0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x40000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:01:48 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0xffffa200) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:01:48 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x13e, r0}, 0x38) 18:01:48 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x15e, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) [ 510.298580][T24233] device bond182 entered promiscuous mode [ 510.311198][T24233] 8021q: adding VLAN 0 to HW filter on device bond182 18:01:48 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 18:01:48 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0xffffff8d) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:01:48 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x15f, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:01:48 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x13f, r0}, 0x38) 18:01:48 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0xfffffdef) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) [ 510.516438][T24295] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:01:48 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x160, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:01:49 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x4000000000000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:01:49 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0xffffff7f) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:01:49 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0xa2ffff) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:01:49 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x140, r0}, 0x38) 18:01:49 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x161, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:01:49 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0xa2ffff00000000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 511.342361][T24295] device bond183 entered promiscuous mode [ 511.399953][T24295] 8021q: adding VLAN 0 to HW filter on device bond183 18:01:49 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 18:01:49 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x162, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:01:49 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0xffffff8d) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:01:49 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x141, r0}, 0x38) 18:01:49 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x100000000000000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:01:49 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x163, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:01:49 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x142, r0}, 0x38) [ 511.854863][T24380] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:01:50 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x4000000000000) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:01:50 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x1000000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:01:50 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x164, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:01:50 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x400000000000000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:01:50 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x143, r0}, 0x38) [ 512.725552][T24380] device bond184 entered promiscuous mode [ 512.735842][T24380] 8021q: adding VLAN 0 to HW filter on device bond184 18:01:50 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 18:01:50 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x165, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:01:50 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0xa2ffff00000000) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:01:51 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x144, r0}, 0x38) [ 513.142400][T24451] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:01:51 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x4000000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:01:51 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x700000000000000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:01:51 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x166, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:01:51 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x145, r0}, 0x38) 18:01:51 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x167, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:01:52 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x100000000000000) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) [ 513.911262][T24451] device bond185 entered promiscuous mode 18:01:52 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0xa00000000000000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 513.969649][T24451] 8021q: adding VLAN 0 to HW filter on device bond185 18:01:52 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x146, r0}, 0x38) 18:01:52 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 18:01:52 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x7000000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:01:52 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x168, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) [ 514.459671][T24525] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:01:52 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x147, r0}, 0x38) 18:01:52 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x169, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:01:53 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x16a, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:01:53 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x148, r0}, 0x38) 18:01:53 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x400000000000000) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:01:53 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0xa000000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:01:53 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x2000000000000000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 515.197806][T24525] device bond186 entered promiscuous mode 18:01:53 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x16b, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) [ 515.259551][T24525] 8021q: adding VLAN 0 to HW filter on device bond186 18:01:53 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x149, r0}, 0x38) 18:01:53 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 18:01:53 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x16c, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:01:53 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x3a00000000000000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 515.827256][T24596] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:01:54 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x14a, r0}, 0x38) 18:01:54 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x16d, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:01:54 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x20000000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 516.356109][T24596] device bond187 entered promiscuous mode [ 516.369744][T24596] 8021q: adding VLAN 0 to HW filter on device bond187 18:01:54 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x700000000000000) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:01:54 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 18:01:54 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x14b, r0}, 0x38) 18:01:54 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x16e, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) [ 516.862177][T24653] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:01:55 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x6000000000000000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:01:55 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x14c, r0}, 0x38) 18:01:55 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x16f, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:01:55 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x3a000000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 517.534758][T24653] device bond188 entered promiscuous mode [ 517.605748][T24653] 8021q: adding VLAN 0 to HW filter on device bond188 18:01:55 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0xa00000000000000) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:01:55 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x8400000000000000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:01:55 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x14d, r0}, 0x38) 18:01:55 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x170, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:01:55 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, 0x0, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 18:01:56 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x171, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:01:56 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x14e, r0}, 0x38) 18:01:56 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x8dffffff00000000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:01:56 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x3f000000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:01:56 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, 0x0, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 18:01:56 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x172, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:01:56 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x14f, r0}, 0x38) 18:01:56 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x2000000000000000) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) [ 518.854594][T24746] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:01:57 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x173, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:01:57 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x150, r0}, 0x38) 18:01:57 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x174, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:01:57 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0xb80b000000000000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:01:57 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x60000000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 519.594800][T24746] device bond189 entered promiscuous mode [ 519.625024][T24746] 8021q: adding VLAN 0 to HW filter on device bond189 18:01:57 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, 0x0, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 18:01:57 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x151, r0}, 0x38) 18:01:57 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x175, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:01:58 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x3a00000000000000) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:01:58 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0xe803000000000000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 520.122479][T24818] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:01:58 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x176, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:01:58 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x152, r0}, 0x38) 18:01:58 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x153, r0}, 0x38) 18:01:58 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x84000000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:01:58 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x177, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:01:58 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0xeffdffff00000000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:01:58 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x154, r0}, 0x38) [ 520.885827][T24818] device bond190 entered promiscuous mode [ 520.936112][T24818] 8021q: adding VLAN 0 to HW filter on device bond190 18:01:59 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 18:01:59 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x6000000000000000) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:01:59 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x178, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:01:59 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x8dffffff) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:01:59 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x155, r0}, 0x38) 18:01:59 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0xf401000000000000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:01:59 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x179, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) [ 521.258598][T24899] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:01:59 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0xb80b0000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:01:59 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x17a, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:01:59 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x156, r0}, 0x38) 18:02:00 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0xffffff7f00000000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:00 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x17b, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) [ 522.038315][T24899] device bond191 entered promiscuous mode [ 522.088685][T24899] 8021q: adding VLAN 0 to HW filter on device bond191 18:02:00 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 18:02:00 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0xe8030000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:00 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x8400000000000000) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:02:00 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x17c, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:02:00 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x157, r0}, 0x38) 18:02:00 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0xffffffff00000000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:00 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x17d, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:02:00 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0xeffdffff) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:00 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x158, r0}, 0x38) 18:02:00 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x17e, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:02:01 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0xf4010000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:01 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 18:02:01 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x159, r0}, 0x38) 18:02:01 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x8dffffff00000000) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:02:01 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x17f, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:02:01 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffb) read$usbmon(r2, &(0x7f0000000300)=""/262, 0x106) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 523.250941][T25000] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:02:01 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0xffffa200) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 523.538817][ T28] audit: type=1804 audit(1595268121.594:117): pid=25010 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/399/bus" dev="sda1" ino=16378 res=1 errno=0 18:02:01 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x15a, r0}, 0x38) 18:02:01 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x180, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:02:01 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0xfffffdef) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 523.852854][T25000] device bond192 entered promiscuous mode [ 523.871886][T25000] 8021q: adding VLAN 0 to HW filter on device bond192 [ 523.879017][ T28] audit: type=1804 audit(1595268121.934:118): pid=25014 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/399/bus" dev="sda1" ino=16378 res=1 errno=0 18:02:02 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0, 0x2}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:02:02 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 18:02:02 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x15b, r0}, 0x38) 18:02:02 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000100), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4}, 0x0, 0x6, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:02 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0xb80b000000000000) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:02:02 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0xffffff7f) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 524.196335][T25068] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:02:02 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0, 0x3f00}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:02:02 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x15c, r0}, 0x38) 18:02:02 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0, 0x4000}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) [ 524.683256][T25068] device bond193 entered promiscuous mode [ 524.693284][T25068] 8021q: adding VLAN 0 to HW filter on device bond193 18:02:02 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0xffffff8d) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:02 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 18:02:02 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x15d, r0}, 0x38) [ 524.937096][T25127] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:02:03 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0, 0x1000000}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:02:03 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x220080, 0x0) lseek(r5, 0x4202, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x8400fffffffb) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x2, 0x2, 0x3, 0x3, 0x3, 0x6, 0x2, 0xaf, 0x40, 0x3de, 0x0, 0x5, 0x38, 0x2, 0x9, 0x6, 0x3f}, [{0x4, 0x6, 0x6f16, 0x20, 0x52d, 0x9, 0x0, 0x4}], "ccbd20133938a91286221bbc98f54412aae56cd122dc6acf10c13d06e9b6a98a5983a0391c41dc1824070271c617e69cca90e9852e0dbcee75de4eedb78e2fd876c9dc0af6ff1f89d6c3cb3651039baa7beabb23ec01b5faef24754ca10dfe75ab22ed4ec42e579da9a63725260473bb82c857e6576bcd86bff574aa50ce2ba3b31e4873a89f01a59016fbbf3859522cfb0a341389f6d05b7487d83c8667190c3459b3c4", [[], [], [], [], [], []]}, 0x71c) ioctl$PPPIOCGIDLE(r6, 0x8010743f, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:03 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x4000000000000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 525.286074][ T28] audit: type=1804 audit(1595268123.344:119): pid=25139 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/401/bus" dev="sda1" ino=16381 res=1 errno=0 18:02:03 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0xe803000000000000) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:02:03 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0, 0x2000000}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:02:03 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x15e, r0}, 0x38) [ 525.552763][ T28] audit: type=1804 audit(1595268123.534:120): pid=25139 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/401/bus" dev="sda1" ino=16381 res=1 errno=0 18:02:03 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x0, 0x4, {0xa, 0x4e20, 0x7ff, @mcast2, 0x7}}}, 0x3a) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r3, 0xc10c5541, &(0x7f0000002ac0)={0x4, 0x40}) sendfile(r2, r3, 0x0, 0x8400fffffffb) sendmmsg(r2, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="a173437cbbcf99b1aaee076021ab30efc58e2a17895f66d8bcdeb215596dc5df59455af526852dc84c0196dd112fc1cbdfdf1cd805421da764035e2534b066d69277d8070e0e1cd3514f2a1f798489fcfb70408de1455976fedf14cfbd27bda785b7147394d14a82f492bfd718ff369e315375e4e03d0211f09ecea6c8f3817d5149d1f46d6cdc3d7cc9117b8851552f9c9ba28aabb47de4027ea480741536f9a9c7fec4c7dc6ab21d82", 0xaa}, {&(0x7f0000000000)="3618c3a1a75fc3092f5f2b5c79eb11", 0xf}, {&(0x7f0000000300)="82eebdd8a2f70f0b563b68e0b7640d6582b0916e3c919f9dad4480249319c86d26bc7359e58a8825e57149fc48d89426458f754e615ec819d9a5ebb82f62f0d2a7cb07eb5173938765ab980718e74c51d8", 0x51}, {&(0x7f0000000380)="f9fe83b33171f70f4994fbcb0e32ffcdb83a197628ca51d54354b2237b042c642cde6f5be32e1a3ac7a574ababb1555d0b1f0c01d0f22bd8163c057ccb46c1ec35abdf0336f620bebfd56a4fcab4c1c6effeadf5abfc9b84022eb74b5d1759adefb293308ed93a8bfdf8afa0371b8c3b08", 0x71}], 0x4, &(0x7f0000000440)=[{0x88, 0x10e, 0x7, "164c1d9ba2411ff0745a0bb3cce9477be39ee165809486e589414055bc4895cea4d41a48eff30a6e136619fd83abeb99594fde55337e791b260837d6303a27f9a81d4e09c1f896757af69ff53a7a354652899321f71de204f1a82445b7aeeba4f7822f97de92b1e3de7b214e33aa5da2d798"}, {0x40, 0x10b, 0x8000, "4d5804cac26bd24f7017aa8c083f4c01d8f77338423f9ae6eff88048de13979f82fd1db376930cb6df895c53f54b0ac3"}], 0xc8}}, {{&(0x7f0000000540)=@l2tp6={0xa, 0x0, 0x80000001, @mcast1, 0x1, 0x1}, 0x80, &(0x7f0000002780)=[{&(0x7f00000005c0)="6bb5eb72fcb01e3f8a3ea8044590ad25fd81e06a065a1559ded9504f6485b289aeb1de70f396a4a2724fd374e05c7d9070179c2dba7b80173765404a68", 0x3d}, {&(0x7f0000000600)="dbfe135dfaeb796b4b1d5b2cb776936f1b94d4903cc8e5b8bc717f27bff79365fa59fe671264cd4de31769eb9372e89d2deb7e183422dd3e0e3d301c57456f18eaccd12a58ae8b71ca9d8bbae5ff756087f67ef14b6917d1e8dc34479fdb2060a8721d397cb058b3a3bc4a0b0191b034901a8b5766f64c04029aa2ae9170f92eddc6579e46cb1f0b30a7c2d177298bd8f762f116a4cfb26a65b0c9e1dc472b6f1d1461a781be5cf557033effb9f2282985a42b89714f53287cc012bea9896dec9dd0d2db9a8052d52cfd6a782c32c91c45849c38c4d5d147b0833c2bb87602a5344616dc36158c1427971369c58c4f03", 0xf0}, {&(0x7f0000000700)="91936f9ad1", 0x5}, {&(0x7f0000000740)="42d0c38a98ca37bd10d8662cd57443844c4b39eef8c8f23a18dac6313b5880c93a30ee6cb42eda6a3fdf077ca77f", 0x2e}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="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", 0x1000}], 0x6, &(0x7f0000002800)=[{0x70, 0x109, 0x1, "545c1a42e3310e2bacd74a6166ffb878fe1e49b55163a2646f865b1072453519f96501b243225b9785bcd67857eaa0e953342aaa0200d02b6eee4e94109ba0d65b7c21371bc555cfbedc9c91270ce5d45885b25a1acab973fc2463"}, {0xe0, 0x109, 0x4bbecb4, "9e3d33561d000a56a85d637d261d8a4f0705c66030867ea45c2d03c44204a515fd13085682144ed223af32e4dc1ef16e6d3ced52628f5ab3bed188d49da1ba4b9c82314adef520f883afcdfd4a737899229239588553a1e38bb0415627e9f398cc15dc1bdf3fe4efd6ea0cba53f356bb58a0996cb562c79b6c30bcf73557cb319f69a025e706533990d40efdc4ac652bb2f047ec05245e9dacba8c4ff365a2ff37186c71176310cd8b33eedfe3ee3f04a89f65cadf5fad2d1f898c19355303382513abd6249c07849d92117fca"}, {0x90, 0x132, 0x800, "6c2f2b0475b4d522bcb66aad6bcd3146dfad8e047f463450dfdc2bb81432e134a1a17b90307cd089461190cc2e1a9ed861e8acc5453050c2d6d72bb502704a4ea123727b25c6d23cfd9bcbabed36cfb64cf7f91f4111ae1c2c926ea815bd4b2938cb93a9650a7b921d55c6f77e18d09ab5a1bfe3a7275212d8"}, {0x50, 0x100, 0x0, "ff902f77698e426bf015cf3866b9a690d0c3d01c70990f71899222816affc24e1a95d22e3478cf47feaeebd8be253b07604172856790c399d3d7c1e842"}], 0x230}}], 0x2, 0x4040804) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000002c40)=""/223) read$usbmon(r4, &(0x7f0000000200)=""/247, 0xf7) sendfile(r4, r4, 0x0, 0x8080ffffff7e) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000002c00)=0x8001) [ 525.805377][T25127] device bond194 entered promiscuous mode 18:02:03 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0, 0x3f000000}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) [ 525.887104][T25127] 8021q: adding VLAN 0 to HW filter on device bond194 18:02:04 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0xa2ffff00000000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:04 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x15f, r0}, 0x38) 18:02:04 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) [ 526.074636][ T28] audit: type=1804 audit(1595268124.134:121): pid=25189 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/402/bus" dev="sda1" ino=16370 res=1 errno=0 18:02:04 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:04 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0, 0x40000000}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) [ 526.310618][ T28] audit: type=1804 audit(1595268124.174:122): pid=25189 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/402/bus" dev="sda1" ino=16370 res=1 errno=0 [ 526.333004][T25201] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:02:04 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x160, r0}, 0x38) 18:02:04 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0xeffdffff00000000) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) [ 526.583667][ T28] audit: type=1804 audit(1595268124.194:123): pid=25194 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/402/bus" dev="sda1" ino=16370 res=1 errno=0 [ 526.825430][T25201] device bond195 entered promiscuous mode [ 526.859923][T25201] 8021q: adding VLAN 0 to HW filter on device bond195 [ 526.870655][ T28] audit: type=1804 audit(1595268124.204:124): pid=25189 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/402/bus" dev="sda1" ino=16370 res=1 errno=0 18:02:05 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0, 0x1000000000000}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:02:05 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0xf401000000000000) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:02:05 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x161, r0}, 0x38) 18:02:05 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e22, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ioctl$TIOCSIG(r2, 0x40045436, 0x30) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) r4 = socket$bt_cmtp(0x1f, 0x3, 0x5) dup3(r1, r4, 0x80000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000080)) 18:02:05 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 18:02:05 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x100000000000000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:05 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0, 0x100000000000000}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:02:05 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x162, r0}, 0x38) [ 527.381307][T25267] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:02:05 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0, 0x200000000000000}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:02:05 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffb) connect$pppl2tp(r0, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x1, 0x4, 0x4, 0x1, {0xa, 0x4e21, 0xb4a6dcf5, @local, 0x6}}}, 0x3a) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x8, 0x0, 0x41c1, 0x64414, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0xca4a, 0x6, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000100)={0x0, 0x0, {0x37, 0x2000000b, 0x10, 0x15, 0x5, 0x204, 0x6, 0x10012d, 0x1}}) read$usbmon(r4, &(0x7f0000000200)=""/247, 0xf7) sendfile(r4, r4, 0x0, 0x8080ffffff7e) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000080)={0x3}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x1, 0x24080800) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:06 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x163, r0}, 0x38) [ 528.005303][ T28] audit: type=1804 audit(1595268126.064:125): pid=25284 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/405/bus" dev="sda1" ino=16370 res=1 errno=0 18:02:06 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0, 0x3f00000000000000}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:02:06 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0xffffff7f00000000) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:02:06 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x164, r0}, 0x38) 18:02:06 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x400000000000000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 528.140336][T25267] device bond196 entered promiscuous mode [ 528.148335][ T28] audit: type=1804 audit(1595268126.104:126): pid=25284 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/405/bus" dev="sda1" ino=16370 res=1 errno=0 18:02:06 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffb) lseek(0xffffffffffffffff, 0x4200, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x8400fffffffb) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000000)=0x3, 0x4) socket$inet_dccp(0x2, 0x6, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x400001, 0x0) connect$pppl2tp(r3, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x0, 0x2, 0x0, 0x1, {0xa, 0x4e22, 0x3, @ipv4={[], [], @remote}, 0x8}}}, 0x3a) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 528.199062][T25267] 8021q: adding VLAN 0 to HW filter on device bond196 18:02:06 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 18:02:06 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0, 0x4000000000000000}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:02:06 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x1, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:06 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x165, r0}, 0x38) 18:02:06 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0, 0x0, 0x2}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) [ 528.750571][T25344] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:02:07 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) r2 = socket$netlink(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000080)=0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:07 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0xffffffff00000000) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:02:07 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x166, r0}, 0x38) 18:02:07 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x700000000000000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:07 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x167, r0}, 0x38) [ 529.583413][T25344] device bond197 entered promiscuous mode [ 529.708687][T25344] 8021q: adding VLAN 0 to HW filter on device bond197 18:02:07 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:07 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x168, r0}, 0x38) 18:02:08 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 18:02:08 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0, 0x0, 0x3f00}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:02:08 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x4, 0x6, 0x6}}, 0x30) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:02:08 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0xa00000000000000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:08 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2, 0x80000000}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fc0009167a6c75f256e0610434895002000000fd42ef42000000010902"], 0x0) syz_usb_disconnect(r2) syz_usb_disconnect(r2) syz_usb_ep_read(r2, 0x17, 0xdf, &(0x7f0000000580)=""/223) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000140), 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3}]) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000080), &(0x7f0000000100)=0x4) getdents64(r3, &(0x7f0000000300)=""/223, 0xdf) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:08 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x169, r0}, 0x38) [ 530.370888][T25425] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:02:08 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x16a, r0}, 0x38) [ 530.588302][T16281] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 530.899241][T16281] usb 1-1: device descriptor read/64, error 18 18:02:09 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x2000000000000000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:09 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x16b, r0}, 0x38) 18:02:09 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0, 0x0, 0x4000}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) [ 531.243243][T25425] device bond198 entered promiscuous mode [ 531.277399][T25425] 8021q: adding VLAN 0 to HW filter on device bond198 [ 531.290611][T16281] usb 1-1: device descriptor read/64, error 18 18:02:09 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) r3 = dup3(r2, r0, 0x80000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_bp={&(0x7f0000000080), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:02:09 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x16c, r0}, 0x38) 18:02:09 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) [ 531.568297][T16281] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 531.802126][T25491] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:02:09 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x16d, r0}, 0x38) [ 531.858184][T16281] usb 1-1: device descriptor read/64, error 18 18:02:10 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x3a00000000000000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 532.288072][T16281] usb 1-1: device descriptor read/64, error 18 18:02:10 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) read$usbmon(r3, &(0x7f0000000200)=""/247, 0xf7) sendfile(r3, r3, 0x0, 0x8080ffffff7e) write$cgroup_freezer_state(r3, &(0x7f0000000080)='FREEZING\x00', 0x9) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) [ 532.419666][T16281] usb usb1-port1: attempt power cycle [ 532.522913][T25491] device bond199 entered promiscuous mode [ 532.529794][T25491] 8021q: adding VLAN 0 to HW filter on device bond199 [ 533.158013][T16281] usb 1-1: new high-speed USB device number 7 using dummy_hcd 18:02:11 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0x210802, 0x0) ioctl$FICLONE(r2, 0x40049409, 0xffffffffffffffff) 18:02:11 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x16e, r0}, 0x38) 18:02:11 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0, 0x0, 0x1000000}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:02:11 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 18:02:11 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) lseek(r0, 0x4200, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8400fffffffb) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000080)={0x8001, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x36}}}}, 0x88) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e20, @empty}, 0x2}}, 0x2e) r6 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r6, r6, 0x0, 0x8080ffffff7e) connect$llc(r6, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000140)=0x105280000000000) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r4, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) 18:02:11 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x3f00000000000000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 533.287961][T16281] usb 1-1: device descriptor read/8, error -71 [ 533.390844][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 533.390862][ T28] audit: type=1804 audit(1595268131.455:133): pid=25556 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir364736473/syzkaller.Rispx1/362/bus" dev="sda1" ino=16257 res=1 errno=0 [ 533.392582][T25554] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 533.437972][ T28] audit: type=1804 audit(1595268131.495:134): pid=25556 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir364736473/syzkaller.Rispx1/362/bus" dev="sda1" ino=16257 res=1 errno=0 [ 533.548022][T16281] usb 1-1: device descriptor read/8, error -71 18:02:11 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x16f, r0}, 0x38) 18:02:11 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$HIDIOCGDEVINFO(r2, 0x801c4803, &(0x7f0000000100)=""/116) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f00000000c0)) [ 534.132355][ T28] audit: type=1804 audit(1595268132.195:135): pid=25560 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir364736473/syzkaller.Rispx1/362/bus" dev="sda1" ino=16257 res=1 errno=0 18:02:12 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x170, r0}, 0x38) 18:02:12 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x6000000000000000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:12 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0, 0x0, 0x2000000}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) [ 534.288685][ T28] audit: type=1804 audit(1595268132.225:136): pid=25556 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir364736473/syzkaller.Rispx1/362/bus" dev="sda1" ino=16257 res=1 errno=0 [ 534.292068][T25554] device bond200 entered promiscuous mode 18:02:12 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffb) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x58, r5, 0x410, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2e}}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0x58}}, 0xc081) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10021420}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r5, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xf800}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x89}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfff}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc1}, 0x20000) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) [ 534.446169][T25554] 8021q: adding VLAN 0 to HW filter on device bond200 18:02:12 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x171, r0}, 0x38) [ 534.610683][ T28] audit: type=1804 audit(1595268132.655:137): pid=25620 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir364736473/syzkaller.Rispx1/363/bus" dev="sda1" ino=16383 res=1 errno=0 18:02:12 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 18:02:13 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0, 0x0, 0x3f000000}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) [ 535.088775][T25627] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:02:13 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x8400000000000000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:13 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x5}]) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x3, 0x4, 0x3, 0x4, {0xa, 0x4e22, 0x0, @ipv4={[], [], @empty}, 0x6}}}, 0x32) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000100)=0x40) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, &(0x7f0000000140)={0x4, [0x0, 0x0, 0x0, 0x0]}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:13 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x172, r0}, 0x38) [ 535.378896][ T28] audit: type=1804 audit(1595268133.445:138): pid=25656 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir364736473/syzkaller.Rispx1/363/bus" dev="sda1" ino=16383 res=1 errno=0 [ 535.493945][T25627] device bond201 entered promiscuous mode [ 535.507421][T25627] 8021q: adding VLAN 0 to HW filter on device bond201 18:02:13 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffb) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000100)={0x980000, 0x8, 0x31, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x1321392, 0x2, [], @p_u16=&(0x7f0000000080)=0x104e}}) ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, &(0x7f0000000300)="1fe6ee51f4d917725ef3b17ba422bc568487a49ee33354d38fe35a02ce684dc5359b5ca1bd5a8f340dbef0cbe05c12cbb80ed3fb127951d06d06e44cb13a5496c5f0c6697100f9ed6447eea0c74b90ce578bcb6cc2495201e9e4c9f365b7cc94356945359727c2110bf4dd720205af1c2b85d2ebb2ca69d07968f4f49c282b4ffcd7b35240f8bcc21d450548eee93c8bfcddda3f94349ac1b22e80096c817371ddce62c7606f46667052dd4c6ca1cd284aa6660bc75637deda1954ae1e83befb4c2813") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:02:13 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x3, 0x7, 0x0, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 18:02:13 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffb) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0xfffffffffffffff0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x1, 0x4008800) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:13 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0, 0x0, 0x40000000}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) [ 535.802449][ T28] audit: type=1804 audit(1595268133.865:139): pid=25681 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir364736473/syzkaller.Rispx1/364/bus" dev="sda1" ino=16050 res=1 errno=0 18:02:13 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x173, r0}, 0x38) [ 535.951927][T25686] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 535.955277][ T28] audit: type=1804 audit(1595268134.005:140): pid=25685 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/414/bus" dev="sda1" ino=16337 res=1 errno=0 18:02:14 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:02:14 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffb) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002400071fa66dd6b6cd7f463705000001", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x40, 0x2, [@TCA_RSVP_PINFO={0x20}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_RSVP_CLASSID={0x4}]}}]}, 0x70}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@local, 0x7a, r4}) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) 18:02:14 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x174, r0}, 0x38) [ 536.401573][ T28] audit: type=1804 audit(1595268134.015:141): pid=25688 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir364736473/syzkaller.Rispx1/364/bus" dev="sda1" ino=16050 res=1 errno=0 [ 536.414438][T25686] device bond202 entered promiscuous mode [ 536.461211][T25686] 8021q: adding VLAN 0 to HW filter on device bond202 [ 536.605322][ T28] audit: type=1804 audit(1595268134.085:142): pid=25691 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/414/bus" dev="sda1" ino=16337 res=1 errno=0 18:02:14 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x8dffffff00000000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:14 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x175, r0}, 0x38) 18:02:14 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x3, 0x7, 0x0, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 18:02:14 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={r3, 0x1, 0x10}, 0xc) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=r3, &(0x7f0000000100)=0x4) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 536.935647][T25744] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:02:15 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0, 0x0, 0x1000000000000}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:02:15 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x176, r0}, 0x38) 18:02:15 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="010000eb9e68d0256e8c481e6cba42796600", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000000)={r4, 0x1, 0x10}, 0xc) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={r4, 0x5}, &(0x7f00000000c0)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:02:15 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x329800, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24044880}, 0x804) sendfile(r2, r3, 0x0, 0x8400fffffffb) r5 = dup(r3) ioctl$PPPIOCDISCONN(r5, 0x7439) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:15 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x177, r0}, 0x38) [ 537.747005][T25744] device bond203 entered promiscuous mode [ 537.796250][T25744] 8021q: adding VLAN 0 to HW filter on device bond203 18:02:15 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0xb80b000000000000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:16 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x3, 0x7, 0x0, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 18:02:16 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0, 0x0, 0x100000000000000}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:02:16 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x178, r0}, 0x38) [ 538.291788][T25813] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:02:16 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffb) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) read$usbmon(r4, &(0x7f00000002c0)=""/263, 0x107) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:16 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x179, r0}, 0x38) 18:02:17 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0xe803000000000000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 538.906739][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 538.906754][ T28] audit: type=1804 audit(1595268136.965:147): pid=25826 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/418/bus" dev="sda1" ino=16384 res=1 errno=0 18:02:17 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) recvfrom$inet(r2, &(0x7f0000000080)=""/72, 0x48, 0x40000000, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x8080ffffff7e) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0xfffffffc, @local, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:02:17 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x17a, r0}, 0x38) [ 539.035631][T25813] device bond204 entered promiscuous mode [ 539.070840][T25813] 8021q: adding VLAN 0 to HW filter on device bond204 [ 539.101740][ T28] audit: type=1804 audit(1595268136.985:148): pid=25826 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/418/bus" dev="sda1" ino=16384 res=1 errno=0 18:02:17 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x3, 0x7, 0x201, 0x0, 0x0, {}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) [ 539.289560][ T28] audit: type=1804 audit(1595268137.235:149): pid=25867 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/418/bus" dev="sda1" ino=16384 res=1 errno=0 18:02:17 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x17b, r0}, 0x38) [ 539.570704][ T28] audit: type=1804 audit(1595268137.235:150): pid=25842 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/418/bus" dev="sda1" ino=16384 res=1 errno=0 [ 539.588552][T25874] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:02:17 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0, 0x0, 0x200000000000000}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:02:18 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0xeffdffff00000000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:18 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x17c, r0}, 0x38) 18:02:18 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0, 0x0, 0x3f00000000000000}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:02:18 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r1 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r1, r1, 0x0, 0x8080ffffff7e) connect$llc(r1, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x58, r3, 0x410, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2e}}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0x58}}, 0xc081) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x84, r3, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1={0xfc, 0x1, [], 0x1}}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3a, 0x3e}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff0000}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4000845) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)=0x0) ptrace$getenv(0x4201, r4, 0x9, &(0x7f00000000c0)) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, 0x0) [ 540.422451][T25874] device bond205 entered promiscuous mode 18:02:18 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x17d, r0}, 0x38) [ 540.474647][T25874] 8021q: adding VLAN 0 to HW filter on device bond205 18:02:18 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700000000007573cd3a263128d53a7e00000000000000bf3aa52ae1fd9588c8e77e3bd8ef13e1c6bdc24fc3f2bdd8508a00001c7d7f2e55354bb7542d941fef68edb3041e805bb3497efaec74ba8f778a6f96f72d2bf3f29dd035bbca401fe472194c0a5968bcaa012ec28350f4700d202d3469d749000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002400071fa66dd6b6cd7f463705000001", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000400080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB='p\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0000000000000000080000000a0001007273767036000013f9d37157d52be9892a69d41bc20300400002002000040000000000000000000000000000000000000000000000000000000700140002002001000000000000000000ff7f00000000000000000000009a2125f6a101628bbf6d0b5edefd9335a436e0e33cda9ca2d3f3e90b9b2cbb7884b6"], 0x70}}, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0xc06c4124, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x616111c8a2634ca}) 18:02:18 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x3, 0x7, 0x201, 0x0, 0x0, {}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 18:02:18 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0xf401000000000000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:18 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x17e, r0}, 0x38) [ 540.863448][T25937] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 540.940378][T25938] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:02:19 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0, 0x0, 0x4000000000000000}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:02:19 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) prctl$PR_GET_THP_DISABLE(0x2a) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) read$usbmon(r3, &(0x7f0000000200)=""/247, 0xf7) sendfile(r3, r3, 0x0, 0x8080ffffff7e) getsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x8, 0x0, 0x1de, 0x6, 0x2}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x1f8, r4, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x160, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x105bc9a5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfd5e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c14504f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5238c249}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x71b17724}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x214e10ae}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x917b}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7975d9ac}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa72f}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc1a9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2af4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x97d7}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xef67}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4acc385e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1435a997}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfb8e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe03b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3133f94c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x15ac}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x509f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6754a9b9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x55e5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6147691d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf14b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1bdc}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6c78}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x153374ad}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd3f2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb53dec3}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcfca}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xef0f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6da23a27}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x958b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5e1f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4eb6b3de}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54012bb5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39783ed8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5fd90599}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1cf2}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x4c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a6f16ba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1e98}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4135}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ba1a323}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xda79}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1da6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf50}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9d50}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="48010000", @ANYRES16=r4, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x8080}, 0x44880) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f0000000740)=""/4096) 18:02:19 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x17f, r0}, 0x38) 18:02:19 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffb) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000340)={0x0, 0x18, [], [@enc_lim={0x4, 0x1, 0x3}, @calipso={0x7, 0x18, {0x0, 0x4, 0x1f, 0x7fff, [0xbb6b, 0x5]}}, @generic={0x3, 0x9a, "f18baef4fe47f132a8cded1e7bb260eb6c3ecc742c477bec28b795312f25bac5fefda550bbce7c0e58662e6619ef145ad2236f283a4713a3a76c36100c64c87a8ba16f3b7ceb543a148119ceddeb21482362d38fb617332b819b128ca7aed442698c45ac51cae9c2513483bf9954978f9c5ec15394f5c9c01bf404a6dbc13d69dd23dd4e9932174e815c29df43ec88d8eeac23bf63d8600a92ab"}, @ra={0x5, 0x2, 0x7f}, @ra={0x5, 0x2, 0x81}]}, 0xd0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000100)={0x0, 0x20, 0x1, r2}) ioctl$KVM_PPC_ALLOCATE_HTAB(r3, 0xc004aea7, &(0x7f0000000080)=0x7) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000300), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:19 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x180, r0}, 0x38) [ 541.733401][T25938] device bond206 entered promiscuous mode [ 541.782362][T25938] 8021q: adding VLAN 0 to HW filter on device bond206 [ 541.787224][ T28] audit: type=1804 audit(1595268139.846:151): pid=25995 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/420/bus" dev="sda1" ino=16374 res=1 errno=0 [ 541.813097][T25939] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 18:02:20 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0}, 0x78) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:02:20 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x2, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) write$binfmt_misc(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="73797a30838ac1ce635647717a45a54981f1be000000001847e9f3f18e1f332829510a0bae954c6076e21df714bdb842723dab339a3caa0a164c17f5775875223d5664ff94f37cee017591a91fa7a41a33650a1a58efa6bf822fac3d527a19cb50d1d6538da35d221b027683cd49397196e02dc213f79c718c60d0d5cb6be6dbc03afa5afbeb9f53dc7cd1b90a240fbdec9d6fe7167de414401e966c16498d206a8873d19bc32f0ad738cc9684b65cc91446b23c1f1f070b21079fd03ac60907ae07512beeb84c6a"], 0xc8) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffb) ioctl$CHAR_RAW_SECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000300)=0x80000001) sendfile(r4, r5, 0x0, 0x8400fffffffb) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f0000000080)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) [ 541.936225][ T28] audit: type=1804 audit(1595268139.886:152): pid=25995 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/420/bus" dev="sda1" ino=16374 res=1 errno=0 18:02:20 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x3, 0x7, 0x201, 0x0, 0x0, {}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 18:02:20 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0xffffff7f00000000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:20 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x181, r0}, 0x38) [ 542.076556][ T28] audit: type=1804 audit(1595268139.986:153): pid=25995 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/420/bus" dev="sda1" ino=16374 res=1 errno=0 18:02:20 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x20300, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', r3}, 0x10) ioctl$SNDCTL_DSP_GETTRIGGER(r2, 0x80045010, &(0x7f0000000100)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 542.188578][ T28] audit: type=1804 audit(1595268139.986:154): pid=25995 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/420/bus" dev="sda1" ino=16374 res=1 errno=0 [ 542.213004][T26007] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:02:20 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffb) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:02:20 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0}, 0x1081) read$usbmon(0xffffffffffffffff, 0x0, 0x0) [ 542.424276][ T28] audit: type=1804 audit(1595268140.206:155): pid=26011 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir364736473/syzkaller.Rispx1/370/bus" dev="sda1" ino=16381 res=1 errno=0 [ 542.631550][ T28] audit: type=1804 audit(1595268140.306:156): pid=26011 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir364736473/syzkaller.Rispx1/370/bus" dev="sda1" ino=16381 res=1 errno=0 18:02:20 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x182, r0}, 0x38) 18:02:20 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0xffffffff00000000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:20 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0}, 0x200007b8) read$usbmon(0xffffffffffffffff, 0x0, 0x0) [ 542.920119][T26007] device bond207 entered promiscuous mode [ 542.961090][T26007] 8021q: adding VLAN 0 to HW filter on device bond207 18:02:21 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x1}}, 0x2e) lseek(0xffffffffffffffff, 0x4200, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x8400fffffffb) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0xfffffffffffffe38) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x48}}, 0x4c044) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002400071fa66dd6b6cd7f463705000001", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000000000001d6bda4435c2100b4867437550", @ANYRES32=r5, @ANYBLOB="0000000000000000080000000a000100727376703600000040000200200004000000000000000000000000000000000000000000000000000000000014000200200100000000000000000000000000010400010000000000"], 0x70}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000100)={'syztnl0\x00', r5, 0x29, 0x9, 0x5, 0x5, 0x40, @private2, @dev={0xfe, 0x80, [], 0x35}, 0x7800, 0x40, 0x1b, 0xbbb}}) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:21 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x183, r0}, 0x38) 18:02:21 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 18:02:21 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffb) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xc8, 0x453, 0x20, 0x70bd26, 0x25dfdbff, "03862f3e4974eead5c4b12ef68457c52ffc37ddcc6ddd11e37c49540ca75e4952d50291add04f3e50c189015e940df5aa985f416e16eee97567084d9f9ba2bc68826e6bbfd3bc41c2527cfb1324d1057c6b3b27c254ef6c159e773470aef7e24cecb7b33d08469a328cc94f105f0609be2903d7ef6826e5af33c88f17900ec461cbbb3bdad147b54760db4286919171a3f00012ef6f54b2c125e767c61081aaea0cee55d91589e3ff22988f3b6c4fc4a674cbd5a6b8c", ["", "", "", "", "", "", ""]}, 0xc8}, 0x1, 0x0, 0x0, 0x40048081}, 0x4080) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000080)=""/192, &(0x7f0000000140)=0xc0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r4}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x400, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f00000007c0)={{0x9, 0x5, 0x5, 0x6, '\x00', 0x3}, 0x1, [0x9, 0x598, 0x400, 0xc443763, 0x3, 0x2, 0x6, 0x0, 0x400, 0x7, 0x1, 