10:57 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000180)={@val, @void, @eth={@random="8bf76f00bd88", @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @local}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}, 0x3e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000140)=0x4) [ 581.877455][ T3927] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 02:10:57 executing program 4: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, 0x0, 0x0) 02:10:57 executing program 2: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(0xffffffffffffffff, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) [ 581.991512][ T3952] IPVS: ftp: loaded support on port[0] = 21 [ 581.997222][ T3956] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:10:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 582.032953][ T3956] bond10: (slave bridge39): making interface the new active one 02:10:58 executing program 4: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, 0x0, 0x0) [ 582.073315][ T3956] bond10: (slave bridge39): Enslaving as an active interface with an up link [ 582.102552][ T3927] bond10 (unregistering): (slave bridge39): Releasing active interface 02:10:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:10:58 executing program 2: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) r1 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r1, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) [ 582.471919][ T3927] bond10 (unregistering): Released all slaves [ 582.859337][ T3956] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 582.919576][ T4029] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:11:01 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0x0, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:11:01 executing program 4: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, 0x0, 0x0) 02:11:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:11:01 executing program 2: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) r1 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r1, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:11:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x500, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:11:01 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000240)={@val, @val={0x2, 0x80, 0xcc2, 0x6, 0x8, 0x101}, @eth={@multicast, @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @local}, @payload_conn={{{0x19, 0x0, 0x0, 0x0, 0x0, 0x6}}, [0x0]}}}}}}, 0x49) pipe(&(0x7f0000008f40)={0xffffffffffffffff}) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f00000091c0)={&(0x7f0000008f80)={0x10, 0x0, 0x0, 0x800100}, 0xc, &(0x7f0000000180)={0x0}}, 0x4) getsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, &(0x7f0000000040), &(0x7f0000000140)=0x4) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:11:01 executing program 4: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) [ 585.127970][ T4058] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 585.141105][ T9783] tipc: TX() has been purged, node left! 02:11:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 585.182501][ T9783] tipc: TX() has been purged, node left! [ 585.184089][ T4062] IPVS: ftp: loaded support on port[0] = 21 02:11:01 executing program 4: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) 02:11:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:11:01 executing program 4: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) [ 585.468934][ T4067] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 585.518918][ T4067] bond10: (slave bridge40): making interface the new active one [ 585.531140][ T4067] bond10: (slave bridge40): Enslaving as an active interface with an up link 02:11:01 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000180)={@val, @void, @eth={@random="8bf76f00bd88", @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @local}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}, 0x3e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000140)=0x4) [ 585.562319][ T4090] bond10 (unregistering): (slave bridge40): Releasing active interface [ 585.839594][ T4090] bond10 (unregistering): Released all slaves [ 586.146790][ T4058] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 586.218832][ T4067] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:11:04 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0x0, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:11:04 executing program 2: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:11:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:11:04 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r5, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xa0) write$tun(r1, &(0x7f0000000180)={@val, @void, @eth={@random="8bf76f00bd88", @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @local}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}, 0x3e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:11:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x600, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:11:05 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000180)={@val, @void, @eth={@random="8bf76f00bd88", @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @local}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}, 0x3e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000140)=0x4) [ 589.120987][ T4209] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 02:11:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 589.223066][ T4230] IPVS: ftp: loaded support on port[0] = 21 02:11:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:11:05 executing program 2: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) [ 589.499535][ T4220] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:11:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 589.583421][ T4220] bond10: (slave bridge41): making interface the new active one [ 589.648122][ T4220] bond10: (slave bridge41): Enslaving as an active interface with an up link 02:11:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 589.690411][ T4251] bond10 (unregistering): (slave bridge41): Releasing active interface 02:11:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 590.030093][ T4251] bond10 (unregistering): Released all slaves [ 590.670946][ T4209] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 590.717908][ T4220] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:11:08 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0x0, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:11:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:11:08 executing program 2: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:11:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x700, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:11:08 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000200)={'syzkaller1\x00', 0x788}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x4}, 0xe) connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f00000001c0)=@add_del={0x2, &(0x7f0000000180)='veth1_macvtap\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000000008bf76f00bd88aaaaaaaaaabb08000000000000000947000690780000000000000000000000000000000000000000000000007dc30642000000007710c57e95e62532e8e6f74a39e01150ca196f10ebce367e78ac9fceffd92c982b004c109097d5719c5d8c401de3a525d3bb8b505a9cd96054c87b6e4d7ec0a96a1cd86560c1616e841688711f4d9741aabb64377abbce9ee07a9ff9513ddff0e229391f1ebaeb114241b4c0637ad0f8def9"], 0x3e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x4}, 0xe) connect$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) getsockopt(r6, 0x80000001, 0x1, &(0x7f0000000300)=""/40, &(0x7f0000000340)=0x28) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r1}) bind$netlink(r7, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfc, 0x400000}, 0xc) 02:11:08 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000180)={@val, @void, @eth={@random="8bf76f00bd88", @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @local}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}, 0x3e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000140)=0x4) [ 592.233430][ T4349] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 02:11:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 592.370532][ T4383] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 592.373636][ T4381] IPVS: ftp: loaded support on port[0] = 21 [ 592.477956][ T4383] bond10: (slave bridge42): making interface the new active one [ 592.520881][ T4383] bond10: (slave bridge42): Enslaving as an active interface with an up link 02:11:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 592.694240][ T4349] bond10 (unregistering): (slave bridge42): Releasing active interface 02:11:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:11:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:11:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:11:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 593.125300][ T4349] bond10 (unregistering): Released all slaves [ 593.746002][ T4383] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 593.807663][ T4433] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:11:10 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x0, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:11:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x0, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:11:10 executing program 2: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) [ 594.051974][ T97] tipc: TX() has been purged, node left! [ 594.112952][ T4517] IPVS: ftp: loaded support on port[0] = 21 02:11:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x0, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:11:10 executing program 4: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:11:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:11:10 executing program 2: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:11:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x0, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:11:10 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r4, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000900)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}, 0x5) syz_open_procfs$namespace(r4, &(0x7f0000000040)='ns/mnt\x00') ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)=r4) socket$netlink(0x10, 0x3, 0x0) write$tun(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="8bf76f00e020aaaaaaaaaabb08004510002c000000000006907800000000e0000001000000000000000000000000000000030000000000000000ab45b015089c02f998e751137d58de2caae00ef57a54e39e7a105bf6dd8a9be769fe3c8f0ef0477ab1a8c70d7da75cd1"], 0x3a) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 594.701066][ T4559] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 02:11:10 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x0, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) [ 594.822953][ T4570] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:11:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000009, 0x0, 0x0) [ 594.932497][ T4570] bond10: (slave bridge43): making interface the new active one [ 594.976824][ T4570] bond10: (slave bridge43): Enslaving as an active interface with an up link [ 594.996726][ T4618] IPVS: ftp: loaded support on port[0] = 21 [ 595.040991][ T4599] bond10 (unregistering): (slave bridge43): Releasing active interface 02:11:11 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:11:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000009, 0x0, 0x0) 02:11:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000009, 0x0, 0x0) 02:11:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4), 0x1c) [ 595.459598][ T4599] bond10 (unregistering): Released all slaves [ 595.550157][ T4559] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 02:11:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000009, 0x0, 0x0) [ 595.620711][ T4570] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:11:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4), 0x1c) 02:11:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0xa00, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:11:11 executing program 4: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:11:11 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:11:11 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000000008bf76f00bd88aaaaaaaaaabb08004500002c000000000006907800000000ac1414aa000000000000f100000000000000000000000000000000005c65bf3f20e532ebdaa317b21d796507aa8dc3556e69e4ca583269557a0d96897085d5e1ff9b05f2365bb256f4cc05239e64b7ebd0aed0b32be42526f650ecc16c23e759f64cad40433b64694d452bcce42448a69fa11ced73ef6d9e5d41"], 0x3e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 596.065818][ T4735] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 02:11:12 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x0, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:11:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4), 0x1c) 02:11:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:11:12 executing program 2: r0 = socket$inet(0x2b, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) [ 596.142722][ T4741] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:11:12 executing program 2: r0 = socket$inet(0x2b, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) [ 596.272572][ T4741] bond10: (slave bridge44): making interface the new active one [ 596.277130][ T4793] IPVS: ftp: loaded support on port[0] = 21 02:11:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 596.339180][ T4741] bond10: (slave bridge44): Enslaving as an active interface with an up link 02:11:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 596.425064][ T4735] bond10 (unregistering): (slave bridge44): Releasing active interface 02:11:12 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r5, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xa0) write$tun(r1, &(0x7f0000000180)={@val, @void, @eth={@random="8bf76f00bd88", @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @local}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}, 0x3e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 596.777962][ T4735] bond10 (unregistering): Released all slaves [ 596.969002][ T4741] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 597.040642][ T4852] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:11:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0xc00, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:11:13 executing program 2: r0 = socket$inet(0x2b, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:11:13 executing program 4: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) r1 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r1, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:11:13 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000001c0)={@val, @void, @eth={@random="8bf76f00bd88", @remote, @void, {@ipv4={0x800, @tipc={{0x7, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @local, {[@noop, @ra={0x94, 0x4}]}}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}, 0x46) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 597.676353][ T4889] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 597.816281][ T4895] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 597.916347][ T4895] bond10: (slave bridge45): making interface the new active one 02:11:13 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:11:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x37f, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:11:13 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) [ 597.965748][ T4895] bond10: (slave bridge45): Enslaving as an active interface with an up link [ 598.079192][ T4918] bond10 (unregistering): (slave bridge45): Releasing active interface [ 598.096397][ T4947] IPVS: ftp: loaded support on port[0] = 21 [ 598.410397][ T4918] bond10 (unregistering): Released all slaves 02:11:14 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x0, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) [ 598.577181][ T4943] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 598.632243][ T4949] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 598.666106][ T4949] bond9: (slave bridge18): making interface the new active one [ 598.704863][ T4949] bond9: (slave bridge18): Enslaving as an active interface with an up link [ 598.720360][ T5024] IPVS: ftp: loaded support on port[0] = 21 02:11:14 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) [ 598.771363][ T4952] bond9 (unregistering): (slave bridge18): Releasing active interface [ 599.083928][ T4952] bond9 (unregistering): Released all slaves [ 599.362695][ T4985] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 599.428232][ T4889] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:11:15 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:11:15 executing program 3: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r1, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:11:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0xe00, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:11:15 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) [ 599.733676][ T5095] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 599.812533][ T5099] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 599.837709][ T5099] bond10: (slave bridge46): making interface the new active one [ 599.847962][ T5099] bond10: (slave bridge46): Enslaving as an active interface with an up link 02:11:15 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) socketpair(0xb59e9f9f7d27cf66, 0x5, 0x3, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000440)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000001c0)={@val, @void, @eth={@random="8bf76f00bd88", @remote, @void, {@ipv4={0x800, @tipc={{0x1a, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @local, {[@generic={0x7, 0xd, "24e479e954918171082cb9"}, @timestamp_addr={0x44, 0xc, 0x52, 0x1, 0x5, [{@multicast2, 0x3ff}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x17, 0xffffffffffffffff, [{0x6, 0xb, "c2a5a7da08aa6dd4a4"}, {0x2, 0x6, '7\tF}'}]}, @rr={0x7, 0x1f, 0xe8, [@private=0xa010101, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @private=0xa010101, @rand_addr=0x64010101, @loopback]}]}}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}, 0x92) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 599.878691][ T5095] bond10 (unregistering): (slave bridge46): Releasing active interface [ 600.101288][ T5095] bond10 (unregistering): Released all slaves [ 600.160337][ T5094] net veth1_virt_wifi @: renamed from virt_wifi0 02:11:16 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:11:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0xc00, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) [ 600.903886][ T5095] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 600.962040][ T5194] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 601.026994][ T5099] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 601.250887][ T5198] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 601.295901][ T5198] bond9: (slave bridge19): making interface the new active one [ 601.309696][ T5198] bond9: (slave bridge19): Enslaving as an active interface with an up link [ 601.352299][ T5202] bond9 (unregistering): (slave bridge19): Releasing active interface [ 601.597726][ T5202] bond9 (unregistering): Released all slaves [ 602.177117][ T97] tipc: TX() has been purged, node left! [ 602.183148][ T97] tipc: TX() has been purged, node left! [ 602.189529][ T97] tipc: TX() has been purged, node left! 02:11:19 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:11:19 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:11:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x2000, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:11:19 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000001c0)=0x9, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) pipe(&(0x7f0000008f40)={0xffffffffffffffff}) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f00000091c0)={&(0x7f0000008f80)={0x10, 0x0, 0x0, 0x800100}, 0xc, &(0x7f0000000180)={0x0}}, 0x4) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000140)=0x4) write$tun(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="000000008bf76f00bd88aaaaaaaaaabb08004500002c000000000006907800000000ac1414aa00000000000000008000"/62], 0x3e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:11:19 executing program 3: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r1, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:11:19 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f00000001c0)={@val, @void, @eth={@random="8bf76f00bd88", @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @local}, @payload_mcast={{{{{{0x2d, 0x0, 0x0, 0x1, 0x0, 0xb, 0x3, 0x2, 0x69, 0x0, 0x2, 0x6, 0x3, 0x1, 0x2e, 0x2, 0x4, 0x4e21, 0x4e22}, 0x4, 0x3}}, 0x2}}, [0x0]}}}}}}, 0x53) splice(r0, 0x0, r2, 0x0, 0x10005, 0xa) [ 603.516151][ T5298] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 603.657222][ T5351] IPVS: ftp: loaded support on port[0] = 21 [ 603.711890][ T5326] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 603.748163][ T5326] bond10: (slave bridge47): making interface the new active one [ 603.758650][ T5326] bond10: (slave bridge47): Enslaving as an active interface with an up link 02:11:19 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) [ 603.799243][ T5347] bond10 (unregistering): (slave bridge47): Releasing active interface [ 604.058290][ T5347] bond10 (unregistering): Released all slaves 02:11:20 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:11:20 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) [ 604.512742][ T5417] IPVS: ftp: loaded support on port[0] = 21 [ 604.866477][ T5326] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 604.922456][ T5298] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:11:21 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:11:21 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="000000008bf76f00bd88aaaaaaaaaabb08004500002c000000000006907800000000ac1414aa000000000000000000000000000000000000000000800000"], 0x3e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:11:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x3f00, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) [ 605.300533][ T5469] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 605.385703][ T5500] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:11:21 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:11:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x2000, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:11:21 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) [ 605.488796][ T5500] bond10: (slave bridge48): making interface the new active one 02:11:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 605.564118][ T5500] bond10: (slave bridge48): Enslaving as an active interface with an up link [ 605.602204][ T5527] IPVS: ftp: loaded support on port[0] = 21 [ 605.744053][ T5469] bond10 (unregistering): (slave bridge48): Releasing active interface 02:11:21 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x0, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) [ 605.918263][ T5540] IPVS: ftp: loaded support on port[0] = 21 [ 606.049110][ T5469] bond10 (unregistering): Released all slaves [ 606.100606][ T5524] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 606.159437][ T5528] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 606.234341][ T5528] bond2: (slave bridge3): making interface the new active one [ 606.259378][ T5528] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 606.284462][ T5531] bond2 (unregistering): (slave bridge3): Releasing active interface 02:11:22 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) [ 606.417645][ T5531] bond2 (unregistering): Released all slaves [ 606.742458][ T5543] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 606.777442][ T5500] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:11:22 executing program 4: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) 02:11:22 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:11:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x4000, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:11:23 executing program 4: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r1, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:11:23 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="000000008bf76f00bd88aaaaaaaaaabb08004500002c00000000b49d169251120e82ac1414aa0002000000000000000000000000006c02dc2c2cce9080a8"], 0x3e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:11:23 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) [ 607.168975][ T5692] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 607.359517][ T5697] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 607.400957][ T5697] bond10: (slave bridge49): making interface the new active one [ 607.421148][ T5697] bond10: (slave bridge49): Enslaving as an active interface with an up link 02:11:23 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r4, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r6}) [ 607.444317][ T5714] bond10 (unregistering): (slave bridge49): Releasing active interface [ 607.532271][ T5749] IPVS: ftp: loaded support on port[0] = 21 [ 607.817838][ T5714] bond10 (unregistering): Released all slaves 02:11:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="39000000136909", 0x7}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:11:24 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) [ 608.024942][ T5697] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 02:11:24 executing program 4: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) [ 608.532574][ T5692] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:11:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x48, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:11:25 executing program 4: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) 02:11:25 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:11:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x4800, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:11:25 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000180)={@val, @void, @eth={@random="8bf76f00bd88", @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @local}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}, 0x3e) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f00000015c0)=ANY=[@ANYBLOB="8100635b36dd2f5e3103"], 0xa) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xfef0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x5c, r6, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffe00}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="200027bd7000fedbdf250400000008010000000000000000020014000100fe880000000000000000000047da5663afc886200000000108000700d9000000080008002e00000005000d000300000075a68e4442482ca7f2e6910560f5c0028e39c4befbc53d514194f010340da6ac2b68b494d35a4396a4238bdb5a8638cc78276b9fd42ed57030abcf107000407a32c1539fd52ebef7c9b95ca1e3f34bd1a2332c4ab9968d98b3ec352d89e9093046e049d43a6c3b1f1a7464d4207f58cac387f51851e2a3a50967c9d2942ff7b62554b0588370426e4f0eb238967bba32168c730d4b4bb46a04fda5f5bc"], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x0) connect$l2tp(r5, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040)) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 610.030657][ T5843] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 02:11:26 executing program 4: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) read(r1, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r1, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) [ 610.342531][ T5848] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 610.418922][ T5850] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 610.461134][ T5850] bond10: (slave bridge50): making interface the new active one [ 610.475948][ T5850] bond10: (slave bridge50): Enslaving as an active interface with an up link [ 610.494092][ T5853] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 610.530292][ T5853] bond9: (slave bridge20): making interface the new active one [ 610.571873][ T5853] bond9: (slave bridge20): Enslaving as an active interface with an up link [ 610.589673][ T5866] bond10 (unregistering): (slave bridge50): Releasing active interface [ 610.804672][ T5866] bond10 (unregistering): Released all slaves 02:11:26 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) [ 610.869510][ T5867] bond9 (unregistering): (slave bridge20): Releasing active interface [ 611.172837][ T5867] bond9 (unregistering): Released all slaves [ 611.563383][ T5843] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 611.640070][ T5850] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:11:27 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:11:28 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r4, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r6}) 02:11:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x10, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:11:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:11:28 executing program 4: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) read(r1, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r1, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:11:28 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="000000008bf76f00bd88aaaaaaaaaabb08004500002c000000000006907800000000ac1414aa00000000000000000000000000000000000000000000000007ecf2f81c3515698c6d6a2b53dbec7317e6ed97489999256c370776c1d4ef2b7819a86a3bad8b1cfe2fe79654c434e66542031af7b396f8ffffffffffffff04b3e9e20cd00de960e58a9bea1bd10dbb0f9a904e3a3513e70f954fa4f50f6e5c5308d03b49677fca6c0982950efa78547051fe5df2bbba3cd264502d8d7482cb7a7f44334afa37ab3e8bd22bb7059a664a4b87c1b7440816a972e5cca11b1ef109"], 0x3e) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:11:28 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) [ 612.615532][ T6032] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 612.781060][ T6077] IPVS: ftp: loaded support on port[0] = 21 [ 612.823425][ T6038] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 612.898638][ T6054] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 612.941016][ T6054] bond9: (slave bridge21): making interface the new active one [ 612.958698][ T6054] bond9: (slave bridge21): Enslaving as an active interface with an up link [ 612.971486][ T6075] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 613.025183][ T6075] bond10: (slave bridge51): making interface the new active one [ 613.047628][ T6075] bond10: (slave bridge51): Enslaving as an active interface with an up link [ 613.061077][ T6032] bond9 (unregistering): (slave bridge21): Releasing active interface [ 613.198652][ T6032] bond9 (unregistering): Released all slaves 02:11:29 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) [ 613.238995][ T6079] bond10 (unregistering): (slave bridge51): Releasing active interface [ 613.462426][ T6079] bond10 (unregistering): Released all slaves 02:11:29 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r4, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r6}) [ 613.688171][ T97] tipc: TX() has been purged, node left! [ 613.695439][ T97] tipc: TX() has been purged, node left! [ 613.720037][ T6038] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 02:11:29 executing program 4: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) read(r1, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r1, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) [ 613.739730][ T97] tipc: TX() has been purged, node left! [ 613.796781][ T6075] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 613.832091][ T6207] IPVS: ftp: loaded support on port[0] = 21 02:11:29 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:11:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0xbf, 0x4) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="390000001369", 0x6}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, 0xffffffffffffffff, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYRESHEX], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null}) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 02:11:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x5865, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) [ 614.244787][ T6260] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 614.312272][ T6272] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 614.397081][ T6272] bond10: (slave bridge52): making interface the new active one [ 614.406461][ T6272] bond10: (slave bridge52): Enslaving as an active interface with an up link [ 614.426081][ T6260] bond10 (unregistering): (slave bridge52): Releasing active interface [ 614.660937][ T6260] bond10 (unregistering): Released all slaves [ 614.777205][ T6272] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 614.813757][ T6260] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 614.838212][ T6260] bond10: (slave bridge53): making interface the new active one [ 614.847737][ T6260] bond10: (slave bridge53): Enslaving as an active interface with an up link 02:11:32 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r4, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r6}) 02:11:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:11:32 executing program 5: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:11:32 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:11:32 executing program 