0x800, 0x7, 0x5, 0x7, 0x100, 0x81, 0x0, 0x1000, 0x5f2b, 0x34d0, 0x4, 0xbfb7, 0x9, 0x1, 0x1, 0x0, 0x4, 0x6, 0x4, 0x3f, 0x7fffffff, 0x467, 0x8, 0xfffffffffffffffa, 0x8001, 0x40, 0x1, 0xff, 0x3, 0x5, 0x2, 0x0, 0x4, 0x4, 0x5, 0x9b2, 0x1b58, 0x3f, 0x4, 0x4, 0x8, 0x8001, 0x16db, 0x8, 0x7fff, 0x4, 0x9, 0xfffffffffffffeff, 0xfff, 0x0, 0x4e, 0xac, 0x40000, 0x6, 0x2, 0x40, 0xa4, 0xa97, 0xffffffff, 0x54, 0x3, 0x7f, 0x401, 0x5, 0xb2, 0x2, 0x0, 0x4, 0xe9e0, 0x97, 0x7fff, 0x3, 0x81, 0x3052, 0xffff, 0x100000001, 0x8, 0x5, 0x8, 0x1000, 0xff, 0xfffffffffffffffd, 0x7ff, 0x0, 0x3, 0x512, 0x80000000, 0x2, 0x100000000, 0x3, 0x388, 0x0, 0x100, 0x6d, 0xfffffffd, 0x1, 0xd7a7, 0x7f, 0x1f, 0x7, 0xfe, 0xfff, 0x4, 0xf01, 0xfffffffffffffffb, 0xa, 0x7, 0x8, 0x0, 0x0, 0x3, 0x6, 0x0, 0x4, 0x4, 0xfc, 0x6]}) 18:02:21 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x10, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 543.530635][T26085] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:02:21 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0, 0x2}, 0x38) 18:02:21 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0, 0x4000}, 0x38) 18:02:21 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e24, 0x48, @private1={0xfc, 0x1, [], 0x1}, 0x9}, {0xa, 0x4e20, 0xaf4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20}, 0xf121, [0x9, 0xffffff01, 0xff, 0x9, 0x1000, 0x0, 0x6, 0x8000]}, 0x5c) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002000071fa66dd6b6cd7f463705000001", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x40, 0x2, [@TCA_RSVP_PINFO={0x20}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_RSVP_CLASSID={0x4}]}}]}, 0x70}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1e0e7f18146fc638}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="ac0000007b94e6e3e6ee47eb4e182208f3ed269c42dff624da56e2c4bd191ce775f020604fa90bdd1a72becb401884c6e903e3ec79dc390f6f0a36533dbc371c3bbb73ccb65d952bfaafc8fca39b43007e509c55b14aaba2348c091970cd0e0bd8f6003263a248e4268fdef645a99bcd6f6e1c7668d56927d098a93a57d44a2fd178c7cb284e76450005533bad3ee998084c2e57b42a3786aa247a12a50f0dfd06c457aa710c20c3aa7ee52f3c97d6697cfe74c691", @ANYRES16=0x0, @ANYBLOB="02002abd7000fadbdf25190000000c000180080003000000000020000180080003000100000014000200766574683000000000000000000000004c0001801400020065727370616e30000000000000000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000200626f6e64300000000000000000000000080003000300000020000180140002006e657464657673696d3000000000000008000100", @ANYRES32=r5, @ANYBLOB="f3d29ed2a2e925bf8b204eef7350a36d079027"], 0xac}, 0x1, 0x0, 0x0, 0x8050}, 0x20000000) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:02:21 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000500)="abbd989a78a516620f2f021313db7a13", 0x10) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r4 = open(0x0, 0x141042, 0x0) read$usbmon(r4, &(0x7f0000000200)=""/247, 0xf7) sendfile(r4, r4, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa4, r6, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2b}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7fffffff}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x4043) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000100)=""/211) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000080)=0x1) [ 543.925643][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 543.925658][ T28] audit: type=1804 audit(1595268141.986:160): pid=26102 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir212127951/syzkaller.ICdwwA/580/bus" dev="sda1" ino=16378 res=1 errno=0 18:02:22 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0, 0x1000000}, 0x38) 18:02:22 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:02:22 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0, 0x2000000}, 0x38) [ 544.271500][T26085] device bond208 entered promiscuous mode [ 544.282686][T26085] 8021q: adding VLAN 0 to HW filter on device bond208 [ 544.294355][T26100] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 18:02:22 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 18:02:22 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000) lseek(0xffffffffffffffff, 0x4200, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8400fffffffb) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000003c00)={0x53, 0xfffffffffffffffc, 0xdb, 0xb6, @scatter={0x3, 0x0, &(0x7f0000003a00)=[{&(0x7f0000000180)=""/84, 0x54}, {&(0x7f0000003880)=""/253, 0xfd}, {&(0x7f0000003980)=""/73, 0x49}]}, &(0x7f0000003a40)="e169b7e400a2d67b2ed1779e412cac6c2b7c4a9f3b66302c7c4f822979df77c3327a0959e061ac2b305be1a5d9ed2c8af8ec018c5b564d7a32653e8b5dbbaceb56824f3116ef2d242eb35ed88c98ea2354e345ee783121db1dbc7a430d77d01623450217ee7a5279e0740a7f648b6461fe2b57d12132be968459cb850f24315a188da0489e46fd5bb391aa4478b497216621df9ef74b2e8f907f033a300cf6689e92942ab84642b3ba072b4b68fc86a5a294aa6d7d0961c06a6e7bdc68dd99d498c479b57c3fec44c1b9c4af26a3cd3d437308509950155550f356", &(0x7f0000003b40)=""/78, 0x8, 0x16, 0x2, &(0x7f0000003bc0)}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffb) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000074c0)={{0x14}, [@NFT_MSG_DELRULE={0x33c0, 0x8, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_RULE_USERDATA={0x59, 0x7, 0x1, 0x0, "a20bd31bbeaa43eff04fb9d3edb17b7169b5634aa21d4fea28485ffb5a2e5ddc917ea8323eae44c8746f48616941d6044fd37f6dab782f1238aca9e403a6fe4ec69292dcfe5462e6e76e0ba4d4d0d5796b190f0ddb"}, @NFTA_RULE_EXPRESSIONS={0x2cf0, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@socket={{0xb, 0x1, 'socket\x00'}, @void}, @range={{0xa, 0x1, 'range\x00'}, @void}, @osf={{0x8, 0x1, 'osf\x00'}, @void}, @hash={{0x9, 0x1, 'hash\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x7}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x7}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xb9}]}}]}, {0x44, 0x1, 0x0, 0x1, [@bitwise={{0xc, 0x1, 'bitwise\x00'}, @void}, @notrack={{0xc, 0x1, 'notrack\x00'}, @void}, @tproxy={{0xb, 0x1, 'tproxy\x00'}, @void}, @nat={{0x8, 0x1, 'nat\x00'}, @void}, @nat={{0x8, 0x1, 'nat\x00'}, @void}, @objref={{0xb, 0x1, 'objref\x00'}, @void}]}, {0x1530, 0x1, 0x0, 0x1, [@reject={{0xb, 0x1, 'reject\x00'}, @void}, @byteorder={{0xe, 0x1, 'byteorder\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xbb}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_OP={0x8}]}}, @match={{0xa, 0x1, 'match\x00'}, @val={0x214, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, '##)\x00'}, @NFTA_MATCH_NAME={0xb, 0x1, '^&[^\x1b$\x00'}, @NFTA_MATCH_NAME={0x5, 0x1, '\x00'}, @NFTA_MATCH_NAME={0x5, 0x1, '\x00'}, @NFTA_MATCH_INFO={0x26, 0x3, "dab3d1cf93e5c30042650d47f4164fef06f41ac5d50296bba046a035b4d4cbd05ec6"}, @NFTA_MATCH_NAME={0xa, 0x1, '-^[%)\x00'}, @NFTA_MATCH_INFO={0xce, 0x3, "fa7b290c906c78a8f0f9cafea5342cfe6cd1387da59a84cad7ea292bb0aab3bcdaf561ccc71eaa7e308199b3afe07cae4239a97b234d448e39baa91e1bc88f950b6a9e8e4b022820144bb6b7436cd578d6523d118178b19d21108cde0ad837aaea5ae041d25fa6514c89ef2dd100d8f4873c152c066fe85e6d9742738fe392b79d1213ecf4cc31e782cd75c12d96aa00d5e641af70d16dfeed07290eb19a22299fbdfd46696726cc7d97b972c651c11415bfd41b42223fc076fc299dc5a396b20671eff9696c256e53cd"}, @NFTA_MATCH_INFO={0xe5, 0x3, "62fa067d0811ae60118df53ef1a9d6bc645fb05947cb1e15a88204671876b26e607eb0d404c40b685a4e88f2e37ce3fad0f8446c47e7736159dbabe779bccb708a0a44dae8a7dbf199bb330ec861fc0e12211ae6b30412cc02f6895c317fd15e5a561bea99bc10eb30e6d4fc08870784fef6a78190bdf5edbb844c9d992f9c27864e4643bab3cd12fc7f37d53352936a6c285c14245d285edc5e656922bb3f7d230f943b154c48473e84b20081b4bf5f6fa9579a426fcf8ce42f36d3568c767f20719d3a01efd2ed6db31fd12c71e861d9b3a1170430a04a5ac9757bc451a38c5d"}]}}, @counter={{0xc, 0x1, 'counter\x00'}, @void}, @match={{0xa, 0x1, 'match\x00'}, @val={0x1280, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3ff}, @NFTA_MATCH_INFO={0x77, 0x3, "3ff577f24cb80fc4708c435289783e7c4d28d5146802eefd5180edfe2dc2359370eb1a03670edb57e57a58f4204db672bd222f35763969e99aa5339a16dcaf35204c86ddc8b042e3f732d6667bade5f8abb83bc0b49afe981c0f56135d02280e0078da1463bd96cffc6733a6292bb5e2a83b83"}, @NFTA_MATCH_NAME={0x24, 0x1, '[##\xfd:%\x96[\'\x00\xd1uS\x96\x8f>4\xdf^\xdf q\r\x1d\xd0.\x0e\xfc\x8e\x04\x9d\t'}, @NFTA_MATCH_INFO={0x64, 0x3, "51003ba5a601aea928ff48058a1614d5771a7385db5b59c0ca79c9d73862e0fd62029818247be786fe08478d4e529ce62181eabf00e83d2a10e739236b623e01e9bfb416c42290b6cdc25ae6a78053fcfb8ee73da6b0aa090e96d9d5c8b56955"}, @NFTA_MATCH_INFO={0x1004, 0x3, "a437792e25e071bab0fdd7c952c440324071dcf9bfc2793d5b1b8c1938ca28af4eba27c21c9210a09774a98cbb2a089efa97b8979a2081a1a8a68f6eb4f469f895fde3a632a0d62f8c31573a0c06d619a145bbdaaa79a9c76bf0133861812aed095a184d4ea9d9ef41f2cbba730e5b70da1f8d82976824af45afd69424daffb9a6b4a3de1b2116596add16baec6803b4a1f0e6569c36aea3a04eba83a1e689447e8a24f5793ed6463f066e6322558b5906c0762af6d161bc96e533d2708e6f75186aacfb609dd441e9e88160f83f99b438dd73ba8d942be881380da7d03002ba9c0a3c0c6770f99eb4d26b56e8112be980b814a920c04fca3b927a1e9d7c78bcfcf3514c1b8bd6496928b4ffc638cf6fc373c45d5e5cb4c746267df73aeffe4121125e49addf93a5ae437c66ccd9e22cdfee05818b920dd5f13a0006f198756c5b45e69e327e89fe3d3e4aaf6f0129b813568a81a45d6d414eb870078e4a79160e19370892b93e1a53af439db19ffe7716de6e814f3da62a702ff0f87ca8a1cc5cf422f59072bf092a9ea4f6e1da4dbddcd6e91a17850ab0fe9e772c979c9d230128cdae06de1aa5d676b5353086df35fcb94bd99077d7f255951acc664a648bd1e0d5d9e78da15e24c98c5dfd257018b09c364520d58ccd5cd3dda4f766fa1539359efe81b777ae317aceb0562c07b1eef8c848d4e54e03ff05d2a7fb8e13d992a9b85dafabd763a0b2aceda479d8d27dc66c1a2454edb746cc2a4d18eab3b7f5c17c0cebacae50ad67a867b63bd83c6b32fa976d1941d1a79803317d91fc73e3adb05f67321260d1ecc9e84497481f766adcc074fa33f353cd5c2be59c54cdf08c85af6115181d3f2581c2cbce7cba87eb13f7ca0bf69935e0c87b68da4e4c323da18b145fdd3e9e1abbac2385479b63148cbc15111368b0b90c59eb4bd3e2babf7d1cbaeeb496e255d884336db53e68bc027828b0a68596e9af16b75b74e88f15069a82696719e5214f8ddac2bb3eaa5f636c410c3ce60dfa5db138fddf17cc547a5266372ef6aa738dca0dfa1b9b05208b3b35305b18fdecfe7097e070853c12ee4287aa2c8d0a6e69f5fc87e81a9a08d3ae2f10676d49d4851d7b14eef03c29c2ccb8f895d79fc72c238db19eeb94697c09a017942f89bb0f7998b8f67446a83f620867b8f5a313eeeb43a87a7d2cf757d120b7fc4df34c0b6664bc544513c7b6f74b4a449d1c08cd2263b40c1841b5eae30b16dc5e44bc1dbcb2ca0f9ecce635c0d65db0a5dcb24795554b062e3a37be2c1d2135ce799f21ad4598f1a3e04ab3be3b9f0f51a7fb687c5a1504e7394540217a2730034f525c66ceac83c458a0c4953166cafa34d98760b6b5d38ac7fe9656d72994d748d51acc367b8e1732cc54f3df01166685b2f13f8c85bbbbeeb66e92d770e72d9522a02567aa1d1cc4d3cf921a4fd6318fb2222ff676156c3f88eb7eb95e9c8122243acf3f6012bafa70e2bb3bd06f8c37d6328343ec2c9f8c736fe2a244c6f2aa7d6c248a87c7d7213368fdc118c6c6aa576b66a5a06ae46d0ff01348576ab7fb76baea7a56820d26e555067cf81a9c009f39b0e03c8fd10b7fe2da4c39018a694755e50c176c02dabdc1d690ba668ac6ed24d3f78b067ad0c77ea2d9172f583de0e3c42652bfe9dbeb97265f308207bb428765458eb8680dbd0a28b96f92631e03264d19afe2f474bef5a23792456f29d01528354b660baf6b978fa028ffffdafc55ef3a050106c86989aab5b46832f104823e517e17f12bbe896a05f36ac61f920bdd8a5f68767b6cd229808b07c9826da7d3931ce986d9c64bf742c0d56c1b3ec9d98b6a5fa58246226ee7207881a372b11591fb9fbd195edd24c878b77c8695876a802204f8f307c5d519d13b71653848791fa522cdf8ad6e9d2e1c30c3b3a9c702461525a7f65b5178bd74e47425656bb67162701d15fa938417e465647185bdb5c4cf2dcbfbce4c9ad3e110a152966ae296ab02016b56c762ed25e9ef45d666bc8ced004d230f298609920dd36b2bcc266ca1cfebe133bcb8dd5c7d7553c7a9eb2299d3cb2fc4b45572fd0daf6ceb268a0225c824aa5ea201b813f18a2c468cc8f244e933f1e42b6ded51cedcb12192ab3b41343c3e8795a7cceb83e1d212b1c8d64321f83cdf7dc409154411c1880e66f28f46a1bbbc8e4d50b18e561cdfd4768017e141269e5b7d5e0cba0946a39f808f5ef527a3189cf9987bf7c057be3ee8912012d28a6e51bd26dede3d2f78d413f03cdef3ae61999c4501fed094055daf243dc1e7a0c73f88ed044ebf75d5d8be795c82652fe2d90bd75af607985f35ab17831c6b8df8b6cf5586709d3aa30800a2f06eb93e6ab1eedf99d3ba1fbfbbf5695e832434d453887ab3eb9447b03c0c5cf7d16d5d142271dd744909492515467defaef6d0363938b0f8f97e158c778a28b16adf4b129f008f748876f6c1d133a16f28a2e16b3533bb1f9db87750198353f8bfbafb6f8705851ca90bbd95e6b9fdfa2b0f27d6adf5d74ef23f235a77f7568fab2fb5460736349c796315e8d62816d584bb60b05ec5e09621b727320709c1e72291acbe2dfca65e0c95069c92da859165bd902dc352ae00aee9c5dafc9066a9123e9014d857b090a4fecf3a555f7259b25960818a1a284dcb813d3bd8f0cc0dc39aadebbf8248c27069fe3faf6329d80104ab5250c02b4fdc99794a75c7a6b64136c96b1d7e480d03f732c10d8923a6e862c1043fcbc01a0a38f36739da9a8c2b7bd1a27181a4aa779e3d0fb28322829ec7c8af8ce0e6c2e86e6eb5db86a9ee0cc4f064bb501d165c6a04d2413b59557c65ae97ad72e29f15db0d61a468dea47094f8a9ce2358a50fe28ede0da6705346e2ca25f6919893f0153789bb535acce60d43e48e8a5155c44507cd4699902a5adbf36a9c7a34414be54f3b72d94edef92e1a03b117d9d2204dfeb3faf94eab1b1475d82c1a4e743abdb69847ce1bb9cda34426d48f3d32e180fb76a2d3d488a14e1d0ed9e26cf5a16687dda047eeb9fb6e15eecedbcbb6a3e86012b15808ad4eea3909681d8f02ccb70c9dbf3ec21effa41d484ce83c23103458b83206e7b888cba41b28435d274a326f07d4fec6019a97c35aa085cdbeea9e3d50165d175c73cb43102b5f86f26aed7415cd2bdfa4e8ceaaa2ba643bdcc980cea360f30ac65a9abda73411d78db4970d0dd3e32bc80fbbd05f868d0bb55a359ac9560dc661c8a5684c3148d644395693cbea6a9d42c1a3f6ed97d405e19c393a4ccf394209c2b6437c1d3f834ad3d9d17e576e4afa0aa6ee926b2beebdb841a6206e14487680db9a4f366d36778a989e18374df20d651684fddeb137f87ff7529d5144c847c9f579f21bacde2f7105da736df96280b8579425450d7ee558b64e5e06b61c72745b1f74b3af72ec6eca1a681b723f2a3efba866060e7b9b97d2539f7745cf28dc8fd2e19bfae9ea0dd50e544899aff9f719e07d73d8d30125196dc4664757795bfa184e75c8d2994028da1641e36adbf721b702937322f65c682c2379f704e0a99420fa63e6b3177643cb436b07aa4cfc2405da257c1eda84e6591b96f68a142ad0bf0f2b46a716ee4d9cd3a3f09af2dd9a48daced6f34ee37766464f0ced3c0a8a5283cd7d97ed4f0bef16d379284fceb31bffcd3a56dfb5d8ac13bab0c4c760b83d9c054dcb0498c5a24a884cb9b90b798468728f12455a1976acbea8a139f02f3c7a8e7644270db6810ef0ac11ae540cd9087d6d01a27578d2210cfe23bd5cacc2309f794ecacaa7f2c137549516a08e5fd18b8d81923a6c7e14626a1e5a3eb4d3d4805483b6594e6b9a6d93ff9dcb21b6a670d82cca6b084cb1281d2251471427b95fe0cd7568adf70d0c550152e871e8e72a407f7681a13a8b6f4991b9c6302b20202276eeae6906ec613c160385c6dc6ce39f0ac44ccefcfe4a52c03318a1402e1d82a3690df3ed2e195df824abee2b6095f80592b52c9db331bb4c0ebe20ab733954c95d3b578c34722eb1d50ab42c0ce70859616e1eaf4f09de3f82e98b5a5010a4c70a77c2e57ff7e679d4833018c42911032539328ff8584eae825e73c5b5b049d34b9cede560165cea63dce61cd34f9357e1614703504833b5d3659889f64800b8d57c47f7298f57f92d634a3e2d5c8e37070b71c860d580ca15f13ade963ec1040b2ad884b56255778371c2b2b286b84c02aeacecbcde35dac9924513d1534f089ed0467cbaaa8b9ddaa9dc3a6dc6dec5262cb70bfdc429c776ae07e69c969c2ded409b0956feae74cfb46e96322f9cbd0ec101087d313064f29357a77867cd8a17995a234498f94bb74cf81eb307f184c9827ab8547571d6541fc43da028679145ba8f42df979c97443075233ee75b4b25c6677b062b760f5b6a2baf90f39b20cfa439611a57b32a3ca6ef6580cc2e7f4cf1d0de7c7581fba4a44340430ad027f272d60632e9f3408c1ca64d938ca397b6c20233346d0498f4ed2f6aea50e681a7ed505dd7c970828387819756319fdf6dad295ab1da541f59e5a1e6447b2792cfcdaebc50ac8f39d58e75a3502551075f25a184435e048e67b3ad3d4128cbdf59b92fbadc69efe42ed66c4e903e55f27d16a26788b8cd49f9866b0dd9e715a890ce1e784352593f68050ed9712a172f675abfb06cc01c09b28488431786b252175d2d9c761031ce30144afe18519498f620e60b4b62ba4b93cc74b17e93d466ed777a88c5a977c3bec508ab67e1a8dd12e7f51ab12928565d745c9543605d4af98fcc54dc43417a94214798932ffd5f6c9ea038ab6d17e642dde71d830370978d40defef7d96da6a693d0a3d63b1062dd1e108938ee3602ffadc71a87e85501d20e4f36a6621fdaa3a81a3c51f3aa47efc59ca067b509f26c0fe2d1a7fbf9aa573092a852985428a28afd650f557f4ccc025ca7159f5b119849542b5399f99da34c0b019b9f48676b4ed0808cd480ac40a1bd8003101ec349c75f639791f72a6fc40eccf7e0b1fbac43c59969681e1cb402967e4ec31c6f30a3e3a418332e235a40df7412c138a07b75373ac9cfd3b501c349ea7aabebfa6076281b52685932683c9ca0b6d7ff95f47006e1785c59fb93a482784cee70ee72c6aca441030f961eaef04c19609df80bcb0a8ec5df1e6c0cfb9749850da7340eecc9bfff60ba14f9c7c1e5d0a5b8ce333bfc9a2474883a1a07f9327468afc1c66ad071cb3ecd561d6c61f020d4857a3274d00601e2337bc73a8956611c727a44ce58aa2fed1479eb2926b7f71be045995b75639ed67b459b270e0e1ed493f8cde5cb4170e07d71bfa2098f9108e0e72d3f97e8b7f730b060a6803f6fa0373d559ab8bbd17256279a91fe944a7392a24bca5eb694367164d8981fc0a74b000be14e2a0a1591faede962bee72bddfdf2fda54634ca693b8d49fbc422d3174fa05328b2786394ae2d6e317d26536a901ad0cdc4b95aa75ad7490ba425598420f91c5f7de0c88e04eac9b21cc6caa62dd9f3809f1ece593277f0dd5f5c0c356a507c930f2214773235c939970d5ab6dbd84858ebe21093f8b034e0d30d478af04c9aa8ec7a2ef9db75b19590bedbeb2c6e87ce163753731ce03d12871219482ae2ee8e0a14665f2d2d0a938e6699a396079c8b66ebda2c4d81178c62d2240e0223238178f8660e6e0886792506e88b7a3a8b9d88a17d81435a8fcf2c417dc70adf94f5591ed00df803beafdc26a28e7adae670d60aaf7bb945ed3631664a5366feb22d9c"}, @NFTA_MATCH_INFO={0x99, 0x3, "6b407158fb73a296dfb43a5f94dec6f0460ad48687ee963c52d19acdc406deda54fd60c21b7ebbee24a93e4de341efce2cb18136722edae130305c4a51d1ca9c57d79c050b7fcc3de2f9e748e6abb9ec60316a89e7155e7cd725b751fd7c8cb7d052711e45d5e5c5b4ced8f2e82c34f8132312b946b13c4e71743d4b69c560edd1808ae44720e4bca18965d788f46e19340edcac4c"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0xdf}, @NFTA_MATCH_INFO={0xbb, 0x3, "4035aef91ccff385cb3929a2dd147341d7a5f3664a654b95414749d9723277dddd355e1f1c9d6cef4989107fac996f984d40a55c0f54e04ad760c6f0c04d1503423d5465fb5b010489c03d48063e431409bfa93e1b05f7c3f5a56f14ee28812b99005927903adc2dd37befa3795e45ecf341886220241adc059d68f9d59bdc676e1cd5d33a8891fe7466845b936c00f959d455a7e07bb1a30bdb80cdc0fcf4c9157aa440e6c593bbb6aa62bb177ee70616611b67ec0e78"}, @NFTA_MATCH_NAME={0x5, 0x1, '\x00'}, @NFTA_MATCH_NAME={0x6, 0x1, '^\x00'}]}}, @fwd={{0x8, 0x1, 'fwd\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x1c}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x17}]}}]}, {0xb8, 0x1, 0x0, 0x1, [@redir={{0xa, 0x1, 'redir\x00'}, @void}, @osf={{0x8, 0x1, 'osf\x00'}, @void}, @exthdr={{0xb, 0x1, 'exthdr\x00'}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x94}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb5}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x40}]}}, @hash={{0x9, 0x1, 'hash\x00'}, @void}, @lookup={{0xb, 0x1, 'lookup\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x8}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}}, @dup={{0x8, 0x1, 'dup\x00'}, @void}, @queue={{0xa, 0x1, 'queue\x00'}, @void}]}, {0x80, 0x1, 0x0, 0x1, [@tunnel={{0xb, 0x1, 'tunnel\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x1a}]}}, @cmp={{0x8, 0x1, 'cmp\x00'}, @void}, @dup_ipv4={{0x8, 0x1, 'dup\x00'}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}]}}]}, {0xf0, 0x1, 0x0, 0x1, [@dup_ipv4={{0x8, 0x1, 'dup\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_ADDR={0x8}]}}, @match={{0xa, 0x1, 'match\x00'}, @void}, @socket={{0xb, 0x1, 'socket\x00'}, @void}, @match={{0xa, 0x1, 'match\x00'}, @void}, @byteorder={{0xe, 0x1, 'byteorder\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x59}]}}, @dup_ipv6={{0x8, 0x1, 'dup\x00'}, @val={0x4}}, @osf={{0x8, 0x1, 'osf\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}]}}, @ct={{0x7, 0x1, 'ct\x00'}, @void}, @byteorder={{0xe, 0x1, 'byteorder\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xca}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x61}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x8e}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}]}}, @reject={{0xb, 0x1, 'reject\x00'}, @void}]}, {0x50, 0x1, 0x0, 0x1, [@hash={{0x9, 0x1, 'hash\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_HASH_SREG={0x8}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x26}]}}, @fwd={{0x8, 0x1, 'fwd\x00'}, @void}, @osf={{0x8, 0x1, 'osf\x00'}, @void}, @match={{0xa, 0x1, 'match\x00'}, @void}]}, {0x14ac, 0x1, 0x0, 0x1, [@reject={{0xb, 0x1, 'reject\x00'}, @void}, @range={{0xa, 0x1, 'range\x00'}, @val={0x1470, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0x113c, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x26, 0x1, "dbaaf47ada5da45243e4ed5783da20aa2ebd29d3051a9dc3e593634700c5ce0ac931"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x6f, 0x1, "228afd17dfb13f12d7d62253f7fdd721afd1ec3061b8aae33355f33967439fc039cf4266f244e4a4692a56aec698fe9ed3a19dff03f3393298bc0878ef6f186706d6e85533eaed57c573ef50e827fe656aef0ce8b52d5d04305b5197619f1301a7fea8e9ba928cc9bd1f66"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_RANGE_FROM_DATA={0x318, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xf7, 0x1, "523ab08231fefd1e9a45ce2517ab982b5008e9f6048d3c7ea1d891c74b29fb74f4d2b1001791052ae9a990d35a9513f26ab8178ede57563f893e0a383ef3b23de17ff3e1a5e62940d4e2b931cc1d2f468f11fa0724d31aebfc6cd90a2ece1b4497627f27170100b779286755d314d0d99308786812b811758df4f5cb04e14480631abc1f39cd4f5a45217e2feb065c9d26aa93e5ff492f4cf844c7c354c621ea9ead396bc968e78666c4e8faf67b216197a4b0841d7898f3bce0bef9537621388ffdd2c7f378e3b501198fbab68acb55300725273c91158285db55748028840213c367d3abe806f828331aa468c9f301add3c6"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x6e, 0x1, "4974822e801277577b5aa91c5810c8fc770cff7d7e59aed104c95039badc6ee0386ac8ad26655f12c15e6b15aa38c1e1257b11e5e955b72acac14d58af1b2c79aee026ec66fe8739d016e2a5e9e991b0aaa8ef0d38f1fdf410d149d696fed471a2de23e681bd2a729088"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x36, 0x1, "a8d0974d0a62bd9327c11bfc60168e888f7a6ec27fd58eff02ddfc1e59d5ba407388a59e23bf08c658fbaa56dabb2c266fe1"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}, @synproxy={{0xd, 0x1, 'synproxy\x00'}, @val={0x4}}, @lookup={{0xb, 0x1, 'lookup\x00'}, @void}]}]}, @NFTA_RULE_EXPRESSIONS={0x63c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@tproxy={{0xb, 0x1, 'tproxy\x00'}, @void}, @reject={{0xb, 0x1, 'reject\x00'}, @void}, @redir={{0xa, 0x1, 'redir\x00'}, @void}, @masq={{0x9, 0x1, 'masq\x00'}, @void}]}, {0x9c, 0x1, 0x0, 0x1, [@xfrm={{0x9, 0x1, 'xfrm\x00'}, @void}, @connlimit={{0xe, 0x1, 'connlimit\x00'}, @void}, @objref={{0xb, 0x1, 'objref\x00'}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz1\x00'}]}}, @rt={{0x7, 0x1, 'rt\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}, @counter={{0xc, 0x1, 'counter\x00'}, @void}, @bitwise={{0xc, 0x1, 'bitwise\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}]}, {0x24, 0x1, 0x0, 0x1, [@rt={{0x7, 0x1, 'rt\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}, @meta={{0x9, 0x1, 'meta\x00'}, @void}]}, {0x2c, 0x1, 0x0, 0x1, [@target={{0xb, 0x1, 'target\x00'}, @void}, @byteorder={{0xe, 0x1, 'byteorder\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}]}, {0x84, 0x1, 0x0, 0x1, [@masq={{0x9, 0x1, 'masq\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x10}]}}, @byteorder={{0xe, 0x1, 'byteorder\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xa9}]}}, @dup={{0x8, 0x1, 'dup\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}]}}, @dup={{0x8, 0x1, 'dup\x00'}, @void}]}, {0x70, 0x1, 0x0, 0x1, [@flow_offload={{0x11, 0x1, 'flow_offload\x00'}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}]}, {0x30, 0x1, 0x0, 0x1, [@exthdr={{0xb, 0x1, 'exthdr\x00'}, @void}, @xfrm={{0x9, 0x1, 'xfrm\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}]}, {0x100, 0x1, 0x0, 0x1, [@cmp={{0x8, 0x1, 'cmp\x00'}, @void}, @counter={{0xc, 0x1, 'counter\x00'}, @void}, @exthdr={{0xb, 0x1, 'exthdr\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x25}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x5e}]}}, @lookup={{0xb, 0x1, 'lookup\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}]}}, @numgen={{0xb, 0x1, 'numgen\x00'}, @void}, @connlimit={{0xe, 0x1, 'connlimit\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xffff}]}}, @nat={{0x8, 0x1, 'nat\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x10}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x16}]}}, @counter={{0xc, 0x1, 'counter\x00'}, @void}, @tunnel={{0xb, 0x1, 'tunnel\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x41239402139c66dd}, @NFTA_TUNNEL_DREG={0x8}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}]}, {0x2f4, 0x1, 0x0, 0x1, [@numgen={{0xb, 0x1, 'numgen\x00'}, @void}, @bitwise={{0xc, 0x1, 'bitwise\x00'}, @val={0x2c0, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_BITWISE_XOR={0x2ac, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xe8, 0x1, "b0798c04055bbf950d8d25c4c6b8451dec2047a86b463ec1f90a53074950900875f7d000b8447f10c3a4329f2f51b3a7e118ccbed24f35806f3c718845dc881ae23b6f4e88cd19ecb475473c5dd6cef9f423b214129708a07450307c5708e8dc2c4fd4cb48be715de1aa8924e57d0ce3d29cfdecf370fb4a3795718bb0d95c949f376b6b5206557529ceadec068c9e50d1f320ff2567388045e46fe71a3cf35ad41a4487304b6948e0fd6eabeea004b5fd96ccce8c5b2844bb37d983fa93cfda12dbeaa0afa0ab31e9265085ef19e961d8cd28d7fb7f24449ab2abd55c2041c4ef42b4ba"}, @NFTA_DATA_VALUE={0x10, 0x1, "742bce02f878b45b9cc1213f"}, @NFTA_DATA_VALUE={0xe0, 0x1, "870c08eeaef36d44aff61cc43e84e9249df4113e09df2cebdd91f3aab962716ab23fea67f909dcc2ec78be0ed71d50551f38cae381556cdb7f1dd0e371c1d089715083713d66729843e17366db87c911d0e422867596cc1a930181b10e1a9727da5421fd8885a2b54f42a3ff0813e3c4a70f4f2a8fe6570016b1baf802833e339263876da33d0a79c95c4e951ecf59eb402c1848d860f12f1b79aa23b36c41b63d9fdcb3a622e77684b3b512c4bb875762708b58772f45ff47001e4d63ed3d31de2a36d22abf91f052d59fc8f90d9069ac1278c4fabcc26c9442db7a"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}, @socket={{0xb, 0x1, 'socket\x00'}, @void}, @quota={{0xa, 0x1, 'quota\x00'}, @void}]}]}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x809b}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}, @NFT_MSG_DELSET={0x28, 0xb, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x6}]}, @NFT_MSG_DELOBJ={0x60, 0x14, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0xe8, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7fc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x100}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8687}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000000}]}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xbd19}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x81}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x917}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_DELOBJ={0x2c, 0x14, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSET={0x11c, 0xb, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1d}, @NFTA_SET_USERDATA={0xee, 0xd, 0x1, 0x0, "363ec3ed905a359285317fd1579bd9f7012e6f6256faffe95a4a7d8b1ea4d7399065ef0acae45d84cfe48c63d6d00fa5960540d9558047a59d7c95c46cc559deab5f44767cb3b411cb6d92876ce5c71d7b2873aeee89d6d54124d36a102ad2df42e7cc0384f10f19c9f89d0d446a6d8a3245070da2c956d87813df0d6b69fc208cdb597b89c8ce195d36e69118e78f15f6bf4e749db2c342c754f74e4d155896dd2865270141504a311d1ae9007f53f2c948cb3043422635b7a88216343c1597b19c21ab0d95dda1ec00c0262616d93e35208fc13f3534499819f7acf1edede05bad7dc30b0b5ff2b623"}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xb52e}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}]}, @NFT_MSG_DELFLOWTABLE={0x180, 0x18, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x110, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'geneve0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'veth0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0\x00'}]}]}]}], {0x14}}, 0x3820}, 0x1, 0x0, 0x0, 0xca895}, 0x4004000) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:22 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000) lseek(0xffffffffffffffff, 0x4200, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x8400fffffffb) r3 = accept4$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000300)=0x1c, 0x80000) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000340)={'mangle\x00', 0x21, "d8a083a9fb2fc9827923fd4a68f2c4e105436212df9fb800b12a72f4b5d1af7845"}, &(0x7f00000003c0)=0x45) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r4, 0x42b, 0x0, 0x0, {{}, {}, {0x10, 0x17, {0x0, 0x0, @l2={'ib'}}}}}, 0x2c}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x300, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x20040840) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r6 = open(0x0, 0x141042, 0x0) read$usbmon(r6, &(0x7f0000000200)=""/247, 0xf7) sendfile(r6, r6, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 544.459417][T26116] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 18:02:22 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0, 0x40000000}, 0x38) 18:02:22 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendto(r2, &(0x7f00000000c0)="85d1ed72e8e22c54b301667fb48b4ddea73b7bdca9332c7882251f490aafb5edd5032aa4273fb749d9364d3f466024d55e847cf8528e4a2214f3dbe4a8e6bcdc7432b29072c56ba031ed32592c4904d57b91f89e01dc64f4bf5f115d7205b64ba0d41e1cb645ea13c744970ec2a53458fdc60abd433ab7d58f1f9a6a68c8b83e7c5b65b7defe2f7c6e150dcbd326480ba1b1e5de88124e692a70e2e782c2b89d2969eb4db185c2d767d52c00a84e6be1a7934b87e96a3bc6c3b63dd646869e359d293232667f4bbf7c29cb0650b1b9f522b9fa2ad3281ca4360df4c0511a64e26c573f290fe199606b63445b9dae9e0d2d689182397e0c30bc", 0xf9, 0x0, &(0x7f0000000300)=@rc={0x1f, @none, 0x9}, 0x80) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r2, 0x80304d65, &(0x7f0000000080)) r3 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x2, r3, 0x4004) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x492492492492805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r4, 0x1, 0x10}, 0xc) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000001c0)={r4, 0xc8f6}, 0x8) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) [ 544.610285][ T28] audit: type=1804 audit(1595268142.676:161): pid=26157 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/424/bus" dev="sda1" ino=16373 res=1 errno=0 [ 544.662199][T26158] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:02:23 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0, 0x1000000000000}, 0x38) 18:02:23 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0, 0x100000000000000}, 0x38) 18:02:23 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffb) ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f00000001c0)={&(0x7f0000000080), &(0x7f00000000c0)=""/228, 0xe4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000300), &(0x7f0000000380)=0x68) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:02:23 