3: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) 02:11:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x6000, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) [ 616.405182][ T6389] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 616.436525][ T6390] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 616.484802][ T6429] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 616.505488][ T6429] bond11: (slave bridge54): making interface the new active one [ 616.518664][ T6429] bond11: (slave bridge54): Enslaving as an active interface with an up link [ 616.530223][ T6389] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 616.547880][ T6468] IPVS: ftp: loaded support on port[0] = 21 [ 616.582291][ T6389] bond2: (slave bridge4): making interface the new active one [ 616.606955][ T6389] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 616.636111][ T6390] bond11 (unregistering): (slave bridge54): Releasing active interface [ 616.826231][ T6390] bond11 (unregistering): Released all slaves [ 616.858434][ T6467] bond2 (unregistering): (slave bridge4): Releasing active interface [ 616.983733][ T6467] bond2 (unregistering): Released all slaves [ 617.017660][ T6477] net veth1_virt_wifi @: renamed from virt_wifi0 02:11:33 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r4, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r6}) 02:11:33 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:11:33 executing program 5: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) ioctl$sock_ifreq(r1, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) [ 617.179359][ T6563] IPVS: ftp: loaded support on port[0] = 21 02:11:33 executing program 4: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) ioctl$sock_ifreq(r1, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) [ 617.305571][ T6429] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 617.385181][ T6390] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:11:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x9, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:11:33 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) [ 617.771006][ T6624] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 617.855804][ T6643] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 617.914858][ T6643] bond1: (slave bridge1): making interface the new active one [ 617.924537][ T6643] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 617.987508][ T6624] bond1 (unregistering): (slave bridge1): Releasing active interface [ 618.313453][ T6624] bond1 (unregistering): Released all slaves 02:11:36 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:11:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x6558, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:11:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x6000, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:11:36 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:11:36 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:11:36 executing program 5: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) ioctl$sock_ifreq(r1, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) socket$inet(0x2, 0x80001, 0x84) [ 620.405327][ T97] tipc: TX() has been purged, node left! [ 620.417043][ T6718] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 620.447068][ T97] tipc: TX() has been purged, node left! [ 620.491930][ T6722] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 620.519635][ T6744] IPVS: ftp: loaded support on port[0] = 21 [ 620.594631][ T6736] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 620.639437][ T6736] bond11: (slave bridge55): making interface the new active one [ 620.659212][ T6736] bond11: (slave bridge55): Enslaving as an active interface with an up link [ 620.673606][ T6761] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 620.731813][ T6761] bond2: (slave bridge5): making interface the new active one [ 620.751860][ T6761] bond2: (slave bridge5): Enslaving as an active interface with an up link [ 620.777242][ T6718] bond11 (unregistering): (slave bridge55): Releasing active interface [ 620.921276][ T6718] bond11 (unregistering): Released all slaves 02:11:37 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x40001) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r4, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r6}) [ 620.969241][ T6774] bond2 (unregistering): (slave bridge5): Releasing active interface [ 621.164995][ T6862] IPVS: ftp: loaded support on port[0] = 21 [ 621.314314][ T6774] bond2 (unregistering): Released all slaves 02:11:37 executing program 5: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r2, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r2, &(0x7f0000000100)=""/238, 0xee) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) ioctl$sock_ifreq(r2, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x19, &(0x7f00000000c0)={r4}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r4, 0x81}, &(0x7f0000000100)=0x8) 02:11:37 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) [ 621.386178][ T6736] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 621.456666][ T6865] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:11:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x6000, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:11:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x6800, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:11:37 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) [ 621.897182][ T6947] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 622.016400][ T6948] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 622.144568][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 622.216344][ T6966] bond11: (slave bridge56): making interface the new active one [ 622.268368][ T6966] bond11: (slave bridge56): Enslaving as an active interface with an up link [ 622.295277][ T6964] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 622.324273][ T6964] bond2: (slave bridge6): making interface the new active one [ 622.356525][ T6964] bond2: (slave bridge6): Enslaving as an active interface with an up link [ 622.392297][ T6979] bond2 (unregistering): (slave bridge6): Releasing active interface [ 622.621537][ T6979] bond2 (unregistering): Released all slaves [ 622.663603][ T6989] bond11 (unregistering): (slave bridge56): Releasing active interface [ 622.860812][ T6989] bond11 (unregistering): Released all slaves [ 622.906416][ T6966] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 622.976033][ T6948] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:11:39 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:11:39 executing program 5: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r2, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r2, &(0x7f0000000100)=""/238, 0xee) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) ioctl$sock_ifreq(r2, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x19, &(0x7f00000000c0)={r4}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r4, 0x81}, &(0x7f0000000100)=0x8) 02:11:39 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:11:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x6558, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:11:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x6000, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:11:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x6c00, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) [ 624.035941][ T7120] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 624.072753][ T7123] IPVS: ftp: loaded support on port[0] = 21 [ 624.137736][ T7119] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 624.227711][ T7124] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 624.293982][ T7163] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 624.329087][ T7163] bond9: (slave bridge22): making interface the new active one [ 624.349004][ T7163] bond9: (slave bridge22): Enslaving as an active interface with an up link [ 624.358053][ T7132] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 624.381275][ T7132] bond11: (slave bridge57): making interface the new active one [ 624.407660][ T7132] bond11: (slave bridge57): Enslaving as an active interface with an up link [ 624.422680][ T7165] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 624.448347][ T7165] bond2: (slave bridge7): making interface the new active one [ 624.458447][ T7165] bond2: (slave bridge7): Enslaving as an active interface with an up link [ 624.479439][ T7120] bond11 (unregistering): (slave bridge57): Releasing active interface [ 624.633313][ T7120] bond11 (unregistering): Released all slaves [ 624.710869][ T7167] bond9 (unregistering): (slave bridge22): Releasing active interface [ 625.001644][ T7167] bond9 (unregistering): Released all slaves [ 625.041177][ T7169] bond2 (unregistering): (slave bridge7): Releasing active interface [ 625.253646][ T7169] bond2 (unregistering): Released all slaves 02:11:41 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x0, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:11:41 executing program 5: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r2, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r2, &(0x7f0000000100)=""/238, 0xee) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) ioctl$sock_ifreq(r2, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x19, &(0x7f00000000c0)={r4}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r4, 0x81}, &(0x7f0000000100)=0x8) [ 625.310105][ T7289] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 02:11:41 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) [ 625.375568][ T7132] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 625.471884][ T7373] IPVS: ftp: loaded support on port[0] = 21 02:11:41 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:11:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:11:41 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x0, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) [ 625.736847][ T7406] IPVS: ftp: loaded support on port[0] = 21 [ 625.857984][ T7411] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 625.989507][ T7464] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 626.031578][ T7464] bond11: (slave bridge58): making interface the new active one [ 626.057904][ T7464] bond11: (slave bridge58): Enslaving as an active interface with an up link [ 626.091510][ T7411] bond11 (unregistering): (slave bridge58): Releasing active interface [ 626.471497][ T7411] bond11 (unregistering): Released all slaves [ 626.631178][ T7464] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 626.680124][ T7411] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 626.738545][ T7411] bond11: (slave bridge59): making interface the new active one [ 626.769583][ T7411] bond11: (slave bridge59): Enslaving as an active interface with an up link [ 628.134838][ T97] tipc: TX() has been purged, node left! [ 628.314832][ T97] tipc: TX() has been purged, node left! 02:11:44 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:11:44 executing program 5: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r2, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r2, &(0x7f0000000100)=""/238, 0xee) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) ioctl$sock_ifreq(r2, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x19, &(0x7f00000000c0)={r4}, 0x8) 02:11:44 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x0, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:11:44 executing program 4: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x0, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:11:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x6800, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:11:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x7a00, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) [ 628.448546][ T7578] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 628.474719][ T97] tipc: TX() has been purged, node left! [ 628.496530][ T7576] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 628.521395][ T7620] IPVS: ftp: loaded support on port[0] = 21 [ 628.553094][ T7613] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 628.614928][ T7613] bond12: (slave bridge60): making interface the new active one [ 628.628097][ T7613] bond12: (slave bridge60): Enslaving as an active interface with an up link [ 628.641505][ T7618] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 628.702546][ T7618] bond9: (slave bridge23): making interface the new active one [ 628.726222][ T7618] bond9: (slave bridge23): Enslaving as an active interface with an up link [ 628.738452][ T7578] bond12 (unregistering): (slave bridge60): Releasing active interface [ 628.896071][ T7578] bond12 (unregistering): Released all slaves [ 628.940504][ T7576] bond9 (unregistering): (slave bridge23): Releasing active interface [ 629.067558][ T7576] bond9 (unregistering): Released all slaves 02:11:45 executing program 5: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) ioctl$sock_ifreq(r1, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 02:11:45 executing program 4: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r2, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r2, &(0x7f0000000100)=""/238, 0xee) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) ioctl$sock_ifreq(r2, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x19, &(0x7f00000000c0)={r4}, 0x8) 02:11:45 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, 0x0, 0x0) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) [ 629.214774][ T7613] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 02:11:45 executing program 3: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r2, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r2, &(0x7f0000000100)=""/238, 0xee) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) ioctl$sock_ifreq(r2, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x19, &(0x7f00000000c0)={r4}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r4, 0x81}, &(0x7f0000000100)=0x8) [ 629.324505][ T7578] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 629.396073][ T7578] bond12: (slave bridge61): making interface the new active one [ 629.406965][ T7578] bond12: (slave bridge61): Enslaving as an active interface with an up link 02:11:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x7f03, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:11:45 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, 0x0, 0x0) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) [ 629.676057][ T7820] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 629.773346][ T7839] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 629.799406][ T7839] bond13: (slave bridge62): making interface the new active one [ 629.811930][ T7839] bond13: (slave bridge62): Enslaving as an active interface with an up link [ 629.847950][ T7861] bond13 (unregistering): (slave bridge62): Releasing active interface [ 629.958218][ T7861] bond13 (unregistering): Released all slaves [ 630.089253][ T7839] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 630.131113][ T7820] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 630.149769][ T7820] bond13: (slave bridge63): making interface the new active one [ 630.161721][ T7820] bond13: (slave bridge63): Enslaving as an active interface with an up link 02:11:47 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240), 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:11:47 executing program 5: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) ioctl$sock_ifreq(r1, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) socket$inet(0x2, 0x80001, 0x84) 02:11:47 executing program 3: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r2, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r2, &(0x7f0000000100)=""/238, 0xee) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) ioctl$sock_ifreq(r2, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x19, &(0x7f00000000c0)={r4}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r4, 0x81}, &(0x7f0000000100)=0x8) 02:11:47 executing program 4: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r2, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r2, &(0x7f0000000100)=""/238, 0xee) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) ioctl$sock_ifreq(r2, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x19, &(0x7f00000000c0)={r4}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r4, 0x81}, &(0x7f0000000100)=0x8) 02:11:47 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, 0x0, 0x0) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:11:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x8100, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) [ 631.633418][ T7955] IPVS: ftp: loaded support on port[0] = 21 [ 631.658660][ T7949] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 631.712922][ T7956] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 631.745903][ T7956] bond14: (slave bridge64): making interface the new active one [ 631.764896][ T7956] bond14: (slave bridge64): Enslaving as an active interface with an up link 02:11:47 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) write$tun(r0, &(0x7f0000000500)={@void, @val={0x0, 0x83, 0x0, 0xff5d}, @mpls={[], @ipv6=@dccp_packet={0x0, 0x6, '?C\r', 0x10, 0x21, 0x0, @private1, @empty, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "c50e5d", 0x0, "b08b33"}}}}}}, 0x42) [ 631.841229][ T7962] bond14 (unregistering): (slave bridge64): Releasing active interface 02:11:48 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) [ 632.093277][ T7962] bond14 (unregistering): Released all slaves 02:11:48 executing program 4: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r2, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r2, &(0x7f0000000100)=""/238, 0xee) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) ioctl$sock_ifreq(r2, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x19, &(0x7f00000000c0)={r4}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r4, 0x81}, &(0x7f0000000100)=0x8) 02:11:48 executing program 5: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) ioctl$sock_ifreq(r1, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) [ 632.282426][ T7949] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 632.348232][ T7956] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 632.463904][ T7956] bond14: (slave bridge65): making interface the new active one [ 632.489063][ T7956] bond14: (slave bridge65): Enslaving as an active interface with an up link [ 632.518708][ T7962] bond14 (unregistering): (slave bridge65): Releasing active interface [ 632.719042][ T7962] bond14 (unregistering): Released all slaves 02:11:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="480000001400190d09004bb5050d8c560a8447000bffe0064e230f00000000a2bc5603b700000f7f89000000200000870001ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 02:11:48 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:11:51 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240), 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:11:51 executing program 4: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r2, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r2, &(0x7f0000000100)=""/238, 0xee) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) ioctl$sock_ifreq(r2, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x19, &(0x7f00000000c0)={r4}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r4, 0x81}, &(0x7f0000000100)=0x8) 02:11:51 executing program 5: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) ioctl$sock_ifreq(r1, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) 02:11:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0xf000, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:11:51 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) 02:11:51 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:11:51 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) write$tun(r0, &(0x7f0000000380)={@void, @val={0x3}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}, 0x32) [ 635.118510][ T8194] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 635.197870][ T8207] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 635.229634][ T8199] IPVS: ftp: loaded support on port[0] = 21 [ 635.288182][ T8207] bond14: (slave bridge66): making interface the new active one [ 635.297971][ T8207] bond14: (slave bridge66): Enslaving as an active interface with an up link [ 635.310388][ T8194] bond14 (unregistering): (slave bridge66): Releasing active interface [ 635.523081][ T8194] bond14 (unregistering): Released all slaves 02:11:51 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(0xffffffffffffffff, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:11:51 executing program 5: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) 02:11:51 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) [ 635.662976][ T8207] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 635.802345][ T8194] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 635.833028][ T8194] bond14: (slave bridge67): making interface the new active one [ 635.843927][ T8194] bond14: (slave bridge67): Enslaving as an active interface with an up link 02:11:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x34000, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:11:51 executing program 5: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) [ 636.055332][ T8359] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 636.085045][ T97] tipc: TX() has been purged, node left! 02:11:52 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240), 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="0c0099000000000003000000"], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:11:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0) 02:11:52 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(0xffffffffffffffff, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:11:52 executing program 5: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) read(r1, &(0x7f0000000100)=""/238, 0xee) [ 636.173223][ T8364] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 636.259961][ T8404] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 636.264729][ T8364] bond15: (slave bridge68): making interface