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0, 0x200000000000000}, 0x38) 18:02:23 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x2000000, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x8}, {0xe, 0x2}, {0xe}}, [@TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380004000000071fa66dd6b6cd7f463705000001", @ANYRES16=r0, @ANYBLOB="00000000ffffffff000000000900010068665b630000000008023e38ae"], 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newqdisc={0x78, 0x24, 0x20, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xb}, {0xffff, 0xffeb}, {0xb, 0x7}}, [@qdisc_kind_options=@q_ingress={0xc, 0x1, 'ingress\x00'}, @qdisc_kind_options=@q_pie={{0x8, 0x1, 'pie\x00'}, {0x1c, 0x2, [@TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}, @TCA_PIE_ECN={0x8, 0x6, 0x1}, @TCA_PIE_LIMIT={0x8, 0x2, 0x7}]}}, @qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, [], 0xe3, 0x33, 0x4, 0xfffff1b7}}}}]}, 0x78}}, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0x9, 0x20, 0x7fff, 0x4, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7800, 0xe0, 0x7, 0xe0f}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) [ 545.171632][ T28] audit: type=1804 audit(1595268143.236:162): pid=26186 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir364736473/syzkaller.Rispx1/374/bus" dev="sda1" ino=16381 res=1 errno=0 18:02:23 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0, 0x4000000000000000}, 0x38) [ 545.352892][ T28] audit: type=1804 audit(1595268143.286:163): pid=26157 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/424/bus" dev="sda1" ino=16373 res=1 errno=0 18:02:23 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffb) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f0000000080)) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 545.448327][T26158] device bond209 entered promiscuous mode [ 545.481476][T26158] 8021q: adding VLAN 0 to HW filter on device bond209 [ 545.533938][ T28] audit: type=1804 audit(1595268143.286:164): pid=26157 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/424/bus" dev="sda1" ino=16373 res=1 errno=0 [ 545.534382][T26159] tipc: Enabling of bearer rejected, illegal name 18:02:23 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 18:02:23 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0, 0x8000000000000000}, 0x38) [ 545.740578][T26204] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 545.808629][ T28] audit: type=1804 audit(1595268143.876:165): pid=26197 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir364736473/syzkaller.Rispx1/374/bus" dev="sda1" ino=16381 res=1 errno=0 18:02:24 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x54, r4, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0xd4, r4, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x5b}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xcb6}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4041}, 0x4000) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffb) ioctl$FIGETBSZ(r6, 0x2, &(0x7f0000000080)) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 545.876606][T26242] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 545.940361][T26244] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:02:24 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0, 0x0, 0x2}, 0x38) [ 545.968465][ T28] audit: type=1804 audit(1595268144.036:166): pid=26236 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/425/bus" dev="sda1" ino=16373 res=1 errno=0 [ 546.050374][ T28] audit: type=1804 audit(1595268144.106:167): pid=26246 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir614119965/syzkaller.KZ2c1p/395/bus" dev="sda1" ino=16365 res=1 errno=0 18:02:24 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000) lseek(0xffffffffffffffff, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x8400fffffffb) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x492492492492805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000000)={r5, 0x1, 0x10}, 0xc) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000080)={r5, @in={{0x2, 0x4e24, @remote}}}, 0x84) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:02:24 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:24 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) read$usbmon(r3, &(0x7f0000000200)=""/247, 0xf7) sendfile(r3, r3, 0x0, 0x8080ffffff7e) getsockopt$IP_SET_OP_GET_BYNAME(r3, 0x1, 0x53, &(0x7f0000000080)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000100)=0x28) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:24 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x18, 0xe, 0x106, &(0x7f00000007c0)="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"}) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r2}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) [ 546.290920][ T28] audit: type=1804 audit(1595268144.166:168): pid=26250 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir614119965/syzkaller.KZ2c1p/395/bus" dev="sda1" ino=16365 res=1 errno=0 18:02:24 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=""/205, 0xcd) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x49c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffb) sendto$l2tp(r2, &(0x7f0000000300)="0a6a0cc8c9b22f49ef0ddd02921cab4b09fbe8a9437b09fd0645d8acbd0f4d7e2cfb96e5ad7112324488c72b83b0d1f3d7f2bcc95457e6157ada63a6fa7b2982432f64e00c93263ac6ac17045d17486d3cdeddfcfef33d270ecd831ad2c5f6ec221fbc2c2d4a8f9f884d8910eab83570b38e4ea2fe1b27426e8ddc7a66470462906c9cf7a0ee62bc920ceb0b7606083be861c1a7292a2d53fd089c29509e05f89d20cfa317a6b7b7b3a30b7e218a4bbb", 0xb0, 0x4000, &(0x7f00000003c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) ioctl$SNAPSHOT_POWER_OFF(0xffffffffffffffff, 0x3310) [ 546.767010][T26244] device bond210 entered promiscuous mode [ 546.817143][T26244] 8021q: adding VLAN 0 to HW filter on device bond210 [ 546.943604][ T28] audit: type=1804 audit(1595268145.006:169): pid=26302 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/427/bus" dev="sda1" ino=16375 res=1 errno=0 18:02:25 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0, 0x0, 0x4000}, 0x38) 18:02:25 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0xbf8b8b6432b5caae, 0x14) sendfile(r2, r3, 0x0, 0x8400fffffffb) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000500)={0x1, 0x400, 0x0, 0x1}) read$dsp(0xffffffffffffffff, &(0x7f0000000440)=""/12, 0xc) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r4 = open(0x0, 0x141042, 0x0) read$usbmon(r4, &(0x7f0000000200)=""/247, 0xf7) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0xe0800, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f00000004c0)={0x5, 0x0, 0x0, "2387281ed28052f35ce1006702a7d8c08a2cb7eb3062445c2d1cd9bd7763adec", 0x31384142}) syz_mount_image$ceph(&(0x7f0000000540)='ceph\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffffffffc03, 0x4, &(0x7f0000000380)=[{&(0x7f0000000580)="7e3f020fd28557efda4e9875564fb50000586dcdb9a49da6ed1957f88d8ea1b8214e62cc316a00"/53, 0x35, 0x80000001}, {&(0x7f0000000180)="8c7887732fd9247d6e4f884c10fa93f060a7381ee303e97e55c5d6969275b4c8b8884bfe976ee01338454844ede886ca29649fb12941521ac75cc1f561806f28c0c616619d2b6faeb26a3622d8de71dc6d623ef967d2fe279a14932eedc91190b298bbb43ea02ecbc7799f7b42f732", 0x6f, 0x1}, {&(0x7f0000000300)="49451d0100350195f3958fc2f1faa0b22dc9ffb251e5ba80fa39", 0x1a, 0xe022}, {&(0x7f0000000340)="bfc404be77f51b6368e6708aba932be840f5df77f83404dec5149715362f6aeb7c03b2c8e3827bf5eabfe27549f0bd011726d2257908b6ddd8680d6e66", 0x3d, 0x200}], 0x2000002, &(0x7f0000000400)='\x00') sendfile(r4, r4, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0xd01c5, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_config_ext={0xa00000000, 0x400}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000003280)=[{{&(0x7f00000005c0)=@in6={0xa, 0x4e22, 0x9, @ipv4={[], [], @private=0xa010100}, 0x2}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000640)="97461b06c1bfc645a22887a613bab82cd3095a543a3eb6a287e478c5eb1edc4cc177b22fa2297f798e660df3af5d46490eee4a66e1630f0440e9fb487debaca962378b4cc74c94076a62542ff94d865d9d2a83b35a91826b101475db8f2f41d0020bcc6624a4be1f1478363546d89c8a3445968d8088357cb7fda7791e4dd3301ea78e649ef8374277cf54f742b3dc18063fa035224246c460d79b8d1daa732398620e8d91bc4b135c46b1b938977d1895c0bb925984763312f4ccd5d011c23b2eefc71d8c1a3ca025655540d97b", 0xce}, {&(0x7f0000003340)="c4dfbc3aba20214013505459b6be4a35e5d628a4e0183a4c64db25f6b69fa090af69f02675dc59084705b03ca616024e282d3803f4adaa2ca2d392052893064667d7fc8982cce745ef0aa0861cc9d13a87a57399e997c08c342a3d405f142954ea781756c92ce07d26a8393c4359e3b5c5673ab00dfeedccd5d3e57989eb91715114132d3702ebf9227fb7b152ebe29369ebd2f0f25d0b19bc6a2acf8b2837f188ed730a9c3e871ae83f0acaed8ce832559d608d0d9a97", 0x40}, {&(0x7f0000000740)="fb7cdc445ed76cbc3e3738c1ddc92818c33a0434e22e20d60d640ac3c20e3ed1a5bd65ead41664b1c021e8a3f1455dbefcfaf751c937551a03cde94bef79d4ff291f6de6d517d195ef301ab27fb173b056b0c28dc9b2caf5e5b4d6ae49a254019a8314cf3fdf7c3783a8a5cdf5ed848112a834ecfbbdf3d78f3b65d2f10bf13ffa62f9659b9c05fd609f2917f2d2f6dc9bf90d2ae17ec0c99abca9f672b79a720be9647a46282858eec026597b5ba8c49be92d09f62545b7361918", 0xbb}, {&(0x7f0000000800)="6a7afdc16eeda1e78c9ed3dedca5ce02fa2be3dc0030f0b89f2e37db9cc3715cf49abb2bf2d2f1ef8a6e0b171805cd080a8ea6fa56aff1c1e38c3d8e4625ed8927a78b31c57c793f1a1728d2598c102fba066b83fb75a49e96311b5199d503d9b722e762b96e49e59dae57dc7366385553b346f31fd430f92653dc930dcc73fb2c79ad2fc4ec39c09151", 0x8a}, {&(0x7f00000008c0)="81910a7f95beef64100e5cbee54fa85cedbbda06aeee0c5349714177b614c1009725fbd2f72b19fda3354cd32c94caf2b3bb3f5466e522ac75d6f70571c33be4c80a7c57b88b8e6a64c8efccfe4ae7fdc6417686506d1d651e3e57594ff9dc8dac023e1dbe17ca0878f27c5d6e318a4a5a9f12e8284dd065e5069e9e63050949360c75ee08723504e6bcf5dece51b0f6e2e56f381d6d2aa160078b45", 0x9c}, {&(0x7f0000000980)="fe35257fe98656073e4e19a3a8c206882faec6889b63121c2d68a4bd96b39effca7514b4a7b3c2c8d1ebe1cf80f492f1769951efecf4c08ba43c89f4f2efe8da9ccebada025b02ff9c05d2240b9464f77c0416a14679292344281b36a963f9f3965bf4a0342f6d5adaf18e0c52977a21dce233d0c57a129b34c3e77b19fc1c88693ab6e4f2cae9f34036789218841a1e84c2a564cd77b49003d1ba9afe934e7c6de3f919fe5160dd7476ac", 0xf7}, {&(0x7f0000000a40)="3fad86d341df7c81d7", 0x9}, {&(0x7f0000000a80)="7b9a84bb2e64997d78b526dc012fab2ed0094d3f04cf8ad64f5640b8412c9947586fb3e117d6573f482394fad081bd60a2fa762e9f6bdc3a42fdb4e86b6c9b9f", 0x40}, {&(0x7f0000000ac0)="3f6e7ac7e9b5db4bd3167b5482dfc755e07983a170ecbff2f46fba82847641fc97832ce2ab096e4c374c3f26248ee975cdcdb665b1ff7f2fa57531b572d26d6d53d36f97459c4b1ad0d1c1bc95f429232aca849e0d2aaf74be87f4d18ef55d9316ac7dfc4a0d202fec7480d336e9ffc2e7f1401883e41c48c06132d65330a9247b6ad3aeec12edd731fe0d11d8627dac344eb55d6d146d06d92da261891b164070618e85bd18f817146bd36534cbe0edda275b49e0df2592ab8124c9ad363e7d9edfdb2e18dec1743a703c08829d397fd4648a5255577f6415e854781d6f47bf61000466afd1214e6bd13ecfcf942b9c47ab", 0xf2}, {&(0x7f0000000bc0)="7f9d897a1d7df79458a86c39698434e7b699b6", 0x13}], 0xa, &(0x7f0000003400)=ANY=[@ANYBLOB="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"], 0x50}}, {{&(0x7f0000000d40)=@rc={0x1f, @none, 0x6}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000dc0)="fcd5c8b9c38d1335cac5c543eb319e20999edc2bc3d3a8844209a1e977f480b360e6bcb52d388bd00b88331eb823b09eb66ce06cffdcffe298bca24a9acd556c940feb83184716c909d9caa834ae26aaa567dd929c5f5e724137affb806a7544e6cebdb63e811355ff065b1558ba89d6f7bfbbbe62e8a43c87d6a500f0feb6369b5dcdc4083a4a494d09288af1b088ccda8085c70c139f9902fcd510896a93bfeac419ec832c7deeea5791f3a4bf69b1abe6f05776c6331b8e38eb164bfd140aeda1c0e8b9bf86172de99daa699c27781b1e47dc7efbefc2c03659bf8be4b4b5c703790dd0a5", 0xe6}, {&(0x7f0000000ec0)="1bc613c627395bece7b3512e6fdad6f30e75199a335bf0aa39ccb3075700a87f044ff5028b761b5f7f7739a6837f08a585484aba2c2d35a3c68088353120e0d1812fc677606a4d80164b6db4ac6730453c3ea6f026900471260326094af6cfb35a78383fc4f07f37", 0x68}, {&(0x7f0000000f40)="aec7bbd450fdab589d92413d57226428a0bc8f4be6c10ae6e5802c5c3627e7419b5ac9d3b632ddaf4602de0440ca6ea7d14fc0d53a95e77e636daaeb8451ba3ad976412476f06ab2a607f1f82d690643e0052bb304d66109db6a576de6450ef9cba8bf296f0f213e2ae33c089086140836373b6e8cca406eb3857de86e78f3164038239bff8261bb1ab05c89792084f7ae9f495a93ff052854b780fc61d08d8c8d6d2fcd0ae5135a6b6e9472c4701b9a08c8261a4dcaded9a8e9f29817167ad6124283ba9afb9de2cf3ba3c5d866ae1be8b00289c71db9bd4b8edc5b56724d024627c9bae884a55d89a4ade5249703bd94a235090bbf53af", 0xf8}, {&(0x7f0000001040)="4f093b787fdbdeb37fca257c3c597aaaed5500d37185c2fc869a1640968a3bb2dadb334e27fb4841d15588aa81da65338d42f2dc1479272bd45ce95095d2f7a0957021376d83d0325891dddf814bb8da3ffa6fd5d282ef3f4afd40989f60ccb29660", 0x62}], 0x4, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], 0x2020}}, {{&(0x7f0000003140)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @private=0xa010102}, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000003240)=[{&(0x7f00000031c0)="6abe84329a011e6c06e28654b8df08d20c260412539d6575edf4c5d0cee753952ee16318b70226b41c8c9c9b82783c395658ed8cb49f7668ba5d57b4102fb9305dc0b94b2a2647562e86a08629471df7bcc8afc638dded", 0x57}], 0x1}}], 0x3, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:25 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 18:02:25 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext={0x1000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, [], 0x1}, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:02:25 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002400071fa66dd6b6cd7f463705000001", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="700000002c00270d0000000000000000b9ccb67e", @ANYRES32=0x0, @ANYBLOB="0000000000000000080000000a000100727376703600000040000200200004000000000000000000000000000000000000000000000000000000000014000200200100000000000000000000000000010400010000000000"], 0x70}}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) read$usbmon(r1, &(0x7f0000000200)=""/247, 0xf7) sendfile(r1, r1, 0x0, 0x8080ffffff7e) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x60, 0x0, 0x2, 0x8, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x5}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_NET_NS_FD={0x6, 0x7, r1}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6, 0x4010, r0, 0x6bb69000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000080)={0x2, 0x3, 0x10001, 0x2, 0xe7}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 547.163356][T26310] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 547.311171][T26313] ceph: No path or : separator in source [ 547.486858][T26322] ceph: No path or : separator in source 18:02:25 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000300)='/proc/capi/capi20ncci\x00', 0x800, 0x0) ioctl$SIOCAX25ADDFWD(r3, 0x89ea, &(0x7f0000000340)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'syzkaller0\x00', 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f00000001c0)=0x1) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000080)=0x12, &(0x7f0000000100)=0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140)='/dev/udmabuf\x00', 0x2) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:25 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc, 0x0, 0xffffffffffffffff, 0x4}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:02:25 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffb) setsockopt$inet_dccp_int(r3, 0x21, 0x9, &(0x7f0000000080)=0x7fff, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:25 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x1c9042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492805, 0x0) lseek(0xffffffffffffffff, 0x4200, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x8400fffffffb) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000100)=0x6) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="8094e0f2f4b2ebffa14996250bac2103000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000000)={r5, 0x1, 0x10}, 0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000080)={0xfbff, 0x4, 0x7ff, 0x9, r5}, 0x10) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) [ 547.916196][T26310] device bond211 entered promiscuous mode [ 547.935627][T26310] 8021q: adding VLAN 0 to HW filter on device bond211 18:02:26 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffb) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x3, 0x1, 0x1, 0x4}}, 0x26) r4 = open(0x0, 0x141042, 0x0) read$usbmon(r4, &(0x7f0000000200)=""/247, 0xf7) sendfile(r4, r4, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x92610, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x1810, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002400071fa66dd6b6cd7f463705000001", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x40, 0x2, [@TCA_RSVP_PINFO={0x20}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_RSVP_CLASSID={0x4}]}}]}, 0x70}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'erspan0\x00', r5, 0x7, 0x80, 0x5f, 0x7, {{0xd, 0x4, 0x3, 0x0, 0x34, 0x67, 0x0, 0x8, 0x4, 0x0, @broadcast, @private=0xa010100, {[@ssrr={0x89, 0xf, 0x30, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @remote]}, @rr={0x7, 0xb, 0x9f, [@rand_addr=0x64010102, @private=0xa010100]}, @ra={0x94, 0x4}]}}}}}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:26 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 18:02:26 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0, 0x0, 0x1000000}, 0x38) 18:02:26 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) lseek(r0, 0x4200, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffb) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) recvmsg$can_bcm(r2, &(0x7f0000000240)={&(0x7f0000000080)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000000100)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/45, 0x2d}], 0x2, &(0x7f0000000140)=""/209, 0xd1}, 0x20) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x14, r5, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r5, 0x230, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r6}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) [ 548.334023][T26385] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:02:26 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffb) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:26 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) getsockname$tipc(r2, &(0x7f0000000080)=@name, &(0x7f0000000100)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffb) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f000001d080)={&(0x7f00000000c0)={0x14, r6, 0x709}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r6, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1eb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c050}, 0x4880) [ 548.952833][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 548.952847][ T28] audit: type=1804 audit(1595268147.016:178): pid=26396 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/430/bus" dev="sda1" ino=16383 res=1 errno=0 18:02:27 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x2000, 0x7) ioctl$VIDIOC_ENUMSTD(r2, 0xc0485619, &(0x7f00000000c0)={0x1d, 0xff06ff, "0bdac2b829dac3a3770a915d3539d626aec5c6f3d8fb6990", {0x3, 0x1}, 0x40}) sendfile(r1, r2, 0x0, 0x8400fffffffb) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000000)) [ 549.147411][T26385] device bond212 entered promiscuous mode [ 549.181797][T26385] 8021q: adding VLAN 0 to HW filter on device bond212 18:02:27 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x2) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0xcc010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffb) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:02:27 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:27 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) [ 549.394378][ T28] audit: type=1804 audit(1595268147.456:179): pid=26442 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir212127951/syzkaller.ICdwwA/586/bus" dev="sda1" ino=16323 res=1 errno=0 18:02:27 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0, 0x0, 0x2000000}, 0x38) [ 549.446357][T26447] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 549.531844][ T28] audit: type=1804 audit(1595268147.556:180): pid=26420 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir614119965/syzkaller.KZ2c1p/400/bus" dev="sda1" ino=16382 res=1 errno=0 18:02:27 executing program 1: setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) [ 549.792959][ T28] audit: type=1804 audit(1595268147.636:181): pid=26442 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir212127951/syzkaller.ICdwwA/586/bus" dev="sda1" ino=16323 res=1 errno=0 18:02:27 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) lseek(0xffffffffffffffff, 0x4200, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x8400fffffff8) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffb) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r0, &(0x7f0000000080)={0xffffffffffffffff, r3, 0x80}) r5 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r5, r5, 0x0, 0x8080ffffff7e) connect$llc(r5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:02:28 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x8, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 549.969180][ T28] audit: type=1804 audit(1595268147.656:182): pid=26453 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir364736473/syzkaller.Rispx1/378/bus" dev="sda1" ino=16372 res=1 errno=0 [ 550.153610][ T28] audit: type=1804 audit(1595268147.756:183): pid=26453 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir364736473/syzkaller.Rispx1/378/bus" dev="sda1" ino=16372 res=1 errno=0 [ 550.270078][T26447] device bond213 entered promiscuous mode [ 550.331530][T26447] 8021q: adding VLAN 0 to HW filter on device bond213 18:02:28 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) mq_open(&(0x7f0000000080)='--{,\x00', 0x40, 0x4, &(0x7f0000000100)={0x8, 0x1, 0xcc9}) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 550.406868][ T28] audit: type=1804 audit(1595268148.156:184): pid=26488 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir364736473/syzkaller.Rispx1/379/bus" dev="sda1" ino=16378 res=1 errno=0 18:02:28 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 18:02:28 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x40, 0x0) bind$netrom(r0, &(0x7f0000000300)={{0x3, @default, 0x8}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @default, @null, @null]}, 0x48) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000080)={{{@in=@local, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r1}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:02:28 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x400e00, 0x0) read$usbmon(r2, &(0x7f0000000440)=""/251, 0xfffffffffffffc9c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) syz_mount_image$ocfs2(&(0x7f0000000080)='ocfs2\x00', &(0x7f0000000100)='./file0\x00', 0x6, 0x3, &(0x7f0000000380)=[{&(0x7f0000000140)="c9b90403bbbb9f6bbdb9d0dd633af38c73dc7bf8bf201648b010b995c77d27b42774a48fc9e96efdb0522833e1013c2660808640ca5a57aa4f6c69b44e3f692dc9476dcbcb35b088a328a5f0fdd07925a68164ebc4e81efdfdd9e5018e388c5046a5cace6b4f1032e9257fecd7f70a25229f95b33874da1b058109def593204b0894", 0x82, 0xff}, {&(0x7f0000000300)="4a914066cbd84276d3ad29554d35b49870ce90e25540da3037cbffe998b9eef021710c5a5321fd342f2fdaf6b1d3470fbfed5afcc372f4325104fa76c4f4", 0x3e, 0xfffffffffffff828}, {&(0x7f0000000340)="f0cfa867988e76123bba74f0c5a7d5ebb7dd136f75175e81bfb23294e05ada53884de9a667a00b112d302376236228c8acf0f509e17580beed96", 0x3a, 0x9}], 0x80, &(0x7f0000000400)='\x00') ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:28 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0, 0x0, 0x40000000}, 0x38) [ 550.721479][T26509] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 550.831597][ T28] audit: type=1804 audit(1595268148.897:185): pid=26496 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir364736473/syzkaller.Rispx1/379/bus" dev="sda1" ino=16378 res=1 errno=0 18:02:29 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x1}}, 0x2e) lseek(0xffffffffffffffff, 0x4200, 0x3) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x8400fffffffb) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffb) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000140)={r3, r0, 0x9, 0xac, &(0x7f0000000080)="c5cb1291fdc64296be93a081feb427e8fdda1c0d96dc4696e7cef484db275f9ced4c49ce868647937c10439b8d6fe7c899db97471484fd570e046f1e9da6111347b6184ac7dec203a23bba6a97b5295a469291277486a786da6d3fc45cb839aff64a5382d51f77e34529eeddd97ebe6e8aeaf2e4294c32ba1fef6b30f1d4a64c62a698a48c17c659e5c0358d745846654ff6fb408ca6e46f7355e7926f27d74efea899bdcf8149b2c7a2d3db", 0x91, 0x9, 0x3622, 0x2, 0x800, 0x1, 0x3, 'syz1\x00'}) r5 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r5, r5, 0x0, 0x8080ffffff7e) connect$llc(r5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) [ 550.994150][ T28] audit: type=1804 audit(1595268148.927:186): pid=26488 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir364736473/syzkaller.Rispx1/379/bus" dev="sda1" ino=16378 res=1 errno=0 [ 551.031970][T26522] (syz-executor.0,26522,0):ocfs2_parse_options:1481 ERROR: Invalid heartbeat mount options [ 551.219608][T26522] (syz-executor.0,26522,0):ocfs2_fill_super:1190 ERROR: status = -22 18:02:29 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x0, 0x803) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000200)=0x7fff, 0x4) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffb) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x1, {0xa, 0x4e21, 0x4, @private1, 0xfffffff9}}}, 0x3a) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r3}, 0x38) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="2400006fb1cece761dc74da7ea040800024000cf5336c5"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000890) read$usbmon(0xffffffffffffffff, 0x0, 0x0) [ 551.341027][ T28] audit: type=1804 audit(1595268149.407:187): pid=26527 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir364736473/syzkaller.Rispx1/380/bus" dev="sda1" ino=16368 res=1 errno=0 18:02:29 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x7) write(r3, &(0x7f0000000100)="6cc69977b7e65dfc640c3d4e72bfd6350a0bc840ca5bd1349ad1eec5d6c6daef86deddbf8d9264b20d8d453357bb63bb7758a8d3bcd98f68d1ffd7f97481a05f4a124149df35b3faf111d0cc1f193d8ff5e401f04291c97c78f77626147caca333e6a3e3f234348a8634728397838de882277028b5a206b3bdc66898016135718f44ed7909cc6b3b232fef7230f2121948971c1a5a0466338880299b22ec9a140b01147999d0073e2294c71c1f35021a33f9cd92cc7daaf6c133ee4bd366822201c69412846b965b6eb78a9504afbdbfae87", 0xd2) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:29 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @multicast2}, 0x1, 0x4, 0x2, 0x1}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0x4240a2a0) read$alg(r4, &(0x7f0000000180)=""/166, 0xa6) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0xfe, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x5, 0x0, 0x2, 0x73f}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r7 = accept4(r6, 0x0, 0x0, 0x0) splice(r4, 0x0, r7, 0x0, 0x34027, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 551.523657][T26509] device bond214 entered promiscuous mode [ 551.576512][T26509] 8021q: adding VLAN 0 to HW filter on device bond214 18:02:29 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 18:02:30 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0, 0x0, 0x1000000000000}, 0x38) [ 552.080950][T26577] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:02:30 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) read$usbmon(r3, &(0x7f0000000200)=""/247, 0xf7) sendfile(r3, r3, 0x0, 0x8080ffffff7e) sendmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="601519feccca6b34f5825fcf2e8e4926", 0x10}, {&(0x7f00000000c0)="6c743ccb2f2294cb3ad6b31b8736f75ecb0a22cee8e6db72f668b0d2a93fdbb2b93cc087f19df7c7a3c011f6f71a7593cc2801d171eb9acb8fbb1625ea081f3c5aec94d7d6244bdd1380745ee8a7449314d446c3a4c28b51a9e353c34c801a1d90ac00c960a232f693aa9c6fbe9c2dd5ee21aa2e553f134081edaaf54e3747df793672d33a571d4deaeb2153666c47865f4d0acbae9ad86822f076ba3d6c42955a1a1813a4980d109ad095bfb0a31a881decfd39cea1", 0xb6}, {&(0x7f0000000300)="c4eae49128745ce8923dd4e17b2e7532db33ecd9cf877c2e26b6e98f08cfa926869dedd3a318fa9007c6fd7d19ae8dc70d33950440c4549bfae89c71358baf51bc5bc5c11d8056363a7a458220ebdb31faf60ca3c0771fce0641f59950d3d4b08a1e7d4eeffaa1712ec3d2711ab25ca5bd3f3f9cf81d31a0a7583cd2986f3f4a853bddf61006b3d51d0ee6ffd0c6d5210dd5884deb80205cc94c03d5cbc5ea5c9b12e26545eed3488a2bd89b8a16ad6039d13c19c23cf5409f0f02372163370688bd0a986eb7c615520afa8919dfc77f", 0xd0}, {&(0x7f0000000180)="eed2cfc65c57e102d446db77ca96e1e439235f63879cff1090b9175b5357d91d927fc7f8848ea75bcbe7bcc8ab98ea68782819bc0fee15f7edca4132a589ed09036746f389a2f87ac3c67442f0c4747951edee480c47d527ac986bfccb59302bc43f186c", 0x64}, {&(0x7f0000000400)="52b1ed53187d85ddef1be7ae7a81d1658f9052845def20af6cfa765b79aa4eeb592376a4e39ff9823f99c56eef936019a4e638abcc67f78782ee1cee2f2b69e76a5dba3184a2c03430fac7ee425bfff65c417d9b763dd56b4b3d0c290580a08943db822f9604b057fb8bc3a1ec9599957c266a9700c110b799195da4bade6b5813be77fc0c16100b7a7bf574f6310026009f2ee807f7187eb4250d0183ef17237ce524e56e829674836c0d0f29b2f12fb8262024eef83ef5ca8b7db77438ce60a4d21b0ac03fa71a269ead9d57a4855807fefddd50734808a804a6fd07ddb91c6a3600", 0xe3}, {&(0x7f0000000500)="4f7e3b414b47bf29fb7632d2e1135e2e1117dbe599744d95161283c284018eec", 0x20}], 0x6}, 0x22000001) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:02:30 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x198, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3d}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xbda3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x55bd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffff06}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10000}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d46}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @private=0xa010102}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x93e2}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7f}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe9e}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x20040000}, 