the new active one [ 636.297579][ T8364] bond15: (slave bridge68): Enslaving as an active interface with an up link 02:11:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x800454cf, 0x0) [ 636.340256][ T8409] IPVS: ftp: loaded support on port[0] = 21 [ 636.347733][ T8394] bond15 (unregistering): (slave bridge68): Releasing active interface [ 636.631749][ T8394] bond15 (unregistering): Released all slaves 02:11:52 executing program 5: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) read(r1, &(0x7f0000000100)=""/238, 0xee) 02:11:52 executing program 3: pipe(&(0x7f0000000280)={0xffffffffffffffff}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x19404, 0x0) [ 636.821502][ T8394] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 636.892105][ T8359] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:11:52 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(0xffffffffffffffff, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:11:53 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r0, &(0x7f0000000d00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}], 0x20}], 0x1, 0x0) 02:11:53 executing program 5: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) read(r1, &(0x7f0000000100)=""/238, 0xee) 02:11:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x40000, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:11:53 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r4, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r6}) 02:11:53 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:11:53 executing program 5: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) 02:11:53 executing program 4: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) [ 637.288281][ T8505] IPVS: ftp: loaded support on port[0] = 21 [ 637.313338][ T8508] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 02:11:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001800128008000100736974"], 0x38}}, 0x0) 02:11:53 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) [ 637.471680][ T8518] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 637.562254][ T8518] bond15: (slave bridge69): making interface the new active one [ 637.587831][ T8518] bond15: (slave bridge69): Enslaving as an active interface with an up link [ 637.605303][ T8540] bond15 (unregistering): (slave bridge69): Releasing active interface 02:11:53 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) splice(r1, 0x0, r0, &(0x7f0000000080), 0x401, 0x0) 02:11:53 executing program 3: r0 = epoll_create(0x1ff) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000180)) 02:11:53 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r0, 0xfffffcea, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) [ 637.987497][ T8540] bond15 (unregistering): Released all slaves 02:11:54 executing program 5: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) [ 638.054267][ T8562] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 638.118116][ T8508] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 02:11:54 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)={0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], r1}, 0x40) [ 638.222539][ T8518] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 638.253539][ T8518] bond15: (slave bridge70): making interface the new active one [ 638.269302][ T8518] bond15: (slave bridge70): Enslaving as an active interface with an up link 02:11:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x400300, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) [ 638.401276][ T8675] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 638.441189][ T8675] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 638.462005][ T8675] bond16: (slave bridge71): making interface the new active one [ 638.471460][ T8675] bond16: (slave bridge71): Enslaving as an active interface with an up link [ 638.502000][ T8675] bond16 (unregistering): (slave bridge71): Releasing active interface [ 638.725078][ T8675] bond16 (unregistering): Released all slaves [ 638.927483][ T8752] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 638.987709][ T8675] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 639.010293][ T8675] bond16: (slave bridge72): making interface the new active one [ 639.019673][ T8675] bond16: (slave bridge72): Enslaving as an active interface with an up link [ 640.403979][ T97] tipc: TX() has been purged, node left! 02:11:56 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:11:56 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a543) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r3, 0x0, 0x0, 0x40012584, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x8900000, 0x0) 02:11:56 executing program 5: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) 02:11:56 executing program 3: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) close(r0) 02:11:56 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r4, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r6}) 02:11:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0xf0ffff, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) [ 640.823195][ T8805] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 640.857863][ T8805] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 640.882836][ T8805] bond17: (slave bridge73): making interface the new active one [ 640.892269][ T8805] bond17: (slave bridge73): Enslaving as an active interface with an up link [ 640.921206][ T8805] bond17 (unregistering): (slave bridge73): Releasing active interface [ 640.940166][ T8847] IPVS: ftp: loaded support on port[0] = 21 [ 641.066141][ T8805] bond17 (unregistering): Released all slaves 02:11:57 executing program 5: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) 02:11:57 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:11:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x2c, 0x0, &(0x7f0000000300)) [ 641.261316][ T8846] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 02:11:57 executing program 5: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) [ 641.383158][ T8805] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:11:57 executing program 5: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) 02:11:57 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000ff"], 0x18}}], 0x1, 0x0) [ 641.471827][ T8805] bond17: (slave bridge74): making interface the new active one [ 641.482041][ T8805] bond17: (slave bridge74): Enslaving as an active interface with an up link 02:11:57 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:11:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x1000000, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:11:57 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d800000018008109e00f80ecdb4cb9140a440aef0b007c02e87c55a1bc0005008eb3d81fc77948f30500150007008178a800050040003cc00200001203ac040012d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) 02:11:57 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000280)="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", 0x5fa}], 0x1}, 0x0) r0 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r0, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x104, 0x7}, 0x60, &(0x7f0000000140)=[{&(0x7f00000027c0)="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", 0x5}, {&(0x7f0000000840)='\x00', 0x49ed}], 0x2, 0x0, 0x0, 0x1a0}, 0xe869) 02:11:57 executing program 5: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) 02:11:57 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:11:57 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000980)="4c000000120081f87059ae08060c04000a026b10400103fe0500418701546fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f566da388", 0x4c}], 0x1}, 0x0) 02:11:57 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r4, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r6}) [ 641.786745][ T8969] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 02:11:58 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xcc0, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f065581f020cff000e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x2c3, 0xd17e91c4eaae85ce}, 0x28) [ 642.004624][ T8975] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:11:58 executing program 5: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) 02:11:58 executing program 3: socket$kcm(0xa, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xb80b0000}, 0x0) [ 642.049925][ T9021] IPVS: ftp: loaded support on port[0] = 21 [ 642.085022][ T8975] bond18: (slave bridge75): making interface the new active one [ 642.133223][ T8975] bond18: (slave bridge75): Enslaving as an active interface with an up link [ 642.172681][ T8998] bond18 (unregistering): (slave bridge75): Releasing active interface 02:11:58 executing program 3: socket$kcm(0xa, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000000840)={&(0x7f0000000380)=@in={0x2, 0x0, @dev}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xb80b0000}, 0x0) 02:11:58 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000002d000511d25a80648c63940d0a24fc60040006400a0003000200000037153e370a00048002000000d1bd", 0x33fe0}], 0x1}, 0x0) [ 642.449865][ T9041] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.4'. [ 642.632319][ T8998] bond18 (unregistering): Released all slaves [ 642.732060][ T8969] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 642.795323][ T8975] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:11:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x2000000, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:11:59 executing program 5: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x4, 0xf3, 0x8, 0x2]}, &(0x7f0000000340)=0xc) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) 02:11:59 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000480)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x90) 02:11:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x30, r1, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}]}, 0x30}}, 0x0) 02:11:59 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={'virt_wifi0\x00', @ifru_data=&(0x7f0000000240)="8761df9f153dbcb36692c62a2ab4c454f6cada2020e49c9fec350101130d1c84"}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:11:59 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r4, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r6}) 02:11:59 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{}], 0x8) [ 643.180216][ T9117] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 02:11:59 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:11:59 executing program 4: syz_emit_ethernet(0x3a, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast, {[@generic={0x82, 0x2}]}}, @timestamp={0x11, 0x11}}}}}, 0x0) 02:11:59 executing program 5: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xffff, 0x40008}) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) [ 643.311354][ T9119] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:11:59 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) [ 643.404392][ T9160] IPVS: ftp: loaded support on port[0] = 21 [ 643.421583][ T9119] bond18: (slave bridge76): making interface the new active one [ 643.480887][ T9119] bond18: (slave bridge76): Enslaving as