0x4492622c91e7d29f) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r3}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) r4 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000000)="04", 0x10, r4) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r4) 18:02:30 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000a000000100004800400010073797a310000000007c1bd03ed2f77146a02686dd00f8c1fb033cb0eb8ecaa8753777c75b7b4fbd266491b93161cfa00"/82], 0x24}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)={0x1a4, r3, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_to_team\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbeef}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb7f}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcf}]}]}, @TIPC_NLA_SOCK={0xe0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x6c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x45}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3d63}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x32e0}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd296}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x12c0}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}]}]}, 0x1a4}}, 0x800) r4 = open(0x0, 0x141042, 0x0) read$usbmon(r4, &(0x7f0000000200)=""/247, 0xf7) sendfile(r4, r4, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80800) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:30 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f00000000c0)=0x81) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000080)={0x31f, 0x3, 0x8}) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20010020}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000706010300010000000000000000000a0900020073797a3200000000"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x8000) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffb) fcntl$getflags(r3, 0x408) 18:02:30 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002400071fa66dd6b6cd7f463705000001", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="60000000640000012bbd7000fedbdf2500000000", @ANYRES32=r5, @ANYBLOB="f2fff2fff1ff00000500000006000500063f00000b000100666c6f77657200002800020005003400000000001400ee524c7d63151494ffff000000000000009cd454bf15f9752c00"], 0x60}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', r5}) syz_mount_image$gfs2(&(0x7f00000011c0)='gfs2\x00', &(0x7f0000001200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)={[{@suiddir='suiddir'}]}) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:30 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x424400, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r1, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x4048004) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffb) fsetxattr$trusted_overlay_opaque(r4, &(0x7f0000000200)='trusted.overlay.opaque\x00', &(0x7f0000000240)='y\x00', 0x2, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r2}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:02:30 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) read$usbmon(r3, &(0x7f0000000200)=""/247, 0xf7) sendfile(r3, r3, 0x0, 0x8080ffffff7e) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000040)) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 552.853890][T26577] device bond215 entered promiscuous mode [ 552.889669][T26634] gfs2: not a GFS2 filesystem 18:02:31 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) pipe(&(0x7f0000000000)) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x2005000, 0x0) mount$bpf(0x20000000, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0xd800, 0x0) getpid() syz_genetlink_get_family_id$nbd(0x0) mount$bpf(0x20000000, &(0x7f0000000200)='./file0/file0/file0\x00', 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x800, 0x7ff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r1) shmat(0x0, &(0x7f0000dcb000/0x4000)=nil, 0x0) ptrace$setregs(0xd, 0x0, 0x0, 0x0) ptrace$cont(0x7, 0x0, 0x0, 0x0) [ 552.921565][T26577] 8021q: adding VLAN 0 to HW filter on device bond215 [ 552.948173][T26620] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 553.053929][T26634] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 18:02:31 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) [ 553.144700][T26638] gfs2: not a GFS2 filesystem 18:02:31 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='+/\t|\x8f2(\xc0},+F&@\x00\xec3\"\xb7\x80\xf2\xeb\xa4\xef\xc7Hn8\xf7q\xd5I\xb8K\x99\xde\xf5\x9c>\xf3\xe0l\xcc\xd3\x01c\xa4\x92\v\x06\x00\x00\x00}(\xca\xd3\xc9\xa6\x1bP\x0e\x0e\x81(1E\xb6$\xa9\n\xcb\x9e\x90\xdb\x9d\xed\x06\'\x13\x1e~Y\xb2\x81\'j)\x16WC\xa6\xbd\xe9\xf3\xa4\xde\x9f\x9bj\xdcx\xb0ao\xd4\xb2\x92\x11\xc1\x96L\xaf)\f\x8fH\xa5\xdc\x7fMU$', r2}, 0x10) [ 553.397467][T26659] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:02:31 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0, 0x0, 0x100000000000000}, 0x38) 18:02:31 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x800, 0x4) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x28, @rand_addr=' \x01\x00', 0xa}, 0x1c) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f00000001c0)=0x8) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x2f7, 0x69, 0x4300, &(0x7f0000000280)="b95b03b75b030700009e40f008001fffffe100434000638477fbac14143ae0000001c699da153f08a0e6e380f60105f683317585d7473f1cab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b33", 0x0, 0xfd, 0x6000000000000000}, 0x28) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:31 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:02:32 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) accept4(r0, &(0x7f0000000100)=@tipc=@name, &(0x7f0000000080)=0x80, 0xc00) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x5d, 0x10, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000300)={0x980000, 0x5, 0xffff, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x9a090c, 0x40, [], @p_u16=&(0x7f0000000180)=0x7f}}) sendmmsg$inet6(r3, &(0x7f00000019c0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0x2, @mcast2, 0x4}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000380)="5a36a40516e7fa33cd472d6deb60d6ebe7f5f2dd09292ea96eff74a4fd2f83a42e32cb4d0f6cc844bec506964027d7841bc115c84dc9d508e7b7d9ae467cf4eddd160d07bab68a182e822583bcb12f6f38841ec0a21afbe8547f553e15213596396cf1952722bd7315ebb71808ae38192ce3b3c4fc776eb5b0021fc1a42d53e349f4e32437efdabf3630acee9d8f6b45fcfc33a514065266f9dc14186d8304aa40579969536bf0cc2a2e5ad1929d3dd662890cd5f665c520f69c56560a88cf6ea98a44d735a307bcdfbe112e5c6e81dedde2f8c328f773011caf7aab3c5908c0df6be8ade834ca", 0xe7}, {&(0x7f0000000480)="6f99af8e63c38d7d3fd6bfff6a6b00cd103f001e6a33a45ce57e2f1e7459826f840b46a23902a0bee49b54167b7be9105410a02c207ead1cb267343a08dbc2fd4a2a10a7136eba48de5768fdefb87ef18670c00157e100abf33d88cbf6004fbbfbbdcb33af17a45d09f9aca97ed287677a9758066a7b08177abbff95fa67b52781b9e2a72cace20bdd6fbef1f58719303bc62789d6695ee3085dcec816fe904ef025e8b74bd23dfb750a8e61063202dded96e2416e0be1", 0xb7}, {&(0x7f0000000540)="56757526188cedd6afb9322eb6cf9f3f46d2b845f177f858480ee579d85318d711a4d8b55a544a5e86399ac00a5ff09a3a022a6cf44ae798c7048b3e7880393d0ae8e62e84d162d0bb53ef0dcd3afcc00088490715a94fe408887e38b99dda7275ab3d0190d4c116a6333689f234e9a8369ea67c661f22b188de423bb5bf2013ba0b0882d0e1f6c7c45b47eecf5d5ea77d6454aa5bdcd927c914d00b21a5db9dec079b0cd449ed02c284cf79", 0xac}], 0x3, &(0x7f0000000640)=[@hopopts_2292={{0x78, 0x29, 0x36, {0x2c, 0xb, [], [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x400}, @enc_lim={0x4, 0x1, 0x5}, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x40, {0x1, 0xe, 0x0, 0x4, [0x874, 0x8, 0x200, 0x896c, 0x100000000, 0x100000001, 0x3ff]}}, @pad1, @pad1]}}}, @rthdr_2292={{0x18, 0x29, 0x39, {0x88, 0x0, 0x1, 0x9}}}, @tclass={{0x14, 0x29, 0x43, 0x1}}, @rthdr={{0x28, 0x29, 0x39, {0x11, 0x2, 0x0, 0x3, 0x0, [@private0={0xfc, 0x0, [], 0x1}]}}}, @tclass={{0x14, 0x29, 0x43, 0x1000}}], 0xe8}}, {{&(0x7f0000000740)={0xa, 0x4e20, 0x1, @private0={0xfc, 0x0, [], 0x1}, 0x81}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000780)="bffd306467a34f2cf1547436707ae181455ee0c1c672d1d73acb349ee72acc9e75a1e013370c1e4b3d5a853a774d7e200abc1f1eae82480a2e0d24324b8c3320cc1c2659b70b47db481e6261ca7689b52dd75e", 0x53}], 0x1, &(0x7f0000000840)=[@hoplimit={{0x14, 0x29, 0x34, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @hopopts={{0x28, 0x29, 0x36, {0x6c, 0x1, [], [@pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hopopts_2292={{0x1090, 0x29, 0x36, {0x4, 0x20e, [], [@calipso={0x7, 0x38, {0x3, 0xc, 0xff, 0x8, [0x4, 0x10000, 0xf0, 0x0, 0x3, 0x8]}}, @generic={0x6, 0x1000, "1eb133211da320b9b028c86950f44986f244b0da3feb019c2fc0b9b0b18ebabd0abb2610c1b913f12728adaa24913377781823b9588b5ffe6d6eb78adeea86f565eae6dd657eead7a89ffea6d7ac5adf2af813899047c43e8a371cc6963e2bee13577cc3ba83676df86f998985edb40004a7e922e53746eb2fc9c3f067bf3734da9e8375b0f02688e845b1053935ac3f04d1462176a94fcf210f1583ab4934a058ec8c30f15c91f6951b488610dae96056780cd0244f340bb1af7e11346591fc63d3f046d95803709bfb2e2157b6aaa9bf861a736746eb66284e5da79fc9fa7ae9449ec33edef2a8523689d1d9067cfdcccae08d129765de3fd81ef1f708f6ac7f59f1c986d814fd94d5520c4dbfd87342c1065fe5b5bbe93c6c7b0c845a4192e9122456b78b05b67295b8e8a203ffb5b28f9f544f2a203ebea61014f67f6fe1d065f4aaef0cd880c5e95cb698d015f9a0bb1189ae623355d3de40db4bff95a5e35bb92c02c5fced9f347e2e773dce2b168e1dce228329d638fb677dd9f1885d65cc09ed68b368ee7c30d04418791dc44df0ed03cf39a8a19ed7d18b211dea99c32c5b5be3d746f009a63848cd3284e0c6a630e97fd2672be0656e0784403e5004a6a4fe259986a5859231c36f1527576e35aa2b120df7ea9b6799a4c337cae1b5ded257cdec8163b4a76e6864bfe7a8fc314fcdd063113d35865756ed0060330914a528ac74f92f54c88e4bc8569157281bf6493b22b2f98682f67fc3c295b5571682d0e42cbb58bf05c908513f237376a14880787ee7747be727d09641712219dc4d8c5e5290d2939bcc0de9fd232ce69250c0eaa4b2ab114c66a197a66e34aad3dd2f2dcf1ce47d9c4891cf958688e99335f91704622cad58e530bc31fbd9e63d9ede87367551fee6a58b0e0c68017589856179c8b1d55d33bbae2e9f6e82ae33ce5281b91050409c7ea8387cfd1591d7b5eca2a715d127256cce86f82197374369ea6ce73f5f9a79eef4f5384043f8eec889356b85b66e48839883a74a02f5f2aa5b1b3996e0304c6dd3da6f77ceb3fcff48011dbba373c92b19b1985f3f95896241296259a6597d0d6730d661b6ac15e4ca78e180aadfd2d9c3b15a52f52a1961d0a13f924ef4b4a34e356e6b543c7289ea17d093e4a61dac69d14cba0cb71564875f6a273aab05b801d6123f3eedf96a6024c430cfabb18cc415e0a9a286d75cd698fea246806458b3606f1ab0f6b132c2e4e9b95850f9a8ccec1128709a0eeaed841dbad4c165418733bbe7ae688592ee08a87434f70ffa9c0a7eed39666a34756e514877beb9ea537f44990f3ec0bd7db5b50fe42f8178c9a8cd21e0704b03b8b19f94b405a653e40c5423372555118c6e96bd775b01f7c8e57e95a60f01dc313d9e5901e73f8c9c12a06b97f2e3f57a95c3da35b702d88ff0c4093bfb0f57e220470dc549ab11f84b357825e5c572e213918d390cc78591a86f27655c50140963ff86053d109649d8d8b1c12ad54474de992a2db68e586685ff4f21330ec957d69834478c14851129b9f5b73e07e235ea70a85dc1025ca60136464852922216d51df485983afd551ba637d2bd7d2198f84bf728c876e31c75f52572c6798217efa041785d1a01fa0c0f849e11e38e636b6c9236bce835d7c9a5de008ab512f141997a07cfc41ce49a2eabd3cbb72a1e1a21fc5ac3255b81faed7944e21befeb4cd1998c817713475f2f560b74a5441abd14cb420debd61015072d0974c43499c2e4e8bb5d008d06d54d7f0b2f946355f9ee73b635a2eebb3b81231acac1357734a6141bd136ab100beeda9b12b1fbfa8a361835eab67a97f06dcdb0694fb0dfc953f027b3fbbb7bc9e9b21f5424da4974e8b5f54ec0a91af022dba7b3d5305fae74795b7a236132d6fdce031d3257ca74923ba710b72d36a988f88a40a0480c97441701dace6a8d7c63ecf25e365d9bf755c8d35771fdaeaf6d9c61eb1f4dc2d78b9aebdd6cc4188ae14a61e450639ae88285e7950a84d347c61b3cb4766aedce93a73d3b74ea0ce908e3cbfaf51537b5716826b95c8931c543d032ab288ec31cbc687cbe1cd8bbf1159e6ff515ded4d4052ae9852a44ff58879ff1195f92c93877e88ca74e730accfdb6958f06b33d413618dfca589d9885c386e676640ad2a64265327020f66e00d49061da883eeb2c438b439c4aff54de2cce4ae6156aad9a1fea1edb3e9a86eb13a5f3057adb1f7586cb4b29aac3a1f95f8fc221305617e7ceea9c34db5cbbbb5cbace8aa94fc62389a9315e52b252f7e039c912751577128257845222af796b22aedd50b3835c9d247d23c9605f12fca4c949437240c09a7e5b05e3edbbd687612fc6362f942b5c02b8507a35d34a18da027d6faea739321cc911fb1a1bad8c3c7d594396ab555e76f06840971bec423050355e1d0cea55a9f60060b6b1a4d8fd158eafccc0870f14e531f3a1384eb1168764e9782dcd75167e87048725510fdc25b0d4a7c2fe36caada475dd253cafabfe414ba1f8f4d6bc3ee7a4e63d37c63097529da18224f3a39c2957cba1f15b7a18737dca738bbcc6cf0cbbaf915e83343743ef2b3027c16561f809b14eb08e191c19b839149d035d41294cb6b099ee786bbf5785864f065b851f3f2397983dde76858fbf21836c37a47b670963bd40d17b4b7b0d709fad2ab7423bcdb9a0e639d2172d00924cb08d4c301e85db29fbafc41d6d1ebcb4a94f73a9c68d07acf96208e29c678f429fd55d3373db68aa48e6dd20b0c6781ccc6ec3dac92951c53585c7befa8ca243997578cb37aa24974f2f22ae6cbbb804401d7c4e725d656112745e01aefc8f9712a900c29db8bac330fc776cb44c12154ffafd1492885b6c182a18da273f959091dd08e91960e90f449376f83660d9ad663ee2f7442e18027b9763437a2c659fe15c205b452f879206f9e90e895b9e4791e6b05537ffafeae5222650a282f4699faaf208467cbc1bad45aeac206b7656d41c3d0c81ea4e355c755ee12361572d926c8df53f3691976ccd40500dceab4dc7f77b40c5665d41ea0f1c6261e5bb0bbe98499280d553a5b38b2cd791082008d37bd975dbe226d4898b71e64ec335a48393eca8842348c308b331938cec2eb3cb4906bb85262d608a81aff096c53e8a9e23f316fc79a2bde7e36317717de940671799422b96bd213c18786621ac7c53829b23603b2e33ecc3413b95304227eb9acbf97af87102d29e337ae71a5c864532190cf92fae35e8a896845c70d295f30781464880344c2b3f95c9d516424b2e565c3f42aef6d2f0ff912512103bb474b4c68d13fc7e7e38a98e5ed386b628145e0f6eb4dc5c51bec60bd3fbf864802a334d4e68e66cb96cc6ab86f94d18604c121204e2f3bf211566f3c7fc83a6854bd02f96e4c0e127ed118540bd1a80596714960436f057c5e17621520b8d920c7d701f905344cf85e2bed0a5e411a6a6236614a4262c8c7b144cf44ac96bd4133cff08b32bcb1bbb85a17e38c053ad709aeb70c56dc5e9e36e3106cd2bfe0765ebb555652ee4b61989f6bafa901703ca99ceb448b8c707c0b9d00136e684dd6125a3f644e9ed43da2c4fcb24d7fdc085c7c1f7fe6d56601b4ab87c542aae927852b3f6f3d52380736a6d6f547ee913152e69804d7df3a5cc9c5b62433590cf468b4bd3abb2a01457e5655e92d40f9fd3c61db4892bcbb641ae3421fa131f99cc780e5b23013c38c869e9dfe6fa3a8df512083c3668c8cf7bfeff3da4bd5a27c6c68bf50a48110bc29dacc9364228e84667a7f08adb1447742ee6fb94c918b9c8ea4ec4eb3b36a041ab049c72f58e82fbac276328d7d000ea33276d7cc65088fc7a40a42126107bc2d78aabd66e2ac201a6a88cfdf3625cb32853e2cf458efefb379266b18bd4232ace7d4d682e10b9122383fee8e603385bcd1523928c99380b9d15a729239aeddc494442e784aaba81e4b98f9ec90d3606e3e0805fb0c42b735111c7b3849484c0a5cc686ceaf0ed1d1776a60df04fc53d5b4ed086c6fcd2537d4502c27914b0c609b5d4c864e20c22c9266f34e6e0d4011b27a1f4c316368b6d92172f819cce89e0e1af091470a6defe911a5552af712070ff6d3c56cdcf81fc944f84b79d15fbbb93c812ba00a6551c23cb38b93ee4fcc22ed2dc467ddc5cfa2d3503875a93801dbd45ce1b8041ce26f9bd78c898875e08b7d7976b5a0fad2ffa76cc0f43896db0dfae66cadfb0d50e8d448614e5329028cb51a75914b00ed2d53f71bed48a49c5ae949feac6e7650fcd979ca1e39a04a1f0d059f6c11d36834314512cb5891a1a9ebb07a332405b72b2b9ce56af1602283e8f0b5259bdf680ed6dbb69e5c9bca8621841b25e34c65fc1d735786d77f2f2ab99936af255d8d26ddcd5f1a6684f341548619ec9c66c22318dbb8a80d469960aebba4d424432c5bf6b58222abb0050e74b79f1839bfe4d64918585e1b718425c35d9b8a7e8f892f585f078d323dc8de054ec256ae3feea7ce1cd775c69b2561dd7fea2894632a1f0ce7dd8cd96c96221c0a6ebe650a37aafb660cf3d9c41b53eb759eeb44cb9dc821dbeb50060f148e89dd1d2f84f22b66b30de94debf876ced836bc1f1a5766004988d981fa8cf3cf20194d0425b17b5c2601a850548b830c1425eb8a48fd2b4d3b9d3d3422446083e62c5e878bcc95ee76ceb212da0bd42871a81582b2ebb9c16d3dfdfd171ee8cd415fd36155b649f0dea601dc698f10f8a315ed0b0596b59c572620a9b98466f4013c8a42304795cd155c2d82902366457a8d5fad6d56381ca5bb155775c1eaed9f1706407c329ec545d346658319ee1d146fc3d1df7ec0f1418161909a25ce4aac820caa5c4006f3902753f3e117f2b5e671ae9f8be6043ed3f5ae1282273672ae63ce1afac10591024b55eacceb1f0031584bc2272be3692de37fc9dc77c236447ccc994934b4af7d7706e2621d1f1b624f49fa27a4bb605f0e87caad97b1a35003e6b6847c29a2c3c51cc7c1c6afe0fcf4812ad9e5645ebc6e7741986667576905ddef972b5cc714c826b5ba12cfde0d6cd1ff726ebc3d4b37b2fab9a519cf0eee56108013d48e19de7c512629ab9de7b6f12e6232d3ade7ea835a7105ea0a42a1c25b8166939f0621345a49f393640990a89c15a87bc7022827862441dd41f5f4b083b3248153a98b1616c7a855c3de444c922fe4316590fc71a2f15da00f913f85a71e356aee64a908391fb94087e3e32121f7d976d4b0ef41ca88d459574bf06e4af64e092d1a8c9dbb691b97d53e5347e25e171cfc46946e019ad1f993c7c07085821bf23c7186319b4b609d8593eff74b28d2641d0e850439203afb245a34a5f82a164c898d26744e55c3099f134a2c8b29ae8b368aa141f63457e8bbfb5bb2e63511905fb4b9625115a3ba52dcf7e122bb24f38e9300183cb4ce9149bb1a9c66e19dc57f4b3475aef32073f205cb0d7077f6241e16e35076de19f8dba734cb16dfdd9f09af904ae7e604120e202e2c0b48aca3df3c335566aeba87898058283468bb86f295b44af181f86a5efa1b87736f6cf5ee91a7883d35a0759713a1a5925869e5100ba2d8eb32125653258e3a8b4dd3c1c2049542c1cd76bd41b46e2561798d968c20ee71d1fdff29d3d49badcba13e6aaee83fe4137d43f926fc3493b414ecec62df9cf9f11b88ef1df38b924004531d43bde316dbc109ab4a07a08a538b2fc5f4346288e55112e0d19608c421de3e45107f3b48f6759c45b802e1551"}, @jumbo={0xc2, 0x4, 0x1}, @calipso={0x7, 0x30, {0x1, 0xa, 0x4, 0x80, [0x6, 0x3, 0x8, 0x3, 0x71e]}}, @pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x3ff}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x2f, 0x6, 0x0, 0x2, 0x0, [@local, @mcast1, @mcast2]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x7fffffff}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}], 0x1178}}], 0x2, 0x800) [ 554.180821][T26659] device bond216 entered promiscuous mode [ 554.224081][T26659] 8021q: adding VLAN 0 to HW filter on device bond216 18:02:32 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 18:02:32 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffb) setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000000080)={0x9, {{0xa, 0x4e24, 0x1000, @ipv4={[], [], @private=0xa010100}, 0xc448}}}, 0x88) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:02:32 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) mkdir(&(0x7f0000000040)='./bus\x00', 0x80) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000000)={r4, 0x1, 0x10}, 0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000100)=ANY=[@ANYRES32=r4, @ANYBLOB="8e0000009c638ce03e56cb814d2e5eeb4f7f2b11e8cc0e50578f03c67f1ea1fa40a53b05c209d5c1d71eeba5416e95da9d2a832982ecdec3092dc93cfd171690ff26f42ea819459fdf85256eee649aa56693157735ce3324a54607554278bb626bec2b81c4b1c9b044c1a35428761f675dfafd60e7f209d8ac6f491feb54a885d5f04245107960ab892b5ccd55d2a10f92ba"], &(0x7f0000000080)=0x96) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 554.651415][T26717] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:02:32 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffb) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0x4, 0x4, 0x3, {0xa, 0x4e22, 0x4, @empty, 0x5}}}, 0x3a) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r4 = open(0x0, 0x141042, 0x0) read$usbmon(r4, &(0x7f0000000200)=""/247, 0xf7) sendfile(r4, r4, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:32 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0, 0x0, 0x200000000000000}, 0x38) [ 554.882388][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 554.882403][ T28] audit: type=1804 audit(1595268152.947:197): pid=26727 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir364736473/syzkaller.Rispx1/384/bus" dev="sda1" ino=16378 res=1 errno=0 18:02:33 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffb) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x3]}, 0x8, 0x800) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x80200, 0x0) fcntl$dupfd(r2, 0x406, r3) [ 555.218566][ T28] audit: type=1804 audit(1595268153.097:198): pid=26733 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir614119965/syzkaller.KZ2c1p/406/bus" dev="sda1" ino=16363 res=1 errno=0 [ 555.417165][T26717] device bond217 entered promiscuous mode [ 555.423325][T26717] 8021q: adding VLAN 0 to HW filter on device bond217 [ 555.512843][ T28] audit: type=1804 audit(1595268153.577:199): pid=26729 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir364736473/syzkaller.Rispx1/384/bus" dev="sda1" ino=16378 res=1 errno=0 18:02:33 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 18:02:33 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0xb, 0x201, 0x0, 0x0, {0xc, 0x0, 0x1}, [@NFTA_COMPAT_REV={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008001) [ 555.766294][ T28] audit: type=1804 audit(1595268153.717:200): pid=26772 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir212127951/syzkaller.ICdwwA/593/bus" dev="sda1" ino=16380 res=1 errno=0 18:02:33 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={0x0, 0x0, r0, 0xecd6, 0x80000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 555.958769][T26779] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 556.027940][ T28] audit: type=1804 audit(1595268153.817:201): pid=26773 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir614119965/syzkaller.KZ2c1p/406/bus" dev="sda1" ino=16363 res=1 errno=0 18:02:34 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) r3 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r3, 0x8, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffb) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r5, 0xc0305616, &(0x7f0000000100)={0x0, {0x9}}) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x80, 0x0, 0x0, 0x0, 0x141c1, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8001, 0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, r3, 0xfffffffffffeffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:34 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0, 0x0, 0x4000000000000000}, 0x38) [ 556.354325][ T28] audit: type=1804 audit(1595268154.417:202): pid=26789 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir212127951/syzkaller.ICdwwA/593/bus" dev="sda1" ino=16380 res=1 errno=0 18:02:34 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) read$usbmon(r0, &(0x7f0000000200)=""/247, 0xf7) sendfile(r0, r0, 0x0, 0x8080ffffff7e) sendto$inet6(r0, &(0x7f0000000100)="6c9a093e9e5e256a22d7924a3eafef5f981108a63233585477ac499c83939cbd6b91fbb1efe0b1dac67edaaacb47af65cdfb95f15c233007dbb003979d12001f71fba8439630ab2b503c2d0ac18c1ac3c8abe52a1584c7eb3c2e0d83c2da0fd2ec9884ad2821671dcd05fb5fbf8894680afff48b71f29778e4e546805e", 0x7d, 0x8014, &(0x7f0000000080)={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, [], 0x39}, 0x6}, 0x1c) r1 = open(&(0x7f0000000300)='./bus\x00', 0x543042, 0x0) read$usbmon(r1, &(0x7f0000000200)=""/247, 0xf7) sendfile(r1, 0xffffffffffffffff, 0x0, 0x40008080ffffff7e) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x3}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r3, 0x81}}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x2, 0x0, 0x1, 0x1}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xb) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r4, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 556.563636][ T28] audit: type=1804 audit(1595268154.627:203): pid=26791 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir614119965/syzkaller.KZ2c1p/407/bus" dev="sda1" ino=16378 res=1 errno=0 18:02:34 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) bind$llc(r3, &(0x7f0000000080)={0x1a, 0x322, 0x8, 0xff, 0x8, 0x6d, @multicast}, 0x10) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0xc2) read$usbmon(r5, &(0x7f0000000200)=""/247, 0xf7) sendfile(r5, r5, 0x0, 0x8080ffffff7e) sendmsg(r5, &(0x7f0000000480)={&(0x7f0000000100)=@hci={0x1f, 0xffffffffffffffff, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000300)="0051689a91c7993b8dbb39baae50644b15997b775d554055f911284bc6743e4f67b17546bce591dc98a0d7ea2c4b38e7a7d5e0c5a258eb094c61395960078897842e9b7cc54441d82046e2e108eb19fd1d66d1be0916fe6560eff43f5713a412f3587cd265bba1547f7378be5a146c9f0f610a18c8d807c004ea61bb93996ca0c7866a0bff9372", 0x87}, {&(0x7f0000000180)="16b815e19abdac8b7b4e9013a1b44d2d106643de10ed842d2ed29545603d721e8166d0dc7807dad8ac31e6bdfac3e5dbe8972cc2", 0x34}, {&(0x7f00000003c0)="5e1362df4af3c15db80a85593c12cb83cc608f9609fec0d38441d9d0f1210e44d08afe370f980ec0b7a9f497b6b2a1f867730718d32e8d6f7657874ef9ff9c30229e89a1652fb2552b0b", 0x4a}, {&(0x7f0000000500)="662eabce365234bde47d68f40c7abff01bee819983de7108b0ca2a683cad957e40bacc7acef5b6f95d509074c6801c5170", 0x31}], 0x4, &(0x7f0000000580)=[{0xf8, 0x101, 0x3, "d376d0e86015cece0c899716f33b6164ee34202a425fee07c68d1dd07c241755e20404b686ead778846b4ac121e1ca2539358b29b68162c5abb9860849cbc9a9d34a8cf9b6a1f66e07d6fa981a73407ceb26e48d0aad7eb0e124cb5dfebb077511dd5538f70cfb6e93aee46d6fef11b9c608d3521771a82faebfdf4b4f3f16a2418997e6d9919876b68047bec09ed6664ea3c6a31797890747aa80072c97d131a43e0f30c2064858ec56b7a3a6337bb41eb95fe2f770c2c1c708bf6f464c241b980b093a9e22b3773a03972750a8d3c4fe4d1acfaed414ae9f1c40deee524699381552148374c031"}, {0x1010, 0x1, 0x7, "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"}], 0x1108}, 0x80) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r3, 0xc10c5541, &(0x7f00000016c0)={0x9, 0x3f}) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:02:34 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) lseek(r0, 0x4200, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffb) getpeername$tipc(r1, &(0x7f0000000000)=@id, &(0x7f0000000080)=0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r2}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) [ 556.688879][ T28] audit: type=1804 audit(1595268154.757:204): pid=26791 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir614119965/syzkaller.KZ2c1p/407/bus" dev="sda1" ino=16378 res=1 errno=0 18:02:34 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000140)={'syzkaller1\x00', {0x2, 0x4e23, @rand_addr=0x64010102}}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:34 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 556.795185][T26779] device bond218 entered promiscuous mode [ 556.856348][T26779] 8021q: adding VLAN 0 to HW filter on device bond218 [ 556.864340][ T28] audit: type=1804 audit(1595268154.927:205): pid=26836 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir212127951/syzkaller.ICdwwA/594/bus" dev="sda1" ino=16366 res=1 errno=0 18:02:35 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) [ 557.126510][ T28] audit: type=1804 audit(1595268155.197:206): pid=26841 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir212127951/syzkaller.ICdwwA/594/bus" dev="sda1" ino=16366 res=1 errno=0 18:02:35 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffb) ioctl$KVM_ASSIGN_DEV_IRQ(r2, 0x4040ae70, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) sendmmsg(r4, &(0x7f0000001780), 0x0, 0x90) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self\x00', 0x43, 0x0) 18:02:35 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0, 0x0, 0x8000000000000000}, 0x38) [ 557.317151][T26851] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:02:35 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:02:35 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:36 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x3) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x10000, 0x0) pidfd_getfd(r2, r0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000100)={0x29, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x0, 'sh\x00', 0x4, 0xc24, 0x80}, 0x2c) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 558.109065][T26851] device bond219 entered promiscuous mode [ 558.147216][T26851] 8021q: adding VLAN 0 to HW filter on device bond219 [ 558.224701][T26903] IPVS: set_ctl: invalid protocol: 41 172.30.0.1:20002 18:02:36 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}, @NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) [ 558.366183][T26903] IPVS: set_ctl: invalid protocol: 41 172.30.0.1:20002 [ 558.532636][T26909] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:02:36 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffb) ioctl$SIOCRSSCAUSE(r2, 0x89e1, &(0x7f0000000080)=0x20) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80984120, &(0x7f0000000100)) 18:02:36 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0}, 0x78) 18:02:36 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) ustat(0x8000, &(0x7f0000000080)) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000300)={{0x9, 0x6, 0x1, 0x3ff, '\x00', 0x5d0}, 0x1, [0x2c27, 0x0, 0x7, 0x40, 0x8a, 0xbb, 0x1, 0xb7e6, 0x8, 0x7, 0x1, 0x5, 0x2, 0x0, 0xfffffffffffff0cd, 0xffff, 0xfff, 0xb834, 0x2, 0x7ff, 0xa4, 0x8000, 0x100, 0x1000000000000000, 0x9, 0x5, 0x4, 0x8, 0x0, 0x5, 0x1, 0x1, 0x7c, 0x4, 0x100000000, 0x6, 0x800, 0xfffffffffffffbff, 0x7, 0x7fffffff, 0x0, 0x7e6c, 0x5, 0x200, 0x800, 0xa478, 0xffffffff, 0x1f46, 0x4, 0x2, 0x4, 0x9, 0x0, 0x100, 0x10000, 0xfff, 0x5, 0x1, 0x9, 0x8, 0x8, 0x81, 0xff00000, 0x200, 0x1, 0x100000001, 0x80000001, 0x2, 0x5, 0x3ff, 0x8, 0x7f, 0x1000, 0x48000000, 0x2, 0x3, 0xf419, 0x5, 0x5, 0x1, 0xe3a, 0x3, 0x3, 0x2, 0x8, 0x9, 0x2, 0x5, 0x3, 0x4c9, 0x81, 0x6, 0xffff, 0xffffffffffffffe1, 0x2, 0x651e, 0x5, 0x2, 0x101, 0x101, 0x9, 0x81, 0x8, 0x40, 0x10000, 0x9, 0xfffffffffffff001, 0x2, 0x3f, 0x4, 0x1ff, 0x8, 0xfffffffffffffffe, 0x8b, 0x3, 0x77, 0x1, 0x7fffffff, 0x49cf, 0x5, 0x3f, 0x44, 0x1dd, 0x200, 0x9, 0x80, 0x3, 0x9]}) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x1, 0x800) ioctl$F2FS_IOC_FLUSH_DEVICE(r4, 0x4008f50a, &(0x7f0000000180)={0x2, 0x7}) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x8400fffffffb) ioctl$SIOCGSTAMP(r5, 0x8906, &(0x7f0000000100)) [ 559.272241][T26909] device bond220 entered promiscuous mode [ 559.286510][T26909] 8021q: adding VLAN 0 to HW filter on device bond220 18:02:37 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}, @NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 18:02:37 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x104) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3}]) setsockopt$inet_mreqsrc(r3, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @private=0xa010102, @loopback}, 0xc) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000080), 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r5 = open(0x0, 0x141042, 0x0) read$usbmon(r5, &(0x7f0000000200)=""/247, 0xf7) sendfile(r5, r5, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x18081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x9) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:37 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) read$FUSE(r2, &(0x7f0000000300), 0x1000) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffb) dup2(r2, r3) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:37 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0}, 0x1081) [ 559.638502][T26959] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:02:38 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0}, 0x200007b8) 18:02:38 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000080)={{0x2, 0x0, @descriptor="7722fa844aa525bb"}, 0xc0, 0x0, [], "64ad7280ec9ab0ffedb250b1463ba9ec1d73135fe7efbc4974412a21eb4c1c3007351cb652feaebf49e5ab4e05046b80067e5cd81dcb07d18addecf0e31034d37a58c85903194a7d21a99a309f2518c3626b5794c1a08c2111dc053a5d2cf9185f93129caf3724e62850730594fd3daeab8452f9c0907e09c0c916c1d851f107d9946bf2bce47955bf1bcf68b59c4a295046497c247bf4a600811aa9388458adbe1e4067d68f7fb4d2aca291d1e77915a6f357a58fab0a52eed7f4384d4db236"}) keyctl$get_keyring_id(0x0, r1, 0x5) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x424200, 0x0) r4 = dup(0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') sendfile(0xffffffffffffffff, r5, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, &(0x7f0000000000)={r6, 0x3}) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000040)={r6, 0x7}) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f0000000300)={r6}) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) connect$llc(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) [ 560.238344][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 560.238358][ T28] audit: type=1804 audit(1595268158.307:215): pid=26962 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/445/bus" dev="sda1" ino=16384 res=1 errno=0 [ 560.464836][T26959] device bond221 entered promiscuous mode [ 560.528737][T26959] 8021q: adding VLAN 0 to HW filter on device bond221 18:02:38 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1ca10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x4}, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000024000762a66dd6b6cd7f8cdc2bc2175c", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x40, 0x2, [@TCA_RSVP_PINFO={0x20}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_RSVP_CLASSID={0x4}]}}]}, 0x70}}, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x1d, r3}, 0x10, &(0x7f0000000200)={&(0x7f00000004c0)={0x1, 0x4, 0x3259ca17, {}, {r4, r5/1000+10000}, {0x1, 0x0, 0x1}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x40, 0x2, 0x0, 0x0, "0292c3b798e1ef6b"}}, 0x48}, 0x1, 0x0, 0x0, 0xc084}, 0x10) lseek(r1, 0x4200, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x8400fffffffb) ioctl$EVIOCGMASK(r6, 0x80104592, &(0x7f0000000100)={0x3, 0x68, &(0x7f0000000080)="57f3aadbfe7944bf0c45362fe855d96dd26c2276e3b942ba68cf86bafe1844cfdd6bfc96235b9cb2d8ed882c757a62228a4fb90b8fe04fc73108d7735dc361acce6abb3c29f18854327d0b8e9007e5d80d144a6b88c0221eaca4d632bd072ad8d5c73e7952561975"}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r7}, 0x38) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x5) 18:02:38 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffb) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x14, r5, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r5, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffa}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4c800}, 0x4000040) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:38 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}, @NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) [ 560.720995][ T28] audit: type=1804 audit(1595268158.788:216): pid=27016 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/446/bus" dev="sda1" ino=15842 res=1 errno=0 18:02:38 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 560.872233][ T28] audit: type=1804 audit(1595268158.788:217): pid=27015 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir194387852/syzkaller.kcCkwh/565/bus" dev="sda1" ino=15777 res=1 errno=0 [ 560.901923][T27019] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:02:39 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) lseek(r0, 0x4200, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffb) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x4000}, 0x0, 0xfffffffffff7ffff, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r2}, 0x38) [ 561.108026][ T28] audit: type=1804 audit(1595268158.848:218): pid=27014 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/446/bus" dev="sda1" ino=15842 res=1 errno=0 [ 561.163529][ T28] audit: type=1804 audit(1595268159.118:219): pid=27014 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/446/bus" dev="sda1" ino=15842 res=1 errno=0 [ 561.195188][ T28] audit: type=1804 audit(1595268159.128:220): pid=27017 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir194387852/syzkaller.kcCkwh/565/bus" dev="sda1" ino=15777 res=1 errno=0 18:02:39 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0xa, 0x80000, 0x4) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000080), &(0x7f0000000100)=0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffb) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000300)=ANY=[@ANYBLOB="0180000000000000ff07000000000000020000000001000007000000000000000000000000000000ffff00000000000006000000000000000000000000000000000000000000000014000000000000000000000000000000ff0f0000000000000001000000000000070000000000000000000000000000000000000000000000020300000000000000000000000000001f00000000000000b03a0000000000009e00000000000000000000000000000000000000000000000200000000000000000000000000000000000080000000000700000000000000080000000000000000000000000000040000000000000000000a00000000000000000000000000000300000000000000ff070000000000001772000000000000000000000000000000000000000000008d00000000000000000200000000000000000000003002000400000000000000e2e40000000000000000000000000000000000000000000080000000000000000000000000000000000080ff3f00000036000000000000000900000000000000000000000000000000000000000000000a3100"/424]) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 561.378865][ T28] audit: type=1804 audit(1595268159.448:221): pid=27030 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir194387852/syzkaller.kcCkwh/566/bus" dev="sda1" ino=15748 res=1 errno=0 [ 561.601711][ T28] audit: type=1804 audit(1595268159.668:222): pid=27043 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/447/bus" dev="sda1" ino=15842 res=1 errno=0 18:02:39 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}}}, 0x78) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = gettid() tkill(r3, 0x33) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x43}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r4, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r5}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r3, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000180)='\x00', r5}, 0x30) r7 = gettid() tkill(r7, 0x1000000000016) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000200)={{0x3, 0x0, r0, r1, r2, 0x1c6, 0x1}, 0x0, 0x0, 0x2, 0x7fff, 0x7, 0x7, 0xf9a1, 0x40, 0xfffa, 0x4, r6, r7}) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r8}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) [ 561.698834][ T28] audit: type=1804 audit(1595268159.768:223): pid=27030 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir194387852/syzkaller.kcCkwh/566/bus" dev="sda1" ino=15748 res=1 errno=0 [ 561.728913][T27019] device bond222 entered promiscuous mode 18:02:39 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) accept4$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000000c0)=0x10, 0x80800) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) read$usbmon(r3, &(0x7f0000000200)=""/247, 0xf7) sendfile(r3, r3, 0x0, 0x8080ffffff7e) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0x0, 0x801, 0x1, 0x1}}, 0x26) r4 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r4, r4, 0x0, 0x8080ffffff7e) connect$llc(r4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:02:39 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0}, 0x38) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffb) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) [ 561.783460][T27019] 8021q: adding VLAN 0 to HW filter on device bond222 [ 561.791890][ T28] audit: type=1804 audit(1595268159.818:224): pid=27069 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/447/bus" dev="sda1" ino=15842 res=1 errno=0 18:02:39 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) recvmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)=""/225, 0xe1}], 0x1}, 0x12122) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:39 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffb) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x0, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:02:40 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 18:02:40 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x9ee6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x54, r6, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)={0x138, r6, 0x2, 0x70bd2c, 0x25dfdbff, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000011}, 0x40000) 18:02:40 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x8001, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x37}}}, 0x32) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3, 0x0) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) read$usbmon(r3, &(0x7f0000000200)=""/247, 0xf7) sendfile(r3, r3, 0x0, 0x8080ffffff7e) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) [ 562.201009][T27090] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:02:40 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffb) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:41 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffb) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002400071fa66dd6b6cd7f463705000001", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x40, 0x2, [@TCA_RSVP_PINFO={0x20}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_RSVP_CLASSID={0x4}]}}]}, 0x70}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@delneigh={0x24, 0x1d, 0x0, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, 0x20, 0x10, 0x2}, [@NDA_MASTER={0x8, 0x9, 0x80000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:02:41 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffb) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000080)='net_prio.ifpriomap\x00', 0x2, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 563.026425][T27090] device bond223 entered promiscuous mode [ 563.055273][T27090] 8021q: adding VLAN 0 to HW filter on device bond223 18:02:41 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x8080) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:02:41 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x78) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffb) fstatfs(r4, &(0x7f0000000180)=""/157) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r5}, 0x38) [ 563.155439][T27145] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 18:02:41 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) [ 563.318046][T27142] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 18:02:41 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="3ec717c6919b08ca58c698dc55b3fc9ce97d1e8ea8192f402c131af3b4", 0x1d}, {&(0x7f0000000100)="bd9bdd1f7641ca7e2ab2b3361e53c00a46", 0x11}, {&(0x7f0000000300)="faa348b04ed8fb8a044fcc33cf9f5f93db7255d9fd5273793d3312d88a1318f7f29c0d3fdd5e0c6a6613674a978ee438fed8eb484b585b60d5986754f0c77e9fd5f310a46621985efbcf56db9e3bd8456cadb57d50edf167d32e7656d1c677bda5eafe8a1d74d4e96effb3e68940df765ceebfe0679ea0df0a426569b10397db95e6ab94981a61e118c09952673f81dcd8f463b8738b39e0a776fe4bb4302342c5b03b6c6b7970b5e2eee1620f795b484d73bb32e9374b48c2a03c50de6880abca6def4aefe4007686234dc7610b2a76", 0xd0}], 0x3, &(0x7f0000000180)=[@ip_retopts={{0x50, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0xda, 0x3, 0x3, [{@rand_addr=0x64010100, 0x7}, {@loopback, 0x80000000}]}, @rr={0x7, 0x13, 0x87, [@empty, @rand_addr=0x64010100, @empty, @rand_addr=0x64010100]}, @lsrr={0x83, 0x17, 0x42, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3c}, @remote, @multicast1, @rand_addr=0x64010101]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x59}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x80}, 0x40080) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000) lseek(0xffffffffffffffff, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x8400fffffffb) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x14, r5, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5c00a5eb76990000", @ANYRES16=r5, @ANYBLOB="20002dbd7000fbdbdf250800000008000b00e0ffffff05003000010000000800310000000000050029000000000005003000fd00000005002d000100000008003a00b684000008003400800000000600280003000000"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 18:02:41 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000080)={0x3, 0x7f}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 563.502113][T27160] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:02:41 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0xffffffff, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffb) setsockopt$inet6_tcp_buf(r3, 0x6, 0x1a, &(0x7f0000000100)="be8fed94fa9054644ace9af09ce23900f6038f9fd79a61d09a47c25592528221592353056064bdd54fd55ef1aa9cd7e593fb980e150f22d7a9b9fe906483c7fac7deec6c892ad2ada8aaff51a6f68546b05cd6140e171e149a0490319012356a82000c58116bac44be68098af8749c9a17e643006a164d36195f98facf30c96cbe79", 0x82) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) lseek(0xffffffffffffffff, 0x4200, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x8400fffffffb) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000300)) 18:02:42 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB], 0x14}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002400071fa66dd6b6cd7f463705000001", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x40, 0x2, [@TCA_RSVP_PINFO={0x20}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_RSVP_CLASSID={0x4}]}}]}, 0x70}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x48010) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r5}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:02:42 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000000)="04", 0x10, r0) keyctl$assume_authority(0x10, r0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r1}, 0x38) 18:02:42 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) read$usbmon(r3, &(0x7f0000000200)=""/247, 0xf7) sendfile(r3, r3, 0x0, 0x8080ffffff7e) ioctl$IMHOLD_L1(r3, 0x80044948, &(0x7f0000000080)=0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:02:42 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x6, 0x210080) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000300)={0x41bc, {{0xa, 0x4e24, 0x4, @mcast1, 0x5}}, {{0xa, 0x4e22, 0x8, @mcast2}}}, 0x108) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x492492492492805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r2, 0x1, 0x10}, 0xc) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000180)={r2, 0x1, 0x5, 0x400}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000440)={r3, 0x4}, 0x8) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) getsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000100)=[{}], &(0x7f0000000140)=0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 564.357182][T27160] device bond224 entered promiscuous mode [ 564.403687][T27160] 8021q: adding VLAN 0 to HW filter on device bond224 [ 564.481276][T27178] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 18:02:42 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 18:02:42 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000080)=0x7c07, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) lseek(0xffffffffffffffff, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x8400fffffffb) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x492492492492805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000000)={r5, 0x1, 0x10}, 0xc) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)={r5, 0x26, 0x7, [0x7f, 0x6, 0x8000, 0xdf7, 0x7, 0x7, 0xff]}, &(0x7f0000000140)=0x16) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80c20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r2, 0x1) connect$inet6(r2, &(0x7f0000000040)={0xa, 0xfffe, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2000a}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r6, 0x54a1) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:42 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0}, 0x38) 18:02:42 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x1c000, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, 0x13, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040040) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000) lseek(0xffffffffffffffff, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x8400fffffffb) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000440)) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="ff000000", @ANYRES16=0x0, @ANYBLOB="20002bbd7000fbdbdf25020000000c00018008000300020000000c0001800800030000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x4000080) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 564.863706][T27187] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 564.901565][T27233] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:02:43 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x88400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) lseek(r0, 0x4200, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffb) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffb) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)=r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r4}, 0x38) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002400071fa66dd6b6cd7f463705000001", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x40, 0x2, [@TCA_RSVP_PINFO={0x20}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_RSVP_CLASSID={0x4}]}}]}, 0x70}}, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x16}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000300)="55afe09b18328d082e3fdb45a2879b8d628a1c75c836ba95ff523bec472bf378e0172e6d922b4ec2160f135174a74f523cf066701b67daa65317e16631e0a3cc1911859b22c18c62f28c2faf0deea5c9fd0f5f90a0016e40279c1f24d1a438a8af7d09d488a90d569387ac52e93916f8b6dcbbc6678684738c3a1e957f84b355aed80ff87ec57379c196429561d99cc718caedd2c34ba56560e6a94eda591a7c63cffbc36d1fb99d65726855e6a25c77eb3fe28f379766bf3bcd121f5b782609a15ef4", 0xc3}, {&(0x7f0000000180)="8a09fa8319fbca2a28e16f003ce0c2e2554c22aa3cad12e1029a337ee797588b24be318fb375c3f2de445146b66c63528e9bb601104025815ae330d257f30efe273d87a2f7a4e4624f9aa5d4f40acc2d3bb5540c48a518f963e62a3319605a8cafd107a4436b4461269af436c7664c9ca3476e85381e9e663cd841ac1d189f092a8edba4b7cdeaee094b40e4c362a2607b38ce5e550015abeccb98f9a6e2b3cd9feae0b9cb5b48d60108d642f0", 0xad}, {&(0x7f0000000400)="754395a67b117bc7786a88d29caaf610bbb48ff500fa4952ec5f5481f39bd524fa35997bbf1ea37b7bc65b89f8bc36cb252573316f277507af13dcef9e64163d3688dcc3d47b466a84351929e6b6575b1476adbe83a45026fadc1051b3a94350f9bbbd0c640dabca83ad9faf01118e749b7750930ed58938ae2d49b8a10258411e4b4bdf88add5432ed6bc38663068c7c10842ded2d57a0bcb7f655ba2efff80f6071ef8f682a7b76c5db657f01800e36567312032a1187a90c48996ec58652565390820dabd35983b9e9b1b52", 0xcd}], 0x3, 0x0, 0x0, 0x40}, 0x2000c890) 18:02:43 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) lseek(r0, 0x4200, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffb) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000080)=""/190) syz_extract_tcp_res(&(0x7f0000000180), 0xfff, 0x5) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r2}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) ioctl$CHAR_RAW_FRASET(r1, 0x1264, &(0x7f0000000000)=0x8) sendto$x25(r1, &(0x7f0000000140)="f120a488a7d30b3b1597fe85d415654ea9cf14fdc6941f7dac", 0x19, 0x8000, 0x0, 0x0) 18:02:43 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x300, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) write$binfmt_aout(r2, &(0x7f00000007c0)={{0x107, 0x3, 0xe0, 0x2f5, 0x3d5, 0x2, 0x396, 0x1}, "2117640c01e3ef17dbb5053912d15e28c06cb1594b9d402e962f9c7c0e449cf7182b57abd6b52fdc08cb45fa1b9b863a3d5cc8b6154c03c7440dc01a722ba9059c1161c1aeba3c474bca85deb9bee4ea86a81b5d7071b7c2783f75a6e6566e8e84343d8c1179beb7c3dfef66f0aa83fc94fbccdb6b95894a251d6f13d11a93f67526e4697a48fb3337c8071f82d6436e9ed5af7bff8f51b2b802ed35b218caa26a0e61793886f23b3a55153b", [[], [], [], [], [], []]}, 0x6cc) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000300)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0}, 0x38) [ 565.267899][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 565.267913][ T28] audit: type=1804 audit(1595268163.338:243): pid=27248 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir194387852/syzkaller.kcCkwh/571/bus" dev="sda1" ino=16338 res=1 errno=0 [ 565.319868][ T28] audit: type=1804 audit(1595268163.338:244): pid=27248 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir194387852/syzkaller.kcCkwh/571/bus" dev="sda1" ino=16338 res=1 errno=0 18:02:43 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x100, 0x88) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000300)={0x0, @win={{0x7, 0xfffffff9, 0x6, 0x2}, 0x5, 0x70800000, &(0x7f0000000100)={{0x4, 0x2, 0xffff7fff, 0x40}, &(0x7f00000000c0)={{0xf5, 0x2}}}, 0x811, &(0x7f0000000140)="39cbba4b3b60fcb8796ad5ec93e8c24a3c7f08d1203a8910b51e8481d5cf9d6771e9a5c55cb1524bb853be810e6c0aaef0ca06cdedd169d61c25fb0c614f94fb143405cd3bef41f53be378e9320ff79c172b52d71ea7a6c2fd92fa949632b18dfd6b595bdc3351f1df2153f78a48adc6016e3d41beb9a8d081bf5722664121864911df0762851bf431e0587c", 0x80}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:02:43 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f00000003c0)=""/184) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) write$cgroup_freezer_state(r2, &(0x7f0000000080)='FROZEN\x00', 0x7) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7558376, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x82843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x200000000, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r4 = creat(&(0x7f0000000380)='./bus\x00', 0x12) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffb) ioctl$BLKPG(r4, 0x1269, &(0x7f00000001c0)={0x9, 0xffffd77b, 0xa1, &(0x7f0000000100)="76fcd50d224e49fdcfa1697c53a2d925629f050db03802f41fbadd4c39a344a6862b75f2db920ef0579e885eb18a8a76e03d46e2338e0974b2c41104b683c4862e7196720d30b754de19a888d8e35782e16b6d34b36a63b4b20c1fc1ef59bc55688bba548f4a6c442d2f79ec7d7aa6519c23046d3ee44900ddc8ba3b0512e81c6cff0645f9848a43d0a3e0b9d25fa827738cae98d4a35586726d1f19bd530c0638"}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 565.489388][ T28] audit: type=1804 audit(1595268163.338:245): pid=27246 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir194387852/syzkaller.kcCkwh/571/bus" dev="sda1" ino=16338 res=1 errno=0 [ 565.658480][T27233] device bond225 entered promiscuous mode [ 565.686360][T27233] 8021q: adding VLAN 0 to HW filter on device bond225 [ 565.698636][ T28] audit: type=1804 audit(1595268163.388:246): pid=27244 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/452/bus" dev="sda1" ino=16211 res=1 errno=0 [ 565.774976][ T28] audit: type=1804 audit(1595268163.478:247): pid=27257 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir212127951/syzkaller.ICdwwA/600/bus" dev="sda1" ino=15737 res=1 errno=0 18:02:43 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) read$usbmon(r3, &(0x7f0000000200)=""/247, 0xf7) sendfile(r3, r3, 0x0, 0x8080ffffff7e) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa4, 0x9, 0x6, 0x301, 0x0, 0x0, {0x3}, [@IPSET_ATTR_ADT={0x84, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:02:43 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0xd8, 0x4, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x81}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}]}, @NFTA_CHAIN_HOOK={0x78, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x76c11d3e}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x51919c96}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x43d745dd}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3ef68398}, @NFTA_HOOK_DEV={0x14, 0x3, 'virt_wifi0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'team0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gretap0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1b5343a7}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}]}, 0xd8}, 0x1, 0x0, 0x0, 0x24004000}, 0x4815) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000300)="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", 0x15d}]) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x4, 0x3, 0x3, {0xa, 0x4e24, 0xffffffff, @mcast2, 0x6}}}, 0x32) r5 = open(0x0, 0x141042, 0x0) read$usbmon(r5, &(0x7f0000000200)=""/247, 0xf7) sendfile(r5, r5, 0x0, 0x8080ffffff7e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:44 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) [ 565.996684][ T28] audit: type=1804 audit(1595268163.898:248): pid=27297 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/453/bus" dev="sda1" ino=16384 res=1 errno=0 18:02:44 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) lseek(r1, 0x4200, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffb) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000000)) 18:02:44 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000300)="6a8d9047f8eacbe8e21d06a3ec68c1ca283b5e6a08e9fd350fb14cd22196d07943e0f6c3f68c81a2673fb67b6f51ef68d939f25bf263f4a0abc5b3dd18c9613d2efa7768d890e9688d7d28c8dbd12a4cacbf4462b8f34b2a33b7959da90514721300e577035c38af9174f3baee460b5286d6c56adc7e62fbac85eec984c71be6f2ed3c8a487ef8cf892675a8b29daa238fe4bc5e554269e913f5abb811abb239267cb224c10a80787f8b974c42f12caf483e9d8d9490f102854f414a607dabbf8792c72dc4bcbf7bbb619b2a8a446e11f2231d2c0f21ad1b760a11f817c4e2399b96892868f46aebfd000bc0809465303fb62afd79ff322260c280", 0xfb, 0xfffffffffffffffb) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xb23, 0x511080) read$usbfs(r1, &(0x7f0000000080)=""/132, 0x84) getgid() bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0}, 0x38) [ 566.100938][T27306] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 566.138135][ T28] audit: type=1804 audit(1595268164.098:249): pid=27257 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir212127951/syzkaller.ICdwwA/600/bus" dev="sda1" ino=15737 res=1 errno=0 18:02:44 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) write$apparmor_current(r2, &(0x7f0000000080)=@profile={'stack ', '/)\x00'}, 0x9) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r4 = open(0x0, 0x141042, 0x0) read$usbmon(r4, &(0x7f0000000200)=""/247, 0xf7) sendfile(r4, r4, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:44 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000080)) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) read$usbmon(r5, &(0x7f0000000200)=""/247, 0xf7) sendfile(r5, r5, 0x0, 0x8080ffffff7e) ioctl$SNDRV_PCM_IOCTL_UNLINK(r5, 0x4161, 0x0) [ 566.508957][ T28] audit: type=1804 audit(1595268164.138:250): pid=27294 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/453/bus" dev="sda1" ino=16384 res=1 errno=0 [ 566.865441][ T28] audit: type=1804 audit(1595268164.478:251): pid=27317 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir212127951/syzkaller.ICdwwA/601/bus" dev="sda1" ino=16381 res=1 errno=0 18:02:45 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffb) getpeername$netrom(r3, &(0x7f0000000080)={{0x3, @netrom}, [@rose, @rose, @default, @null, @bcast, @remote, @bcast, @bcast]}, &(0x7f0000000100)=0x48) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:02:45 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x103a42, 0xab) read$usbmon(r1, &(0x7f0000000200)=""/247, 0xf7) sendfile(r1, r1, 0x0, 0x8080ffffff7e) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x39, 0x5}}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0}, 0x38) 18:02:45 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x80, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) [ 567.110553][ T28] audit: type=1804 audit(1595268164.848:252): pid=27318 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir212127951/syzkaller.ICdwwA/601/bus" dev="sda1" ino=16381 res=1 errno=0 [ 567.131013][T27306] device bond226 entered promiscuous mode [ 567.195982][T27306] 8021q: adding VLAN 0 to HW filter on device bond226 18:02:45 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 18:02:45 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x80000, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0x2, 0x4, 0x1, {0xa, 0x4e21, 0x81, @private1={0xfc, 0x1, [], 0x1}, 0xfff}}}, 0x3a) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x87177ef931406688, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0xea82}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x1, 0x4044800) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffb) getpeername$qrtr(r4, &(0x7f0000000080), &(0x7f0000000100)=0xc) 18:02:45 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) getpeername$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000100)=0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_bp={&(0x7f0000000300), 0x3}, 0x0, 0x0, 0x0, 0x0, 0xef0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffb) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000440), &(0x7f0000000480)=0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x80000, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) read$usbmon(r4, &(0x7f0000000200)=""/247, 0xf7) sendfile(r4, r4, 0x0, 0x8080ffffff7e) sendmsg$NFT_MSG_GETGEN(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, ["", ""]}, 0x14}}, 0x44) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 