an active interface with an up link 02:11:59 executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209240", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) [ 643.537210][ T9136] bond18 (unregistering): (slave bridge76): Releasing active interface [ 643.883218][ T9136] bond18 (unregistering): Released all slaves [ 643.999154][ T9119] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 644.112965][ T9117] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 644.166983][ T9117] bond18: (slave bridge77): making interface the new active one [ 644.185846][ T9117] bond18: (slave bridge77): Enslaving as an active interface with an up link 02:12:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x3000000, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:12:00 executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209240", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) 02:12:00 executing program 5: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) 02:12:00 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:12:00 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) [ 644.363630][ T9282] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 644.447482][ T9288] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 644.554894][ T9288] bond19: (slave bridge78): making interface the new active one 02:12:00 executing program 4: [ 644.604057][ T9288] bond19: (slave bridge78): Enslaving as an active interface with an up link [ 644.651196][ T9282] bond19 (unregistering): (slave bridge78): Releasing active interface [ 644.844032][ T9282] bond19 (unregistering): Released all slaves [ 645.016408][ T9288] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 645.047760][ T9282] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 645.068917][ T9282] bond19: (slave bridge79): making interface the new active one [ 645.079795][ T9282] bond19: (slave bridge79): Enslaving as an active interface with an up link 02:12:01 executing program 3: 02:12:01 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r4, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r6}) 02:12:01 executing program 5: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(0xffffffffffffffff, &(0x7f0000000100)=""/238, 0xee) 02:12:01 executing program 4: 02:12:01 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:12:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x4000000, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) [ 645.440115][ T9404] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 645.447534][ T9405] IPVS: ftp: loaded support on port[0] = 21 [ 645.465220][ T97] tipc: TX() has been purged, node left! [ 645.472373][ T97] tipc: TX() has been purged, node left! 02:12:01 executing program 4: 02:12:01 executing program 3: 02:12:01 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb3582f7b4aa1b2343aecd913", 0x15}], 0x1) 02:12:01 executing program 5: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(0xffffffffffffffff, &(0x7f0000000100)=""/238, 0xee) [ 645.511117][ T97] tipc: TX() has been purged, node left! 02:12:01 executing program 4: [ 645.570790][ T9410] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:12:01 executing program 4: 02:12:01 executing program 3: [ 645.696971][ T9410] bond20: (slave bridge80): making interface the new active one [ 645.734989][ T9410] bond20: (slave bridge80): Enslaving as an active interface with an up link [ 645.815635][ T9404] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 645.838506][ T9410] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 645.898806][ T9410] bond20: (slave bridge81): Enslaving as an active interface with a down link 02:12:02 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r4, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r6}) 02:12:02 executing program 4: 02:12:02 executing program 5: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(0xffffffffffffffff, &(0x7f0000000100)=""/238, 0xee) 02:12:02 executing program 3: 02:12:02 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) writev(r0, 0x0, 0x0) 02:12:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:12:02 executing program 3: 02:12:02 executing program 4: [ 646.203718][ T9491] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 646.241860][ T9495] IPVS: ftp: loaded support on port[0] = 21 02:12:02 executing program 5: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) r1 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r1, &(0x7f0000000100)=""/238, 0xee) 02:12:02 executing program 3: 02:12:02 executing program 4: [ 646.446597][ T9497] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:12:02 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) writev(r0, 0x0, 0x0) [ 646.549610][ T9497] bond21: (slave bridge82): making interface the new active one [ 646.596579][ T9497] bond21: (slave bridge82): Enslaving as an active interface with an up link [ 646.652276][ T9511] bond21 (unregistering): (slave bridge82): Releasing active interface [ 646.836863][ T9511] bond21 (unregistering): Released all slaves [ 647.030843][ T9497] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 02:12:03 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:12:03 executing program 3: 02:12:03 executing program 4: 02:12:03 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) writev(r0, 0x0, 0x0) 02:12:03 executing program 5: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) [ 647.101775][ T9491] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 647.222607][ T9491] bond21: (slave bridge83): making interface the new active one [ 647.250527][ T9657] IPVS: ftp: loaded support on port[0] = 21 [ 647.265823][ T9491] bond21: (slave bridge83): Enslaving as an active interface with an up link 02:12:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x6000000, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:12:03 executing program 3: 02:12:03 executing program 4: 02:12:03 executing program 5: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000180)) r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) 02:12:03 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) writev(r0, &(0x7f0000000200), 0x0) 02:12:03 executing program 3: 02:12:03 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) writev(r0, &(0x7f0000000200), 0x0) [ 647.540914][ T9689] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 647.667441][ T9691] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 647.700782][ T9691] bond22: (slave bridge84): making interface the new active one [ 647.710236][ T9691] bond22: (slave bridge84): Enslaving as an active interface with an up link [ 647.724042][ T9712] bond22 (unregistering): (slave bridge84): Releasing active interface 02:12:03 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:12:03 executing program 4: 02:12:03 executing program 5: syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff8fb3f65e32d986dd6042bf0000583a00fe8003100000b20000000d07000000aaff020000000000000000000000000001020090780000007c607f112d8001e6fedc05e854141510b7a2ab37b0290000000000000000000000ffffac141400fe8000000000000000000000000000bb0002040100000000fe8000000000000000000000000000bb1876"], 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) 02:12:03 executing program 3: [ 647.932300][ T9712] bond22 (unregistering): Released all slaves 02:12:04 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) writev(r0, &(0x7f0000000200), 0x0) [ 648.111259][ T9691] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 648.137028][ T9777] IPVS: ftp: loaded support on port[0] = 21 [ 648.214496][ T9689] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 648.306157][ T9689] bond22: (slave bridge85): making interface the new active one [ 648.340359][ T9689] bond22: (slave bridge85): Enslaving as an active interface with an up link 02:12:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x7000000, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:12:04 executing program 4: 02:12:04 executing program 3: 02:12:04 executing program 5: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) 02:12:04 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) writev(r0, &(0x7f0000000200)=[{0x0}], 0x1) 02:12:04 executing program 4: 02:12:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000440), 0x4) [ 648.621950][ T9848] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 648.689971][ T9879] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 648.738340][ T9879] bond23: (slave bridge86): making interface the new active one [ 648.751657][ T9879] bond23: (slave bridge86): Enslaving as an active interface with an up link [ 648.769186][ T9848] bond23 (unregistering): (slave bridge86): Releasing active interface 02:12:04 executing program 5: r0 = socket$inet(0x2b, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) 02:12:04 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) writev(r0, &(0x7f0000000200)=[{0x0}], 0x1) 02:12:04 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="7d3da57519f0a3deb62749193b6e919d1de94d664d6da8968a3c22453ded21421d", 0x21}, {&(0x7f0000000140)="566d972c8d6917023caf92d13b12fe6c39e8154f04e3aa8fa511ea81fd213798252b9eae5c9bd28eee9ee065cd88833fb9966eaabe480d140814daf1f5a30dd608d50864f8aeee3e076b30e18e0c01c5f04bb912c486b00b4f73882d026f734a08a433db42a0a67af22e2f41592f14fdeadd431175fb2902c416f5cfbcf84d92f24cbc665b3bec9fda3b7e3ef143461d6c82a73625", 0x95}, {&(0x7f0000000200)="9214f07010e09f12ebd097aadc862dcae47c0e", 0x13}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)="fa418248c17d4df8f16fae9b5e4bc9fda0bebcf8a71c7b4e24165433dc57cc130871bda510ab1c9bfff2e66f72fdcf2b95ba0b82ef25a5961533c7945a7c4a5fb3f5f1775abaffcbda8d9b7be9493a56a40427a07874bb4457484ad9afa1551a1fa55710fd7377f1fd", 0x69}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) 02:12:04 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:12:04 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x7fffffff, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000040)="23000000220009bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/203, 0xcb, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f", 0x8}], 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x1, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 649.002749][ T9905] IPVS: ftp: loaded support on port[0] = 21 [ 649.090753][ T9848] bond23 (unregistering): Released all slaves [ 649.296986][ T9848] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 649.370829][ T9879] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:12:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x8000000, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:12:05 executing program 5: r0 = socket$inet(0x2b, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) 02:12:05 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000004d80), 0x5e, 0x0) 02:12:05 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) writev(r0, &(0x7f0000000200)=[{0x0}], 0x1) [ 649.412338][ T9879] bond23: (slave bridge87): making interface the new active one [ 649.438223][ T9879] bond23: (slave bridge87): Enslaving as an active interface with an up link 02:12:05 executing program 5: r0 = socket$inet(0x2b, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) 02:12:05 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {}, 0x2, 0x0, 0x0, 0xffffffff}}, 0x2e) 02:12:05 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)}], 0x1) [ 649.617735][T10020] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 02:12:05 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000000)=0x68) 02:12:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r1, 0x917, 0x0, 0x0, {0x4}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) 02:12:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003cc0)=ANY=[@ANYBLOB="3800000010000507000000000000000007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c00020008000200", @ANYRES32], 0x38}}, 0x0) [ 649.776465][T10023] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:12:05 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:12:05 executing program 5: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) [ 649.851231][T10023] bond24: (slave bridge88): making interface the new active one [ 649.895361][T10023] bond24: (slave bridge88): Enslaving as an active interface with an up link [ 649.917978][T10052] bond24 (unregistering): (slave bridge88): Releasing active interface [ 649.945633][T10079] IPVS: ftp: loaded support on port[0] = 21 [ 650.174618][T10052] bond24 (unregistering): Released all slaves [ 650.416733][T10023] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 02:12:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x9000000, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:12:06 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) 02:12:06 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)}], 0x1) 02:12:06 executing program 5: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) 02:12:06 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0x2, 0x4000000000080, 0x2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0, 0x0}, 0x1c) [ 650.505899][T10020] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 650.522532][T10020] bond24: (slave bridge89): making interface the new active one [ 650.531708][T10020] bond24: (slave bridge89): Enslaving as an active interface with an up link 02:12:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000110000000c0009"], 0x20}}, 0x0) 02:12:06 executing program 5: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) 02:12:06 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)}], 0x1) 02:12:06 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000240)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) [ 650.708973][T10188] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 650.760355][T10190] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 650.831837][T10221] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 650.889667][T10191] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 02:12:06 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:12:06 executing program 5: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) 02:12:07 executing program 3: r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) [ 651.010552][T10191] bond25: (slave bridge90): making interface the new active one [ 651.026947][T10243] IPVS: ftp: loaded support on port[0] = 21 [ 651.076846][T10191] bond25: (slave bridge90): Enslaving as an active interface with an up link [ 651.127075][T10215] bond25 (unregistering): (slave bridge90): Releasing active interface [ 651.462864][T10215] bond25 (unregistering): Released all slaves [ 651.509457][T10188] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 651.600616][T10191] bond25: (slave bridge91): making interface the new active one [ 651.617830][T10191] bond25: (slave bridge91): Enslaving as an active interface with an up link 02:12:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r3, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010003b0dfff300"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0xa000000, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r6], 0x20}}, 0x0) 02:12:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000140)=0x78) 02:12:07 executing program 5: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) 02:12:07 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0202002b000507d25a80648c63940d0324fc6010000a4002000000051a82c137153e670902018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 02:12:07 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8eeffad75bfc909a9bb358", 0xb}], 0x1) 02:12:07 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0202002b000507d25a80648c63940d0324fc6010000a4002000000051a82c137153e670902018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 651.811896][T10353] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 02:12:07 executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209240", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 02:12:07 executing program 5: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) 02:12:07 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r0, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) read(r0, &(0x7f0000000100)=""/238, 0xee) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="8e", 0x1}], 0x1) [ 651.937719][T10358] bond26: (slave bridge92): making interface the new active one [ 652.003705][T10358] bond26: (slave bridge92): Enslaving as an active interface with an up link [ 652.065477][T10353] bond26 (unregistering): (slave bridge92): Releasing active interface 02:12:08 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000940)={0x0, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e20, @multicast2}, @xdp={0x2c, 0x0, 0x0, 0x25}, 0x101, 0x0, 0x0, 0x0, 0x6165, 0x0, 0xc7, 0x2, 0x9be}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25450000000c009900000400000200000008000300", @ANYRES32=0x0, @ANYBLOB="080001000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x48040}, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r5, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e20, 0x5, @local, 0x1}}}, &(0x7f00000000c0)=0x84) syz_init_net_socket$ax25(0x3, 0x5, 0xa) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0x5) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r7}) 02:12:08 executing program 4: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$alg(r0, &(0x7f0000236fc8)=[{0x8000000, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0x0) 02:12:08 executing program 3: r0 = socket$kcm(0x11, 0x2, 0x300) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000140)=@phonet={0x23, 0x0, 0x0, 0x39}, 0x80, 0x0}, 0x0) [ 652.234742][T10410] ------------[ cut here ]------------ [ 652.240551][T10410] WARNING: CPU: 1 PID: 10410 at include/linux/thread_info.h:150 tipc_msg_append+0x49a/0x5e0 [ 652.250692][T10410] Kernel panic - not syncing: panic_on_warn set ... [ 652.257279][T10410] CPU: 1 PID: 10410 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 652.265592][T10410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 652.275636][T10410] Call Trace: [ 652.279018][T10410] dump_stack+0x188/0x20d [ 652.283355][T10410] ? tipc_msg_append+0x3c0/0x5e0 [ 652.288291][T10410] panic+0x2e3/0x75c [ 652.289538][T10412] IPVS: ftp: loaded support on port[0] = 21 [ 652.292178][T10410] ? add_taint.cold+0x16/0x16 [ 652.292214][T10410] ? printk+0xba/0xed [ 652.292231][T10410] ? kmsg_dump_rewind_nolock+0xd9/0xd9 [ 652.312191][T10410] ? __warn.cold+0x14/0x35 [ 652.316612][T10410] ? tipc_msg_append+0x49a/0x5e0 [ 652.321551][T10410] __warn.cold+0x2f/0x35 [ 652.325806][T10410] ? tipc_msg_append+0x49a/0x5e0 [ 652.330740][T10410] report_bug+0x27b/0x2f0 [ 652.335244][T10410] do_error_trap+0x12b/0x220 [ 652.339831][T10410] ? tipc_msg_append+0x49a/0x5e0 [ 652.344773][T10410] do_invalid_op+0x32/0x40 [ 652.349187][T10410] ? tipc_msg_append+0x49a/0x5e0 [ 652.354126][T10410] invalid_op+0x23/0x30 [ 652.358285][T10410] RIP: 0010:tipc_msg_append+0x49a/0x5e0 [ 652.363825][T10410] Code: 18 48 89 f8 48 c1 e8 03 42 80 3c 38 00 0f 85 2e 01 00 00 49 83 7e 18 00 0f 84 d4 fc ff ff e8 1d e8 da f9 0f 0b e8 16 e8 da f9 <0f> 0b 41 bc f2 ff ff ff e8 09 e8 da f9 44 89 e0 48 83 c4 50 5b 5d [ 652.383421][T10410] RSP: 0018:ffffc90007e37770 EFLAGS: 00010216 [ 652.389581][T10410] RAX: 0000000000040000 RBX: 0000000000000018 RCX: ffffc9001179c000 [ 652.397556][T10410] RDX: 000000000000115d RSI: ffffffff8798a9da RDI: 0000000000000007 [ 652.405521][T10410] RBP: ffffffffffffffe8 R08: ffff88809aa22040 R09: ffffed1012d45e1d [ 652.413489][T10410] R10: ffff888096a2f0e7 R11: ffffed1012d45e1c R12: ffff888096a2f0e8 [ 652.421457][T10410] R13: ffff888096a2f0d0 R14: ffff88805c9e85c0 R15: dffffc0000000000 [ 652.429470][T10410] ? tipc_msg_append+0x49a/0x5e0 [ 652.434432][T10410] __tipc_sendstream+0xac3/0x1200 [ 652.439467][T10410] ? tipc_connect+0xb90/0xb90 [ 652.444148][T10410] ? prepare_to_wait_exclusive+0x2c0/0x2c0 [ 652.449953][T10410] ? __local_bh_enable_ip+0x159/0x270 [ 652.455322][T10410] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 652.461297][T10410] ? lock_sock_nested+0x94/0x110 [ 652.466228][T10410] ? lock_sock_nested+0x94/0x110 [ 652.471165][T10410] tipc_sendstream+0x4c/0x70 [ 652.475753][T10410] tipc_send_packet+0x3c/0x60 [ 652.480422][T10410] ? tipc_sendstream+0x70/0x70 [ 652.485181][T10410] sock_sendmsg+0xcf/0x120 [ 652.489597][T10410] ____sys_sendmsg+0x32f/0x810 [ 652.494370][T10410] ? kernel_sendmsg+0x50/0x50 [ 652.499047][T10410] ? __lock_acquire+0x2226/0x4a70 [ 652.500029][T10353] bond26 (unregistering): Released all slaves [ 652.504072][T10410] ___sys_sendmsg+0x100/0x170 [ 652.504094][T10410] ? sendmsg_copy_msghdr+0x70/0x70 [ 652.504129][T10410] ? rcu_read_lock_held_common+0xa0/0xa0 [ 652.504142][T10410] ? __lock_acquire+0x2226/0x4a70 [ 652.504166][T10410] ? find_held_lock+0x2d/0x110 [ 652.504184][T10410] ? __might_fault+0x11f/0x1d0 [ 652.504202][T10410] ? ksys_dup3+0x3c0/0x3c0 [ 652.504222][T10410] ? lock_downgrade+0x840/0x840 [ 652.549361][T10410] __sys_sendmmsg+0x195/0x480 [ 652.554040][T10410] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 652.559061][T10410] ? ktime_get_ts64+0x110/0x3e0 [ 652.563922][T10410] ? _copy_to_user+0x126/0x160 [ 652.568682][T10410] ? put_timespec64+0xcb/0x120 [ 652.573443][T10410] ? ns_to_kernel_old_timeval+0x100/0x100 [ 652.579163][T10410] ? __x64_sys_futex+0x380/0x4f0 [ 652.584108][T10410] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 652.589566][T10410] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 652.595548][T10410] __x64_sys_sendmmsg+0x99/0x100 [ 652.600493][T10410] do_syscall_64+0xf6/0x7d0 [ 652.604995][T10410] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 652.610883][T10410] RIP: 0033:0x45ca69 [ 652.614779][T10410] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 652.634375][T10410] RSP: 002b:00007fc7ae45fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 652.642785][T10410] RAX: ffffffffffffffda RBX: 00000000004fcf40 RCX: 000000000045ca69 [ 652.650747][T10410] RDX: 04924924924926c8 RSI: 0000000020236fc8 RDI: 0000000000000004 [ 652.658711][T10410] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 652.666672][T10410] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 652.674638][T10410] R13: 00000000000008f5 R14: 00000000004cbc5c R15: 00007fc7ae4606d4 [ 652.684050][T10410] Kernel Offset: disabled [ 652.688496][T10410] Rebooting in 86400 seconds..