567.623576][T27374] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:02:45 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) ioctl$TCFLSH(r0, 0x540b, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r2}, 0x38) 18:02:46 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x3) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000100)="36662a8012a15d027a3b65df559704f15217a0c796a9aea6658b2860d4d4be99c619488783025fda0988817acb289f74510676d7863466ef2015ae4908f4c9120d23a7a523d16e4bdab9f206c3c6c7e1386f53772bf86762a1901711758b30298079499ef77a27b3695818a8aab0d94519029953ca1f873832274a303baac357d4a53b60bb10df2616a5abc63ffd2447ca168b", 0x93) sendmmsg(r2, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0, 0x0, 0x0, 0x0, 0x3800}}], 0xc6, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvme-fabrics\x00', 0x8000, 0x0) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000340)=""/131) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x10100, 0x0) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:46 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @empty, @private=0xa010101, @local, @empty}}}}, &(0x7f00000000c0)={0x1, 0x2, [0x33f, 0xa29, 0xe93, 0x9fa]}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:02:46 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000000)="04", 0x10, r1) keyctl$set_timeout(0xf, r1, 0xfffffffffffffffc) [ 568.403114][T27374] device bond227 entered promiscuous mode [ 568.459675][T27374] 8021q: adding VLAN 0 to HW filter on device bond227 18:02:46 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 18:02:46 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:auditd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x64}, 0x1, 0x0, 0x0, 0x840}, 0x8004011) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 568.992416][T27443] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:02:47 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x441be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x40000000000, 0xfffffffe, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:47 executing program 2: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) bind$netrom(r0, &(0x7f0000000080)={{0x3, @default, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r4 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r4, r4, 0x0, 0x8080ffffff7e) connect$llc(r4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) ioctl$SIOCGIFMTU(r2, 0x8921, 0x0) 18:02:47 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000180)=""/245, 0xcd, &(0x7f0000000000)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0}, 0x38) 18:02:47 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) lseek(r0, 0x4200, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x4a143, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffb) fsinfo(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0xf, 0x800, 0x1, 0x9, 0x40ad, 0x80000001}, 0x20, &(0x7f00000000c0)=""/235, 0xeb) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffb) write$P9_RXATTRWALK(r3, &(0x7f00000001c0)={0xf, 0x1f, 0x1, 0x4}, 0xf) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r4}, 0x38) ioctl$FBIOBLANK(r3, 0x4611, 0x4) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:02:47 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x492492492492805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000000)={r5, 0x1, 0x10}, 0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000140)={r5, 0xb4c8, 0x9}, 0x8) sendfile(r2, r3, 0x0, 0x8400fffffffb) ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f0000000080)={0x6, 0xfffffffc}) 18:02:47 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fsopen(&(0x7f0000000080)='ufs\x00', 0x1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$pppl2tp(r0, &(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x4, 0x2, 0x3, {0xa, 0x4e22, 0x2, @empty}}}, 0x32) r3 = open(0x0, 0x141042, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x1, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x70, 0x0, 0x9, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x5}, @NFCTH_TUPLE={0x20, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x20}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7fff}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x81}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) read$usbmon(r3, &(0x7f0000000200)=""/247, 0xf7) sendfile(r3, r3, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) process_madvise(r5, &(0x7f00000005c0)=[{&(0x7f0000000380)="d71eb0b094aef1060277d69f9c01a828e091345a002eabe3710ee03596882a927913c170a24974c388df28812412679abcd0a479589e03d4857f3d9a6f47aae192346ba7ea7c5b43ef29c5bbb1d911e9342820e7dabff73a01c1272a2f1caf189a9b", 0x62}, {&(0x7f0000000400)="aba198baef89eaaaadce4ab9c79cacdc857bb1c5d3e4f43a82b5e29ead06b00f5f2481033b9667a5e5ee8ab9fb7a93739928a9e2c72798e63d7a17c7412d6f367d6908327d9ba427", 0x48}, {&(0x7f0000000480)="5b8fa64bc5fc38b2", 0x8}, {&(0x7f00000004c0)}, {&(0x7f0000000500)="45d007dbee2b60d1590d8c2dc8feedd99c6aa538743845540e0abbfa06a921e97891cfb7a549b0d04e8ba52c76e6af3d2099ac5e62364f750b66363b940ef0a92893ae26330c917d1824c4ebae3cb9cb64286a28e62b37302765a93de7c163fa99f19f68a86f5d2e1a0c79ff621069aa884a12deecad71719196ddef4204dc9e5a9a3c8dc2d5b25279b7af3ac1631741e92dc19829764e30fcae0a1f3d7bd1bc132034209682b97022d974288ecb5391c1e8d6f2a0c35f3a87a74a13b8849f2b", 0xc0}], 0x5, 0x4, 0x0) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 569.776313][T27443] device bond228 entered promiscuous mode [ 569.790972][T27443] 8021q: adding VLAN 0 to HW filter on device bond228 18:02:48 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) [ 570.116301][T27508] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:02:48 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x94, r2, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x13c0fba7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x20044000) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) read$usbmon(r3, &(0x7f0000000200)=""/247, 0xf7) sendfile(r3, r3, 0x0, 0x8080ffffff7e) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000300)={0x0, @tipc=@id={0x1e, 0x3, 0x2, {0x4e23, 0x4}}, @ax25={0x3, @null}, @vsock={0x28, 0x0, 0x2710}, 0xb4c7, 0x0, 0x0, 0x0, 0x6365, &(0x7f0000000200)='vlan0\x00', 0x10000, 0x809b, 0xcc}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x80001, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r4}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:02:48 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000926000/0x3000)=nil, 0x3000, 0x0, r1) pkey_free(r1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x111000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f00000000c0)=r5, 0x1) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:02:48 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x10, 0xfffffc01, 0x3e, 0xc, 0x0, 0xffffffffffffffff, 0x4, [], 0x0, 0xffffffffffffffff, 0x0, 0x20001}, 0x40) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0}, 0x38) inotify_init() 18:02:48 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2, 0x0, 0x4}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80301, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_bp={&(0x7f0000000080), 0x5}, 0x3061, 0x4000000, 0x200, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 570.512545][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 570.512559][ T28] audit: type=1804 audit(1595268168.578:262): pid=27529 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/458/bus" dev="sda1" ino=15858 res=1 errno=0 18:02:48 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/5, 0x5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) pwritev(r1, &(0x7f00000005c0), 0x0, 0x10001) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000000000f000007050003008800"/28], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x112, &(0x7f0000000240)="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"}}], 0x1c) inotify_init1(0x80000) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:02:48 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:02:48 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x3, 0x70, 0xfc, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x3000}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x48000000000000, 0x40) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000007c0)={{0x8, 0x1, 0x1, 0x7, '\x00', 0xbf02}, 0x1, [0x1a, 0xff, 0x0, 0x3ff, 0x7, 0x4, 0x57, 0x8001, 0x0, 0x7, 0x0, 0xe9aeace, 0x4, 0x5, 0x8, 0x8, 0x3f, 0x3f, 0x401, 0x12c0, 0x4, 0xff, 0x1, 0xd2f, 0x20, 0x80, 0x1, 0x6, 0x100000000, 0x3, 0x6, 0x7, 0x20, 0x3ff, 0x0, 0x7, 0x1, 0x8, 0x1, 0x8001, 0x8000, 0x80000000, 0x1d5533ff, 0x400, 0x100d8, 0x2, 0x80, 0x0, 0x10000, 0x1, 0x10000, 0x9, 0x6, 0x1, 0x9, 0x2103089, 0x0, 0x4, 0xe297, 0xfffffffffffffe01, 0x9, 0xf800000000000000, 0x4, 0xfff, 0xfffffffffffffff9, 0x0, 0xcce, 0x3e6, 0xfffffffffffffff8, 0x5, 0xffff, 0x8, 0x8001, 0x2, 0x2, 0x97a, 0x211, 0xffff, 0x800, 0xcba, 0xd97, 0x3f, 0x1, 0x1, 0x1000, 0x100, 0x3f, 0x200, 0x8001, 0x1f, 0x1f, 0xabbb, 0x385, 0xedcd, 0x80, 0x9, 0x6, 0xfc5, 0x401, 0x0, 0xfffffffffffffffb, 0x800, 0x9, 0x3, 0x401, 0x9, 0x6, 0xffffffffffffff00, 0x2010000, 0xfffffffffffff6c7, 0x81, 0xfff, 0x10001, 0x6, 0x0, 0x3933, 0xfffffffffffff3c0, 0x3, 0x1000, 0x3ff, 0x10000, 0x0, 0x0, 0x4, 0xd, 0x4, 0x6, 0x2]}) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)="2a0b485ce13b47a069cbb8b6b6ae8cf5ad224332fedeb7e20d1c870bbb1a09cc38", &(0x7f0000000240), 0x1081, r3}, 0x38) [ 570.890795][T27508] device bond229 entered promiscuous mode [ 570.927541][T27508] 8021q: adding VLAN 0 to HW filter on device bond229 18:02:49 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x7, 0x200000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)=""/79, 0x4f}], 0x1}, 0x2000) lseek(0xffffffffffffffff, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x8400fffffffb) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x3}, {0xa, 0x0, 0x0, @mcast1}, r5}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000480)={0x15, 0x110, 0xfa00, {r5, 0x0, 0x0, 0x0, 0x0, @ib={0x1b, 0x6, 0x8, {"d97f179c25e74c9420238ac31b962565"}, 0x2, 0x95, 0x4000000}, @in6={0xa, 0x4e24, 0x49, @private0, 0x6}}}, 0x118) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x58, r6, 0x410, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2e}}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0x58}}, 0xc081) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r6, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x24}, 0x48080) 18:02:49 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 18:02:49 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2, 0x0, 0x1}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) socket$rds(0x15, 0x5, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0x2, 0x8800) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffb) r5 = openat2(r4, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0xa040, 0x9, 0x10}, 0x18) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000300), 0x2) getpeername$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) 18:02:49 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x200, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000100)={{0x3, 0x5}, {0x81, 0x4}, 0x9, 0x1, 0x1}) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r3 = open(0x0, 0x141042, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_user\x00', 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f00000001c0)={0x2, 0x1f}, 0x2) read$usbmon(r3, &(0x7f0000000200)=""/247, 0xf7) sendfile(r3, r3, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 571.329271][T27583] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 571.486269][ T28] audit: type=1804 audit(1595268169.559:263): pid=27593 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/460/bus" dev="sda1" ino=16383 res=1 errno=0 18:02:49 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x115240, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x492492492492805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) read$rfkill(r2, &(0x7f00000001c0), 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000000)={r5, 0x1, 0x10}, 0xc) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f00000000c0)={r5, 0xb3, "0a056ce798f5593c85518dfce7cc5f0c1d5a00a36e74c870ca3ca4ad8e874ae8d9765dc91eaa5d384c67d0420c806d878aac1a168d7a78d80c2dafdb04d9e74e04be4bebbb9d880243d5ae5a43f3d3df07e440929ce6e482e00818e023ddb13ecf33ab860bd06c352dd6fea1a93ce82fd61fe5c6c99d4166fbcc546668fe05961d62a2f1b0bdd8531c6fe50ea4d2eb682d21f0373dcdff2974e6dbc03d79aed9d696b040fd7dc5af760148e1ee4bd26e848be0"}, &(0x7f0000000180)=0xbb) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:02:50 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_netdev_private(r0, 0x89f6, &(0x7f00000007c0)="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") r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) read$usbmon(r1, &(0x7f0000000200)=""/247, 0xf7) sendfile(r1, r1, 0x0, 0x8080ffffff7e) sendto$unix(r1, &(0x7f0000000300)="601fb97e3740da1379b522d7fad00e511bd9f14c58a51b9301e1156f67a09cf8d7580a2081a6e1f06cdaddf070d267b7fb9f8979b018e1c652995d16903d09b5c9673891df146a204b0cd7cbb38362c8c904e6bfc4bc13e4abdb5bf45ba62cdce603b35e46c78efb79cf7d2e984ba7119e3c2af6adaec23de8c2fb0bd38735bed84949bec4ac554e97d619e49b65a2ef04079ace1b317f410654fd1afe97fe0d2fdc0ffa5cf3b7a76f9deba8e4e2464bbb0ff0001fbfc261baa592aca37c2352b846130c85d533611b205ce0779d5f64574d16abd443", 0xd6, 0x4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r2}, 0x38) [ 572.210487][T27583] device bond230 entered promiscuous mode [ 572.284340][T27583] 8021q: adding VLAN 0 to HW filter on device bond230 18:02:50 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4}, 0x0, 0x0, r2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffb) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) read$usbmon(r5, &(0x7f0000000200)=""/247, 0xf7) sendfile(r5, r5, 0x0, 0x8080ffffff7e) ioctl$SIOCGIFMTU(r5, 0x8921, &(0x7f00000000c0)) 18:02:50 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000140)=@v2={0x2000000, [{0x0, 0x200}, {0x1, 0x4f000000}]}, 0x14, 0x3) 18:02:50 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) [ 572.657267][ T28] audit: type=1804 audit(1595268170.729:264): pid=27648 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/461/bus" dev="sda1" ino=15748 res=1 errno=0 [ 572.787802][ T28] audit: type=1804 audit(1595268170.739:265): pid=27648 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/461/bus" dev="sda1" ino=15748 res=1 errno=0 [ 572.790202][T27652] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 572.846541][ T28] audit: type=1804 audit(1595268170.909:266): pid=27648 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/461/bus" dev="sda1" ino=15748 res=1 errno=0 [ 573.377888][T27652] device bond231 entered promiscuous mode [ 573.411785][T27652] 8021q: adding VLAN 0 to HW filter on device bond231 18:02:51 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) read$usbmon(r1, &(0x7f0000000200)=""/247, 0xf7) sendfile(r1, r1, 0x0, 0x8080ffffff7e) ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000000080)=""/98) 18:02:51 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:51 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffb) r4 = socket$caif_seqpacket(0x25, 0x5, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @empty}, 0x2, 0x0, 0x0, 0x20}}, 0x2e) r5 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r5, r5, 0x0, 0x8080ffffff7e) connect$llc(r5, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000780)=ANY=[@ANYBLOB="0200000000000000907c7aead11a7326000000000000000000000000000000000000000000000000390000004b63c40664feff93cf28ac7c5bb8e0f75ef66b60d69d58ca371d7e74e4e13c64fa9a24feca97e4c10305d9b00eebf2d4551157302a669966c791ec8c0b5c95329789a940c14fc5721569eb2b5e796154a44b4f8fec634b53e1e7e04adc9bb11eb77748632dceb987488e56af34a6a184d4bec8a4910b76b9a1ea850b29a0cd9a1a4205c1fd", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000197d860452788adef656352ed5cdfc58d8f70460e0ddcda52c6f4901b6fae44fde1458c34a20581e39026c794208aa7bb74e5ba25d056228fe"]) keyctl$dh_compute(0x17, &(0x7f00000000c0), &(0x7f0000000100), 0x0, &(0x7f0000000300)={&(0x7f0000000140)={'blake2b-160\x00'}, &(0x7f0000000180)="3c2bb3a6095204b4bd07b779b9286b4fa57ee94b5b032c5c8002c684fd6b72363901b660fa5afd17663161e0980e9c6d081ff245668c0e7a62321dc5973bb6823f2c928fea1eb3ee7d34a5801f549db05c4ba1a82383007279b27233a9afbfa2ae6d", 0x62}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:02:51 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$USBDEVFS_RESET(r1, 0x5514) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffb) r3 = accept4$rose(0xffffffffffffffff, &(0x7f00000001c0)=@full={0xb, @dev, @netrom, 0x0, [@null, @remote, @remote, @rose, @rose, @netrom]}, &(0x7f0000000680)=0x40, 0x800) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f0000000200)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100"/14], 0x24}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffb) r6 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000006c0)=0x10) accept$phonet_pipe(r6, 0x0, &(0x7f0000000700)) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x260, r5, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x80e, @dev={0xfe, 0x80, [], 0x40}, 0xff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip6gre0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6c90}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xc8275af}]}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "71563b305081b57f6b47af5b8971903a89e4e639da1ce64e6d618493bf"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "9a2ad751b5bd90a4ae6926e86c2feb70dbe222e126f8d2cb7ceaf0f738eb117ce49a"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "5a7cb4bdce6c61a41ceb726c0f8634e841951fb89eae"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x82}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}]}, 0x260}, 0x1, 0x0, 0x0, 0xa081}, 0x40000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0}, 0x38) 18:02:51 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000002400071fa66dd6becd7f463705108d0dd5ffeb551ce6b21feca70001", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="700000002c00270d000000000000000000000000233bb03844e4041bd11dd2d122ae640d5bfd29afbe1f4ff16d68396f50d1652eb5cf63492880e5e05c74cb0f4db3752a00cf4f710b23c6be47a396103964abd3df9624a412364b27af2613a9", @ANYRES32=0x0, @ANYBLOB="0000000000000000080000000a000100727376703600000040000200200004000000000000000000000000000000000000000000000000000000000014000200200100000000000000000000000000010400010000000000"], 0x70}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="484b16d9c8f756080500000000000000000000009bbc61a6fca267454da1974bf582f36d7d4a1806422defeae763f0fd7a6100899a6bb16962642873833c95dfe14e6e7a0d95341cbdc01c025d7ec97530469f07f0e9af7c8aead7d0d503e380c3b000073fdc19637b693ecdb9db71b73805f246544c58a286de1ca26c8957a2068520ea83c4e6f8546accf51da55a9b0e462e7d379e66e8ed18d779fdbc9d4d29bd53b300854b3ced58dad2d244112a7462404242ec557c83ea62b052b1455937d88e1c8aa4d55b1f4b72c5d2cc1cd05e1075db7e990fee67", @ANYRESHEX, @ANYRES64], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002400071fa66dd6b6cd7f463705000001", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0x100, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x40, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{}, {}, 0x5c}}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_RSVP_CLASSID={0x8}]}}]}, 0x70}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x31, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4800}, 0x40) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext={0x80000001}, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:51 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_BYTES={0xc}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) [ 573.927629][ T28] audit: type=1804 audit(1595268171.999:267): pid=27703 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir364736473/syzkaller.Rispx1/401/bus" dev="sda1" ino=16373 res=1 errno=0 [ 574.026442][ T28] audit: type=1804 audit(1595268172.029:268): pid=27700 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir194387852/syzkaller.kcCkwh/580/bus" dev="sda1" ino=16381 res=1 errno=0 [ 574.028349][T27707] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:02:52 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='net/rt_acct\x00') getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002400071fa66dd6b6cd7f463705000001", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x40, 0x2, [@TCA_RSVP_PINFO={0x20}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_RSVP_CLASSID={0x4}]}}]}, 0x70}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@gettfilter={0x44, 0x2e, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xb, 0xa}, {0xfff1, 0x10}, {0x0, 0xe}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x8d2}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044000}, 0x4002845) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 574.152572][ T28] audit: type=1804 audit(1595268172.149:269): pid=27712 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir364736473/syzkaller.Rispx1/401/bus" dev="sda1" ino=16373 res=1 errno=0 18:02:52 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) read$usbmon(r3, &(0x7f0000000200)=""/247, 0xf7) sendfile(r3, r3, 0x0, 0x8080ffffff7e) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffb) sendmmsg(r4, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x1, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:02:52 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) ioctl$KVM_NMI(r3, 0xae9a) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:52 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) lseek(r0, 0x4200, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffb) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000)={0x2d}, 0x1) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x31aa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffb) ioctl$SIOCX25SENDCALLACCPT(r3, 0x89e9) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r2}, 0x38) [ 574.390150][ T28] audit: type=1804 audit(1595268172.189:270): pid=27714 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir194387852/syzkaller.kcCkwh/580/bus" dev="sda1" ino=16381 res=1 errno=0 18:02:52 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) lseek(r0, 0x4200, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffb) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) fcntl$dupfd(r0, 0x0, r2) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x0, 0xfffffffffffffd33) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r4}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) [ 574.603886][ T28] audit: type=1804 audit(1595268172.489:271): pid=27726 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir194387852/syzkaller.kcCkwh/581/bus" dev="sda1" ino=16378 res=1 errno=0 18:02:52 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_getres(0x3, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffb) bind$phonet(r5, &(0x7f0000000080)={0x23, 0xff, 0x8, 0x59}, 0x10) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, r2}]) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc, 0x110, r2}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r6}, 0x38) 18:02:52 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) pipe2$9p(&(0x7f0000000040), 0x100800) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000080)=0x9, 0x4) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x501003, 0x0) [ 574.781671][T27707] device bond232 entered promiscuous mode [ 574.811326][T27707] 8021q: adding VLAN 0 to HW filter on device bond232 [ 574.839877][T27722] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 18:02:53 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_BYTES={0xc}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) [ 575.120865][T27730] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 18:02:53 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/231, 0x4a, &(0x7f0000000240)={&(0x7f0000000140)={'sha512_mb\x00'}, 0x0, 0xfffffffffffffc8e}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) lseek(r0, 0x4200, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffb) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffb) r6 = pidfd_getfd(r2, r4, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)={0x7ff, 0x0, 0x4, 0x10, 0xfffffffd, {0x77359400}, {0x4, 0x0, 0x46, 0x4, 0x6, 0x7f, "eb3a3517"}, 0x101, 0x4, @offset=0xfffffbff, 0x40, 0x0, r6}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r7}, 0x38) [ 575.200990][T27789] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:02:53 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x55d3d55134a8b43d, 0x70, 0x76, 0x0, 0x8, 0x4, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4000000}, 0x1c4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:53 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffb) fdatasync(r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x6200, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:53 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000080)={0x80000000, 0x4}) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r4 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r4, r4, 0x0, 0x8080ffffff7e) connect$llc(r4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:02:53 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0}, 0x38) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffb) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000080)={'vxcan1\x00', 0x8}) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) read$usbmon(0xffffffffffffffff, 0x0, 0x0) [ 575.876272][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 575.876286][ T28] audit: type=1804 audit(1595268173.949:291): pid=27818 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir212127951/syzkaller.ICdwwA/609/bus" dev="sda1" ino=16371 res=1 errno=0 18:02:54 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xd}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 576.068119][T27789] device bond233 entered promiscuous mode [ 576.160572][T27789] 8021q: adding VLAN 0 to HW filter on device bond233 [ 576.238079][ T28] audit: type=1804 audit(1595268174.009:292): pid=27816 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir212127951/syzkaller.ICdwwA/609/bus" dev="sda1" ino=16371 res=1 errno=0 [ 576.310427][ T28] audit: type=1804 audit(1595268174.229:293): pid=27846 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir194387852/syzkaller.kcCkwh/583/bus" dev="sda1" ino=15891 res=1 errno=0 18:02:54 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_BYTES={0xc}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 18:02:54 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000080)={0x2, 0x8a, &(0x7f0000000100)="a6ece3631aea5e4a00a3d3fc5784724e46d25ad437b2db0500169e3ee05e97eaac181ce692841c256df0a8dddc0555d9e958b9ed498a61108aa4def270ef53361daebddd8f8e89d1d4b94aaa4a153b78de57b053e6e2d137b48d7cd8db6394219f92c53fcdbab18f5084fffd634b34134085b1cf7b421008e063f73ae98ab785d0cea9aa7874697d64f9"}) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) ioctl$sock_netdev_private(r1, 0x9, 0xfffffffffffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:54 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) lseek(r0, 0x4200, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffb) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x492492492492805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={r3, 0x1, 0x10}, 0xc) getxattr(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)=@known='trusted.overlay.opaque\x00', &(0x7f0000000300)=""/81, 0x51) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={r3, @in6={{0xa, 0x4e21, 0x3ff, @dev={0xfe, 0x80, [], 0x3f}, 0x40}}, 0x40, 0x40, 0x8, 0x4f, 0x81, 0x10c, 0x5}, &(0x7f0000000180)=0x9c) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x10}, 0x0, 0x0, 0x0, 0x0, 0x62}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r4}, 0x38) [ 576.409747][ T28] audit: type=1804 audit(1595268174.259:294): pid=27846 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir194387852/syzkaller.kcCkwh/583/bus" dev="sda1" ino=15891 res=1 errno=0 18:02:54 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffb) r4 = socket$bt_hidp(0x1f, 0x3, 0x6) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e23, @loopback}, 0x3, 0x1, 0x4}}, 0x26) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) r5 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4}, r5, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 576.568267][T27859] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 576.606690][ T28] audit: type=1804 audit(1595268174.309:295): pid=27800 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir194387852/syzkaller.kcCkwh/583/bus" dev="sda1" ino=15891 res=1 errno=0 18:02:54 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) r3 = socket(0x10, 0x80002, 0x0) lseek(0xffffffffffffffff, 0x4200, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x8400fffffffb) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)) sendmmsg$alg(r3, &(0x7f00000057c0)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="3e065c0012031634cf6b990e5d3f1b1b669a34e15ce14f28840342a5acc700cf888501b9165a0926debc57c22e5e730b203be9bead0f6fb7ea20d26200573f2a8cf252b32907355ff9a229264b6ff8817ac2321611a9a11af2438fc111b572882513d8381236720304ce556b748dd6d069bccf48795e74", 0x77}, {&(0x7f00000001c0)="f1726835a88f48abce9c6d2510253620285a45aea882173bfc3562035696ac2c28c6328ff2de6bbe752ac262a5d7b08e9d05c474f52911c190915151d5f9", 0x3e}, {&(0x7f0000000300)="711b32cc1151f6841d4a4c311ce0fb6894d1012ed7f9382270c4cdcee602b3e83a930ca71d2cbc1235c2f5d346aa4833d345fd9417efb453dabe39eb4d24b98932b0be9a388292fad90821601c11977856497bf4657b0e86bdf44215cd4e1147a2178b0eb686de628a414e9a6d65f6ff747830160acfecb21116e268302e7204ec133da5a772ad0ae7b7bfd1d479f94443adb2ec696e78a69a6d74274303bf202c7edcc77260d9d1921b", 0xaa}], 0x3}, {0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000400)="969549b061fa2c7a76d0407ee5a7bc16185fe5ca53931b1a7da5a3f893f1d731e9dc649c0e259189e4d8e8c32bf26136fae9e071eb2dd4b2405a82001f5cc07a1c692c10e78f753fd63dfdd9a058f412ad10053fc4f20558460831d4a47b91238badd7e23dd0be6753063ccd73be3a8cdcedc64e26db2d8c1a28a8d2d2a667caaad84225d88054dbf0f08d4be7bd1a555c", 0x91}, {&(0x7f00000004c0)="3de31d3d47c5a41b", 0x8}, {&(0x7f0000000500)="83e70807b886f689e6d1e00ba87ac599c7c1d8dfd51a34cf785c0ce6fbe56bf69d9e8e48c6428785d61ec3a65f368748a97bf53ea20dc4a5ad096e93333aa361b891ddf657599f42678718983dec5651aa2a2a6fcb78b99e83a8f7ae9cce7d6c9af82e0d95bb2e746be66a5ecb1b5648ad611e1a4b69785436a0548c984013053022399ace8901a28bd167c5755b9449165b75ceb750372dc7e8dd7a11ea76615ab775ab1287fdd676cd339d11c231113202427d0549fac5e842da0b52", 0xbd}], 0x3, &(0x7f0000006a40)=[@assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x1018, 0x117, 0x2, 0x1000, "79b3d24723460cb13ab2d459a57faaf5cf8d89266427b96de30ff428c38388de8422c654d199053659a91696b74f9be3f9b2a17e2a50ac320f7e6d2656998f35f23769044e8c6231899438ff8cd6d142ba02b1dc733d4bc6c89eba110146de019e5f5fbfcf3579779ebbcb4a5afc047c591cc80bd9327c84ddc16aa9927cccfd90fb2d271c65ea61fcf0146ff03062c0a28498b0109336d14610a539f6896dfbb350f608f63fe5087a507e0c6f20fc7c0ed94c605e4093875eb7310bcd5c805abd67cfc691855350abd894e6a5b540c1735f4b610ab908463580caee7451bdac540aeb9c9b3e685329cd184e7ca5a3bbbdd256a947926fc2a8c74cf2deff76743bb98359f0fa012bfe29c7e02068a358ce1f57cadb151e3e9a16167067cb1133d9a7754d525689ef67ccef6514f0583b1fdea4c7742d598053c3d5277e47c5daba37af7b1f8344bfdf2084acea489ee87bfb693da8ca1e85bd366c1b3c5c943895c03e7e503278d8a3b5650938dc736b1bc6073292759c432276fdf023db50df6d49aa13f3974cd1e1428772e776990945569f486f1b226e4905f8cdf6e6ba4892828f402ad52dfd921fef7b532a58e558c036f1ee613583a60899454ef7a5d29ad17fab97e5883d0353f6d31992012d632bfa020135e70ce288ceec4045f7a8488cf7894d600bb37060f096672def40554cb9886a18aa024c57daad09aa190ea2273022c49eda1c24c7e2975c5753ad1590461b9904ff324d38c49669210a2f2936e5cc256f5e359a10e4cec09ff8d81cb7228737c9b8e4a7dc7802ec12c7cf09537cb68aa53f8c839540db70780cae1d944202c034690fa1f5ed5934289a189b4e428c84b57b58389190129be75263c61fe6a3a6099f5be797de288dc1bbf78ee11bd9cb97acf6ec390cb440bebe4a920fc8d5649fca5c4f4e68dd0c76ab8c41ae5bedd5d14dab03820484a3c729744b435f037d759cf59c4c30f0c1322bf645b87f052767d8d33e7253f4415274feef63dc59de136a65fe6efc8850e58f922891531767eb97e3fcf7f8be1da2069a2ce03c081d843152c3169ae61fd429a3904c54afc750202453ca6349cd062727e7ee888e62582638d455d3b0f3ddb11114e457d7a1ec55aa0ae21e6a4baae37e8e7598ef862eb694b565fe59207e4c4de30854bdc5a01ce1b1bf2bf4a890cd84a160fdc348f968e754cf881fdae6ec4868a0ed33fcc25f683969d60ec2d8806938f3181ea2a2f3166e4f01f8ddac1b2c0b3b6c39fa2ff80728d7fdf318e5fddbd532a98f062418ffb9c2608afb06997881428ae758a95ea97cd3fb5326aa5e2787aaec03b8f3570ae26f9d40e03800bf3589c2af35f54d3faa015669cd359d47bd4dea117bc4aafb493c6376cf9232e1489977d0f12be44ba885e0e4feeaefd4e9c8dac2328a59e0e8f5c4eea5d7eb981dbb2167dd4a81c371b292ed1078ba8263c73e4310fdd3c72dec10b24073d8c1f9679a2074ea95298cca29ec43f50a153d0fe6580d88f83833d8cf5eaf43522b0b86fee64f92e127f5a5fb65870fbea1999d90bfd570a269398b6d349fc29e6fabd282c16222168caf3667e5762e9401d8aebc8738fcf4ada0fdff4030cd07aa9f1dbf3e8d01d78e26531dc297d68537e32dc2a402b3139fe3a0daea05dfb4062e51e9333545b09b95fa9dd00308b5b60dc3444a1bc2b8009f6a2c307bc0c3fa75ca3771b9334c8f9c72813928329cc6de1c2d69b9d45134d68929e32a892c2c29d826b5a928ba973456f0a4358eddc4f0106edb70bb87349a1062ed5aaa76308344b5af9480355c63ec7968b6cf4b36dc7cbf9edc79401d10a2a353203c6fff3ae3cc65aae9d0123a81e05105b472c825d6c07834df509497895379d2d28833a790264e44a46bf52f2b97ec01b6dd7f0c488e1c6a81e4a43d8f8c1b39b1b34fedee4c580ff695f5339dd43a3ac6ea865e3460e51a885beae282e75bc2283fa9e630865e748da7fe90be684beb134b961f380d466d43968df325ad3d41e424683f37eb88441f94c55f0f95837ad26456672b15312d9d2d056b1e1977b7ef501d57fbf7410d7b2af16a7578ef08fb29fbed8ee8d913ad4abade9e6a5fe5435ea7024a552799b1db7a0cd47c42c82865025fd2682cdac127745995e1ecabce075e067af7c784ce65040796638898b9d2feda70486da3eb8b18cc012d5aa0b78e80c09f2cf4942ab8eb1f660b7089be842c4c24f4482955e51a4e9df8b0e43796ba619ca6b1a3192bf819786d5264c2a771fc815359d89e8554ebf31a3dc3ec4efa3b2daf6c66ec455556cf7d9c94f33417162b315d56e3bec3e2434f15ae1388e4edf955d5d0b0b2e7b50b6f2a50cd3d7cb9cc8893e66dc5dbd75f1d188e3e3e571d1e1e5cd84e6a8b32ee8a354dff85be06d0f7c0f8e788ce50cc43354518421028eaed7753432add3cd2038fa54cf129cb14832f3e0228caef69b6a8bc10a5c918adcd76daeb3b710efc6102356a7a42d5c5ee57daad51bf1ae6be81227d2e945448069d728a5dbd6ef666e4f5608415224bc513893dcf046e34c6df495bb448c812e102a1ef7b278b4d3a558d3d7d6c9ced08e5c9e65f8f74494936fab6eaad0573da9e70e4ec1a713f412d3ec1fc86cad077166d2b4dc5097c66c7fddaf22bb6b131e7da0efbe841655cd10c0f222a76facc8ce5a70955f8f9239dd903f36efae391dc4726f5f844c29554ca20dbadbaae7189b420444a70098442fdd801e40de01acd385263f4076e4b1fce6cbd4a9fab3a88debdf3a81abe0ac4e6014f73ac532807b78dddbb6b25067efc309fa14489cf0800ae2e0c60232dc6b8e5f5d7595272f7bce500b88958b5a1bb08a6c50126f43aba70782e96bc39a2e659d3ba7ac04d33766f72b0ceb069385386d496c06979333ba08fc8db886e1dd4467ddb10198dd28eb32f397ae623ceda7357a2d7b1ebf5afebaa5ac5f5ac1f99ece480b7f215a196a4606b63f08c125f5fb849806da0b460985946af532cecfb451f0301c297fce5d22f555b6d05fe81cfd9cd9cfe1fd4d36526c7e96ebffd889b90e2caa3ee61b69e9229bc046aac5b5d304093ef2bba322c4144963c727a8c60da3d4a615f15a3df195ec2dd5be804a54afd666139f26bbea64ee821ac0f0b1c66f8784f18a17523134a78985b9eb81a18669fdeb07eea7650bfffba3ab49284148d9a995e9fb8b296e417d04e7e94f662aea4e2e6586482c1d818a77043dffa5fc3e42082cd8924fcab1d21f187a26c18da8a7181461aff3ec27c12e5af519696fc80aee1cd77667ecb9bdf18136ac56f49f09449cbd5b77e1fa3308edfdf803d7050a427c6e1eb5cb85626f8e28a132eb945a649f04ee8647b512171ae908ef30c91870b123fbd55c83d1537214d7f5b424fc6d52139b5d79d89224c4f5a3618a2df7e01c1c34f8db11523c44c3a06082dd0d288b747162e0672063b6462450b36b36e8e9c9f1f46b383d869b13b89e7a50ec177cd40f0a522db28a558c3f7d100af9749140166a7e7b344f3b81f2e47ddf244dbfd487f780b449b3535a2ab89134930bbf7a5e06f9581950f04d56d32cf3b0c2313c0fdfd06ed9c124c5795db6f8ebeaf1faac776c84763c63eb09c44ff6f1fa9618a7ccd176a28e5d788f1e0c42db37838d3f7bba9e78391e2dff037db854fb6e27ca572deefc8a5d0f95f9dc99c628b05b1d570077758d14ae885463f9644dfe1375a1af37490c8de3c5ecea97992d9c060c098332bbb5ac5356424b3760bba47b3cf863150ab330c68ca5b6b5cdc9964d568ee5183acf127c2b1d8ef53cb74b1ad6da953a7c2435e391f86bf1fe5741f5ca78191f7fe189ac41b8e8ca35322ee34f865f506afc465f75b8ce868a5be5d9f6f45018fe02727289cc46dffcf6b1c79272e915672427c53af111180e1a5929cdba83510ae489093d3eb1d0375ebed24e72405d1f40f9c64afab7c309b21c6f3da5bbfe4488517f1a19241d1c8b11bdd51165fe9f373d15b1694bd4e87c11e849ec645afc6c69ef2a1577fa3dd3263af24b6ba6421382366f47dd275e4ef6e9512898aaf3e473ac65b0d41ac82bbf08772ae88afe79cb14447492b5f191268063305381465176b4b5438581bfad8f3bf9e831546116aab5bcc60a46158d831ad319b211068bf9dd1d8144cffa5a86e1b53879182128cd0a7ff2129947b91559c0a2600799fa4ce7167d8cc6669d6c207c022d3b368ada828b7282013af6661ac8ac0a30b3ed112e4529ddbaf3ec6f712770cce23dc30815d403fa4ec00902f6b07d943b51bbf7c835bdde1e40998eca8cae11a3b4b13abd69f099f8b91128b0d6a9ba8dd3ba54b254b55b93ea86861b798fc36e889a1490ec2a242d81adcb2828439c9a4ddab9200a3f487012a850a9dfdaa0ae1e4fb694a7cb5a1b05fd5d8431eb9385073260d9199c4b8de99f7b06c92197626c18a9ecfa1cb9c005ca166b7fe3af5ec75264c4d8847b94b087a9de4d34b7060fa3da05c2c19650c9333aceb7a476a99d7f34a9c93a8e6f4183b55d71f108aeab638b8fc6fa1b0ae8baa59448c5bffea545c7455ee3eb76d735cc8afb7fd9b90427ee12c4011525e40293683a0f44e8e0d2ee20d4c6b9f2bcef6193032bb104e3e4a39dd40befab749a29b6001c8907b1403f232352f926f60b13e9c155a8005f879f89b091bfcc75828f494295cd91953e6d7c6652badf2ad8046837360a158a2a09ca6b134bd5ffc0608d0fc998c170fb0c9e6d330a211443756dab0158f3ce659ff4211b57568a7bc22e54532bab929758f3c3699b9179c4df9c068248b2d5f108bbd3c16f454ff5fea8ac752fdbfacd97b4062e29c64b1777eb7ce5e24e85f478263e24596410c26fe3bab19fa3627983042b4acbd433ff7e3d0a135ab8cd2fa5a3f19651dcae387d06760aabfc931f0ff130ab04e32697b32ccf2140ae68605a0bc9f1a9ed180db63fcb5f01201a8adca3564992c4d3734e8d407b63a5ff8b98aaf6ef1cdf704ffa44bcb53cc790ddb1c11f18cbd9f60b8beefe8934ba208e4abf2545ec30e00b54e48c315d420aac6eb6074d581659e1b30b5b6fd0f42c6fc0e8fee853f5c580f2dd044166be029b485ee448de3fb26f4197fddcbbd6947900e0925771ca3a273a25db3f4caaafc63dc5a1ff3997e019464ecc7606e06ccd44b2e45d5254b29275a645b1001c7d2aa35d713f6559dbc61168387fe3a8660f5e83ee2a4bbb64164fa03f097020293f14725576a47c1c617c4fce6b5fadf3291e3acf7565c1c18173a018ada851fb3df8bf403d243b6c294f36380d7d18153cfc0a0dfa7b0aad4d0333107e8007f0dd25229045865a64b1dc0374726500d3e490af64fcaa5c081e31f631c7250115243551d5754e5e5335ad6c45c563e83b1c6d88bb3a23b494abafd4a4ae77d9ffe7d3a9a300ccc376ac96506465ea6179e8bf32b71c734c18fd49ed1aa048b1d70a90a5bfb8db10d5372405f8c5564a92a6391c6ac3e442d9ec2541a486d47d16c3ac34439b8e77c54e010b8b834f9c324f4fee6751cbbf2a7f6288e48a07ac2eca49bb159f2c8d2cb70aacdc4fd68a4676f51e70bd15552a3c531131d13164a372adbbb6e84b500ed983eab197fd4e95b923459dbcdd2ee7de8fc092fa06f2454c1cd1946b06ef86912d8a3251607e52f3f9dc80bf8274316ad1ebbb57d977d5acf0f22837b0b62225387018f2cd060c78f35356f9a9a72cd4a596b50415d78a56f8bbfa20c0de4b764b4c098c7ff220cad826f82751e"}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @op={0x18}], 0x2060, 0x2000c000}, {0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001680)="c51bf6585f4fc468c057c49e146cf577a9a687e46484d6fa59784dc985b60cf7be0cb359ce7285467583536adda5e55db13dae930f50b6172c17a3fdc6e832a328d3ce8c54a48a0f5573bcf7825a0dd8abde8c58e241befb348936984f20e2f841efe330dd9259ed5e9674efcc7b46bc440fdfda7c5edb453400338a27587490f6f29fe42ad04c38ed534d754bd482e2d5c36a9da63cf9a0ef13ee6bfb9720c37733b327ddda906516b0be6095e3a42d30a5baf004f872430ef2c73f324dc61d567799922e63520fb58d9fb65b61", 0xce}, {&(0x7f0000001780)}, {&(0x7f00000017c0)="218f09881b8215fe2826fcf2653f9b1ee7b20197a18541c62ce15d6066420f3f9d733f3551b98aebaca975f8ae8ed860d5dbd6f7c73e331975296ad3050d4147659e98cf5e0f22695e964f", 0x4b}, {&(0x7f0000001840)="18d7f6b7c72b17b0cc32afb810e3bb1a62f1dd80385ed128258eb4275fe2a7fc242c330ecdf0b25d246f3430b197a96f3174a3f22f7d3bc73af1b9112eaca956e3177553ebc9573017e8a5a2932258cd4448da08f5eab30bd5b91d6b3d9bd78c7d26ace9989f896db81b077c388549ae2699a74fc54b1f63700967f3caab711e64e45f93e094514905b63dc708cb913b311ccb4549e24c228114b239a8d6404eb9d03a3b224eff7c777d3f1fe504c870f76d7c8af68668915a72a5d949859b76e090707651", 0xc5}, {&(0x7f0000001940)="3383f79239d4958b56a20317f19f60ac7e6809428e7c1b1cc0a7bcf8434e57d435964ecffcfdf93ebaa8c09c6b0b2c36d9cd8b4373c43f564f9ebf0b0d238e001c2f4e15fa04d5738d17f902644a9a9a26ebfb1cbcd21b2a368261523113410d2a", 0x61}, {&(0x7f00000019c0)="a4e5d30751f32fd7ad07ca662b01bd47ff77b2a0c891c3685af0d5ff654f5daf89d752313a489c4c4d4441a4fa9d9eb29a522e0c2712ba5f4f6a6e0776b25e02c8efd886208d766201c5b62c6b7e0339206158173a7a3d325e1abedb5bf26375cb768afd7646261e8f151d88e155d720c049ba746c0fae24", 0x78}, {&(0x7f0000000640)="c1124e90f8f6ede51f28362f1681564f32079fd5b4b0dbf66754223ec8c2e4dab606a54628bc1f49061387cc691640ea90cc2f1b1856b00749b2337d937c08501f0d144cae6fbe21d50cc59f2f3b51411f1467e314ec537492d1e80c12ab2198cced352e15d5ba0460a1702dc99428a6a4ff44564a086044", 0x78}], 0x7, &(0x7f0000005940)=[@assoc={0x18, 0x117, 0x4, 0xfffffffd}, @assoc={0x18, 0x117, 0x4, 0x572c}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @op={0x18}], 0x1060, 0x20000001}, {0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000002c40)="1348c76831a2e45f6bc4bd7c4d3b62d43ccf66e5e1b77cbb1f9f0fa77808a599d527a94fbab272d1494ab22751349865cc4e85c17d9496b5e3894f4dc470db92af6bd0beec3f1d28314f1dca7f788aff2fd96bf7453bb568b0f1f9d6d37fa5686cd9f91fa119c8bb676683075e01024aefc16db46512204fe06fd77c962aa6544a18f37ffc30de05df3610c8ab4a2d30be58b7ab52acd77820c7de223a943d2673f5f744cd26bd4b2295729e346f0ac57a216124cea7a0cf9380e232a31d43533f72bd3c20ebe728188010", 0xcb}], 0x1, 0x0, 0x0, 0x4000000}, {0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000002d80)="cd0f6f305f020f3ddb3c9ef421234276b19aef96d298f8475bc921b4d3a4e344276045ee7ce6f2c77b5a4134b39611dd72afde00688ec1e9c78af5250aa75a24950fc207aed3315c087cb5df51853030e33de09bcf579359b4ae625d16d7916bf5aebb4c1a681d7928672481b31b7a81c8e6cdc3f938cfbd592e5a38904a0d15762e0e8c5f97fb3d6ebdc2e96adf317455b15fc53c2c6f515abb98e093105cb0876f1ecaedbbe7a1ecff74d1dc547d", 0xaf}, {&(0x7f0000002e40)="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", 0x1000}, {&(0x7f0000003e40)="1316087d369010dad1c7b7a1b701dc1586248df489d8aafc826007a2fc2d25d13580794893ece979478cc407b862c48cb0f95f4d0b93f682ad4f699adba0df7d8436090fd4b23b083a01d1c6f2ff0fe726d6e09bad1203ca4de3abaebeb75322eed8955fc6c2c876d0fbb58cea08e37b1949dae26a9c708799c0a2330ca04635da2a584c7b7fdb112fbe4ff0de436eff74b02bb2cbcb65d8608271c5507b7e366fa4b7e22fde346dd2", 0xa9}, {&(0x7f0000003f00)="bf148ae34de20d3efbf43ed5134558d337e19b1d9754b648f8e1fc11d388dfd65a4500f4e6f4e6116a368b865d9b785a7566c95f72d5ba88a92e9d1e32d4ee744498791173e6", 0x46}], 0x4, &(0x7f0000003fc0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x1}, @op={0x18}], 0x48, 0x24000000}, {0x0, 0x0, &(0x7f0000004440)=[{&(0x7f0000004040)="1928e8a8e4b8fc0679aa408553ddfc57201f31cf8d96cc22dffe61ba5067c1387c485b937c0e8672dc24d080a5bf2d1cdffc917ef34508b5a6b955880292c4779e462dbba06440ebd5dc395e0c4b12d2dfd67c08e5c6ed329667c8b5b67e3e7e30f466db2c14da0984def99614b1ee73aede79d3a3bb0be4d09505b13236c9", 0x7f}, {&(0x7f00000040c0)="85f0352cfd6644be3a5890d99782d57b85dd886e2b07693d63304d941042e9edf57e2a33c515f644be849f70c6d0ab5faa137742f4b53006b9d1293611abd20648a9128818bfea8901da09ea13beb4103438bfe92c8b987bb01971230b1c00db6965c1391f5065ece8e4c523322498a3d0e24218cc143d1b", 0x78}, {&(0x7f0000004140)="70ef13f6df7344dd5163da31d12105b29e14d5ef8f4c92c39b86758ed0e5e2ce74ab70bc2535419ba04efcf0ebc0f8ad073bbd19a33ad4b03487f1f3c8a2a2f6f340a73af4ba35f999ee1ccbaf378c18126c953e55e8e5bc7c7ac70f62d1c336b6489532e67978360a9822b210b05ca1a0f7860bf4fc1f3ef1a08a02e32c05290b339bc3187955748338901bdaa5d9636e3f03cf3f3f78ef4514243c2559e76b94a4e466812a4495dc911ae0fe9c2a", 0xaf}, {&(0x7f0000004200)="e03d9f79e0860daedf5f", 0xa}, {&(0x7f0000004240)="2110f75f904e92b7b3bd78cfe0885334510448406a22f727ed80878d70153bcda66ec3734025d685b4", 0x29}, {&(0x7f0000004280)="304f5ddff7a690dd3cc621287a4b1d6d33732ae4d803f94769f17707c3dd366369f4643e7dab82c39cd6b5cd8ade4649ce18e28b3b3d25717067eac2f98cfbf94a48588e116c92dd44ab9979d914b2c2e3db3c4b6afccbe3400d1b45986c143123afea7725fce6489f866c311940b08051632b6fcfaa9186be27fdcc9db982f37150e725a1330d69b464b5060e022c772114ca01c462d874cf6787", 0x9b}, {&(0x7f0000004340)="647dafd263d2c45627129855976d9a7c38df497062a76c28e5dd4afdfbe0dc3030e901768465337d6683bbe28a100a820e2882a9b453a831943bd5a47aa6f4601732bd58673bda0f84a63e0a223572bfa24865e53a866b1bd3b6b9ef122c53eae7cc4caa6ecca63df198efc6035ff3e04489d89380ab7408e87acb31454b5b3f6013b1f1f8ca549fd4a4a71404ee4ab893676a22c58d748e5755c9e47fc755a39d30d2d0f2eb764ffcda82a4a0a9ab25189375fa61cab21c8892b8ad115ab3f96518afcc", 0xc4}], 0x7, &(0x7f00000044c0)=[@op={0x18}, @iv={0x108, 0x117, 0x2, 0xf0, "5d5e6481524d694a9ae71510dc2713cb49827d1ae1517268de0de47f81150abac168242f11c35732b6994ca3ca8ee9a551a75dff1d63e10c7809ff20f218093b38adb5b6574551755ac605fe6107528b90068999038f80fd7bbad9bd243332e2b85d56f8404cd239bb1b7c129969345bc01aa3a4c138330556f4a0b89f2fd1c3b99795eb1a15ea5e90460dab48bfb75f96b9ab4fbd220abf9ef4aa1fa2f6f9670271680e23f2a592da604a22571a1a0a983b85fa248875bd72c07ee826194411cc590a1ebfe4d81b19db4cff65f339cbb7acc28874f0bd571792bdcfc277c10b6d48dd300d460e9d995a39c33dff5829"}, @iv={0xe0, 0x117, 0x2, 0xcb, "c148e3d3da597043fac459dad68ba5d066988cd9b0980568e78b55fe19b43b94c7ea46b1a7c74669d9acb2dce05527c8c6e8f934fea41c3356f0e9ffccb34d631e7a591ce643222c29e77527637e66591fe3f8a02c7675d4e36100334ed3a5c1e6d9062fc89b56ac4d9ee87483a4d0b60aea67baefcd254b5f7b4b30ff8071e04a699034f8daee29e5c7fd1f3b69c2471bc5d50334c9b9cc158706b74af17efb129aed79bc23e76e20439d5624fa13f18a992e85b22cc6da8869a0f1d94433a2510f99770bc657c7cedd3a"}, @assoc={0x18, 0x117, 0x4, 0xf0000000}, @iv={0xb8, 0x117, 0x2, 0xa4, "54babeca94eb062d713ddc184c13f5295ff23d6f156f3d774e0aed5a2a44c232657389b28aee5f572faa7cb8b5da44d64bd2b30303b71d342b549adc637e4e6158bdc5f69e2632ca05e4178a84a40438da0d8e9f59ed636ccefb310c0c3f1c569dbea39132a436f8c5f999b9ec2074f4180dd89489a977d966f69374bbe69960aabfe29586811778cb72ceafb8a29c1696386a73f091ac372614344351cab0b0668974b1"}, @op={0x18}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}], 0x1300, 0x10}], 0x6, 0x8014) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000000)={r5, 0x1, 0x10}, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={r5, 0x38, &(0x7f0000000600)=[@in6={0xa, 0x4e20, 0x2, @remote}, @in6={0xa, 0x4e21, 0x40, @local, 0x2}]}, &(0x7f0000000100)=0x10) 18:02:54 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:02:54 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x200000000000, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) fallocate(r2, 0x7db3dde929451032, 0x7db5, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 576.868867][ T28] audit: type=1804 audit(1595268174.309:296): pid=27846 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir194387852/syzkaller.kcCkwh/583/bus" dev="sda1" ino=15891 res=1 errno=0 18:02:55 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) lseek(r0, 0x4200, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffb) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x4, @private2={0xfc, 0x2, [], 0x1}, 0x1}, @in6={0xa, 0x4e23, 0x8, @local, 0x77f}, @in={0x2, 0x4e20, @remote}], 0x48) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffb) tkill(0x0, 0x1000000000016) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3b, 0x1}) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0xc2, 0x0, 0x0, 0x1ff, 0x40, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0x0, r2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r4}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) [ 577.101363][ T28] audit: type=1804 audit(1595268174.359:297): pid=27802 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir614119965/syzkaller.KZ2c1p/427/bus" dev="sda1" ino=16381 res=1 errno=0 18:02:55 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000080)=@dstopts={0x2f, 0x6, [], [@ra={0x5, 0x2, 0x7}, @jumbo={0xc2, 0x4, 0xffffffff}, @jumbo={0xc2, 0x4, 0x1b965cb4}, @generic={0x9, 0x21, "9e0d0e5d38cee0864484dc1f037376ef3c1b2731e2b90c737744e549576525fd63"}]}, 0x40) socket$bt_hidp(0x1f, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) [ 577.391120][ T28] audit: type=1804 audit(1595268174.579:298): pid=27825 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir212127951/syzkaller.ICdwwA/609/bus" dev="sda1" ino=16371 res=1 errno=0 [ 577.431210][T27859] device bond234 entered promiscuous mode [ 577.474977][T27859] 8021q: adding VLAN 0 to HW filter on device bond234 18:02:55 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, [], 0x1}, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:55 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000001ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000000)="04", 0x10, r0) r1 = add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x1}, 0x0, 0x0, r0) add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="07757dff842c392a6712c3c60b502f055736ec2035341f06f5f7c7d34820ddd62a8a05c3e03742f3647d272165662a5c25e2128e7c32dbc0e0a6f8048f54f975ecef418c397635fd5e8ad1c4afbf442295cb77ba947842243432598bb0f5f7381ea114baf4a07d91f481a7a2b64553ae118d7c387dc9c98a1024131ab5999a870a51c590de5de0e799852a66e9e8103bc58ddc3fff450efa73c6f1e0f3be74bb8aa78ddf35e4d33909e755cbba2e91a06f83dc2909a5be0eb05763fc412cb20d8dd7aebf2d631e3e8a05561113e40742047275614eb62750eaa0183346ecdd474ab504d67ca199", 0xe7, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x202001, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xf0}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x80}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r2}, 0x38) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) read$usbmon(r5, &(0x7f0000000200)=""/247, 0xf7) sendfile(r5, r5, 0x0, 0x8080ffffff7e) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r4, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x88}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008800}, 0x4005) [ 577.582952][ T28] audit: type=1804 audit(1595268174.679:299): pid=27862 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir194387852/syzkaller.kcCkwh/584/bus" dev="sda1" ino=16379 res=1 errno=0 18:02:55 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 18:02:55 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffb) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000007c0)={0xbb8, 0x1, 0x5, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [{{0x254, 0x1, {{0x1, 0x7}, 0x0, 0x6, 0x635, 0x101, 0x2, 'syz1\x00', "bf156cf8c64d6e1243c532e40fc8c9bc662272dc0e8cf2a96b7388573d2fce43", "9802bf11b7acb3c068adbd4920c66b953fff0634ac606d38592bdab9e830f3ab", [{0x0, 0x3f, {0x0, 0x7}}, {0xffc0, 0x6, {0x2, 0x1}}, {0xff, 0x3, {0x1, 0x80}}, {0x9, 0xd18, {0x1, 0x80000001}}, {0x1ff, 0xffff, {0x0, 0x7fffffff}}, {0x0, 0x1000, {0x0, 0xf67d}}, {0x2b09, 0x5, {0x0, 0x3f}}, {0xffff, 0xffff, {0x0, 0xe30}}, {0x7, 0x1ff, {0x2, 0x101}}, {0xa4, 0x3f, {0x3, 0x200}}, {0x101, 0x10, {0x1, 0xfef0}}, {0x58d6, 0xf800, {0x2, 0xfff}}, {0xf193, 0x5, {0x1}}, {0x7f, 0x1, {0x1, 0x2}}, {0x8, 0x3ff, {0x0, 0x1}}, {0xff, 0x8, {0x3, 0x8}}, {0x0, 0x9}, {0x0, 0xb167, {0x3, 0x6}}, {0x3, 0x59a, {0x2, 0xee}}, {0x6, 0x8, {0x0, 0x3}}, {0x9, 0x7f, {0x1, 0x40000000}}, {0x1, 0x2, {0x3, 0x8000}}, {0x6, 0x3, {0x2}}, {0x1, 0x6, {0x3, 0x8}}, {0x800, 0x5, {0x2, 0x3}}, {0x3fe1, 0x0, {0x0, 0x6}}, {0x4, 0x7f, {0x2, 0x2}}, {0x3ff, 0x7, {0x2, 0x1}}, {0xf93d, 0x0, {0x1, 0x4}}, {0x2000, 0xffff, {0x0, 0x8001}}, {0x3, 0x6, {0x1, 0x6d}}, {0x2, 0xfa52, {0x2, 0x9}}, {0xf7, 0x8000, {0x3, 0x5}}, {0x0, 0x4, {0x3, 0xff}}, {0x7, 0x0, {0x1, 0x1f}}, {0x5, 0x3, {0x0, 0x5}}, {0x2, 0x9, {0x2, 0x7}}, {0x1, 0x8, {0x0, 0x8000}}, {0x2, 0x3, {0x0, 0x100}}, {0x2, 0x8b, {0x0, 0x1ff}}]}}}, {{0x254, 0x1, {{0x3, 0x1281}, 0x3, 0x4, 0x3f, 0x2, 0x16, 'syz1\x00', "b58f40bec871aeb539f032054ce4b2c32650f3d942bd32ad03de4f858d064802", "0bc1dc3b14cf59a06cdcc49217a9ef2e727d33a86710a7202ae1be1aa3edd4ef", [{0x3f, 0xe788, {0x2, 0x25ac}}, {0x100, 0x8, {0x3, 0x7}}, {0x1ff, 0x6, {0x1, 0x2}}, {0xfe00, 0x1, {0x3, 0x1}}, {0x4, 0x3, {0x0, 0x9}}, {0x6, 0xfd2, {0x0, 0x8}}, {0x3, 0xfffc, {0x3, 0x9}}, {0x40, 0x5, {0x3, 0x7}}, {0xff06, 0x3e34, {0x2, 0x7c}}, {0x13, 0x1, {0x0, 0x1f}}, {0x9, 0x7, {0x1, 0x9}}, {0x1, 0xfff, {0x1, 0xfffffffd}}, {0x7, 0x0, {0x3, 0x6}}, {0x1, 0x2, {0x3, 0x81}}, {0x7, 0x7, {0x0, 0x1d}}, {0x956, 0x0, {0x2, 0x10001}}, {0x9, 0x9, {0x1, 0x4}}, {0x80, 0x9, {0x1, 0x27d}}, {0xe84, 0x7f, {0x0, 0x1}}, {0x401, 0xffff, {0x1, 0x342}}, {0x0, 0xff, {0x0, 0xfffff001}}, {0x4, 0x20, {0x3, 0xbb}}, {0x101, 0x14, {0x3, 0x7fff}}, {0x5, 0x5, {0x2}}, {0xe696, 0x6, {0x0, 0x200}}, {0xa36a, 0x0, {0x3, 0x8}}, {0x40, 0x1, {0x1, 0x6}}, {0x0, 0x200, {0x2, 0x366}}, {0x81, 0x1f, {0x0, 0x6}}, {0x1f, 0x40, {0x1, 0x3f00}}, {0x9, 0xb64, {0x0, 0xaf9}}, {0x8a, 0x9, {0x1, 0x5eaa92df}}, {0xfffd, 0x200, {0x3, 0x2}}, {0xff, 0x400, {0x3, 0x6}}, {0x2, 0x0, {0x0, 0x5}}, {0x7ff, 0x400, {0x1, 0x7}}, {0x4fcb, 0xe9, {0x2, 0x4}}, {0x9, 0xffff, {0x0, 0xc0000000}}, {0x7, 0x3ff, {0x3, 0x7}}, {0x1, 0x9, {0x0, 0xffffffff}}]}}}, {{0x254, 0x1, {{0x3, 0x47}, 0x0, 0xed, 0x0, 0x2, 0x26, 'syz0\x00', "278deca7b181447a5e9359691e29d99f3550bc6bea1082197ce6b69bcdacfc03", "a07f305ca6d69230b005794a213665824617bc78e0a7fdb2c550e1e93295065f", [{0x4d8e, 0x6, {0x1, 0x5}}, {0x0, 0x3ff, {0x3, 0x7}}, {0x8, 0x2, {0x0, 0xfffeffff}}, {0x20, 0x6, {0x0, 0x90}}, {0x1ff, 0xdf7, {0x1, 0x6}}, {0xfff, 0x2, {0x2, 0x4}}, {0x3fe, 0x898a, {0x3, 0xff4}}, {0x1, 0x0, {0x0, 0xfffffffb}}, {0x0, 0x2, {0x0, 0x6}}, {0x87, 0x2, {0x1, 0xcc92}}, {0x9, 0xfff8, {0x2, 0x6b}}, {0x6, 0x2, {0x0, 0x80000000}}, {0x3, 0x0, {0x1, 0x1}}, {0x5, 0x81, {0x3, 0x15fc8127}}, {0xf460, 0x100, {0x2, 0x4}}, {0x6, 0x7, {0x3, 0xfffffff7}}, {0x6, 0x7, {0x1, 0x8}}, {0x8, 0x40, {0x0, 0x1f}}, {0x0, 0x7, {0x0, 0xffffff80}}, {0x80, 0x29a, {0x2, 0x6}}, {0x6, 0x6, {0x1, 0x1}}, {0x7, 0xfff, {0x1, 0x400}}, {0x1, 0x4ec, {0x1, 0x2}}, {0x1, 0x8, {0x2, 0x5}}, {0x2, 0x1, {0x2, 0x1f}}, {0x0, 0xfff9, {0x3, 0xfffff108}}, {0x100, 0xff, {0x2, 0x7}}, {0x7, 0x9, {0x2, 0x3}}, {0xaa6, 0x8, {0x3, 0x5}}, {0x7, 0x3, {0x2, 0x80000001}}, {0xbf, 0x1, {0x0, 0x9}}, {0x8001, 0x3, {0x1, 0x40}}, {0x1ff, 0x0, {0x1, 0x7}}, {0x9, 0x7, {0x0, 0x3f}}, {0x7, 0x2, {0x2, 0xf2c0}}, {0x6, 0x400, {0x2, 0x3}}, {0x6, 0x46c7, {0x1, 0x8}}, {0x3f, 0x9, {0x0, 0x1}}, {0x40, 0xfff, {0x2, 0x4}}, {0x9, 0x4, {0x1, 0xc575}}]}}}, {{0x254, 0x1, {{0x2, 0x7}, 0x4, 0xff, 0x8, 0x2c63, 0x1b, 'syz1\x00', "1561c320c181ae4433ecdda02c640632b758ec181706fb263a174f3cf5affd49", "9467d8cd48061d03d4fb111532eba624e905e059ed3c5f9fe6cc192813554f40", [{0x100, 0x8, {0x2, 0x8}}, {0xffff, 0xdaa, {0x1, 0x3}}, {0x3, 0x2, {0x4, 0xfffffffd}}, {0x7, 0x1, {0x2, 0x7}}, {0x7f, 0x4}, {0x401, 0x3ff, {0xe3c28d91d6ecb985, 0xfe}}, {0xfff, 0xfff8, {0x1, 0x5}}, {0x81, 0x7, {0x1, 0x1}}, {0x81, 0x401, {0x2, 0x80}}, {0x3, 0xf339, {0x1, 0xfffff8fe}}, {0x0, 0x94e, {0x3, 0xb9e}}, {0xcd3, 0x9, {0x3}}, {0x5, 0x9, {0x2, 0x2}}, {0x5, 0x3, {0x2, 0x1}}, {0x7fff, 0xc66d, {0x2, 0x80000000}}, {0x4, 0xb7ee, {0x3, 0xd4}}, {0xfff, 0x31e, {0x2, 0x15}}, {0x7, 0xb4, {0x3, 0x3e}}, {0x1, 0x0, {0x1, 0xffffffff}}, {0xa271, 0x0, {0x2, 0x1}}, {0x8, 0x3, {0x1, 0x2}}, {0x1, 0xff, {0x2, 0x3cddd89f}}, {0x80, 0x55f6, {0x1, 0x6}}, {0x1, 0x100, {0x1, 0x80000001}}, {0x96, 0xf936, {0x0, 0x3}}, {0x5, 0xfffb, {0x3, 0x200}}, {0x3f, 0x6, {0x3, 0x9}}, {0x200, 0x7, {0x3, 0x5}}, {0x8000, 0x5, {0x2, 0x4}}, {0xc4eb, 0x401, {0x0, 0x3}}, {0x7, 0x7d, {0x1, 0x5}}, {0xffff, 0x9, {0x1, 0x7ff}}, {0x4, 0x200, {0x2, 0x101}}, {0x4, 0x4, {0x1, 0x7}}, {0x400, 0x2d0, {0x1, 0x200}}, {0xfcc, 0x8000, {0x3, 0x3}}, {0x7fff, 0x3, {0x0, 0x4}}, {0x81, 0x7, {0x0, 0x637}}, {0x7f, 0x6, {0x3, 0x2}}, {0x400, 0x5, {0x2, 0xfffffffa}}]}}}, {{0x254, 0x1, {{0x2, 0xfd}, 0x20, 0x7, 0x8000, 0x6, 0xa, 'syz0\x00', "5159c21ebe076c926ea00813d94f178f0e365dd727b0494f81175be0f68bd0da", "4f31b45326f32953f100bd7fa57a96e083a9fd177d1047de8877ddfcf522a6ca", [{0x4, 0x3ff, {0x2}}, {0xffff, 0x7ff, {0x1, 0x4}}, {0x6, 0x3, {0x2, 0x3}}, {0x7, 0x5, {0x2}}, {0x97, 0x81, {0x2, 0x6}}, {0x9, 0x752, {0x3, 0x7}}, {0x8001, 0x7, {0x1, 0xfffffaa7}}, {0xffe0, 0x40, {0x3, 0x1}}, {0x3f, 0x200, {0x1, 0x400}}, {0x7fff, 0x38, {0x1, 0x5}}, {0x9, 0x9, {0x0, 0x2}}, {0x4, 0x0, {0x1, 0x2}}, {0xb953, 0xffff, {0x2, 0x1}}, {0x5, 0x1, {0x1, 0xfffffffb}}, {0x53a, 0x7, {0x2, 0x9}}, {0x9, 0x8, {0x2, 0x1}}, {0x4, 0x7f, {0x0, 0x6}}, {0x5, 0x8, {0x0, 0x8}}, {0x7ff, 0x4e, {0x2, 0xf5}}, {0x8bd, 0x827, {0x3, 0x7}}, {0x5, 0x1, {0x2, 0x7}}, {0x81, 0x7, {0x0, 0xecb5}}, {0x9, 0x0, {0x0, 0x7}}, {0x3, 0x2, {0x3, 0x401}}, {0x376c, 0x1ff, {0x1, 0xb303}}, {0xbf, 0x9, {0x0, 0x3}}, {0x7fff, 0x7f, {0x1, 0xc0}}, {0x8, 0x2, {0x2, 0x7}}, {0x3, 0xffd2, {0x2, 0x80}}, {0x101, 0x3ff, {0x2, 0xcb9}}, {0x800, 0x3f, {0x2, 0x5}}, {0x4, 0x1ff, {0x3}}, {0x3ba1, 0x4, {0x2, 0x10001}}, {0x1, 0x3, {0x6ef6c9fa268cc5a8, 0x10001}}, {0xff, 0xff, {0x1, 0x4}}, {0x1ff, 0x2503, {0x0, 0x5}}, {0x40, 0x8, {0x1, 0x5}}, {0x8, 0x0, {0x2, 0x40}}, {0x3ff, 0xc6, {0x1, 0xfff}}, {0x7800, 0x3f, {0x1, 0x20}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x4040}, 0xed32f5a9f63a8c14) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, 0x2, {0x7, 0x1f, 0x9, 0xa8801, 0x1f, 0x3, 0x9, 0x8}}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) [ 577.791688][ T28] audit: type=1804 audit(1595268174.799:300): pid=27866 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/466/bus" dev="sda1" ino=16372 res=1 errno=0 18:02:56 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x5f]}}, &(0x7f0000000100)=""/158, 0x1b, 0x9e, 0x1}, 0x20) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f0000000300)) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 577.967565][T27932] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:02:56 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0}, 0x38) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffb) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x0, [0x8, 0x1ff], 0x3}, 0x10) 18:02:56 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x3) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r4 = open(0x0, 0x141042, 0x0) read$usbmon(r4, &(0x7f0000000200)=""/247, 0xf7) sendfile(r4, r4, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xfa, 0x2, 0x0, 0x41c1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:56 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x492492492492805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000000)={r4, 0x1, 0x10}, 0xc) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000080)={r4, 0x462}, &(0x7f00000000c0)=0x8) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) lseek(0xffffffffffffffff, 0x4200, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x8400fffffffb) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000100)=0x4, &(0x7f0000000140)=0x2) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x40, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffffffc, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, [], 0x1}, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:02:56 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 578.701805][T27932] device bond235 entered promiscuous mode [ 578.724516][T27932] 8021q: adding VLAN 0 to HW filter on device bond235 18:02:56 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x199842, 0x100) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x0, &(0x7f0000000340)=0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffb) ioctl$VIDIOC_S_PARM(r6, 0xc0cc5616, &(0x7f0000000100)={0xa, @capture={0x0, 0x0, {0x9c26, 0x1}, 0xfff, 0x80000000}}) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) 18:02:56 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) lseek(r0, 0x4200, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x3180, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0xd0dcab8d012815e9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f00000007c0)={{0x7, 0x3, 0x401, 0x40, 'syz0\x00', 0x3fff80}, 0x0, [0x4, 0x9f, 0xfffffffffffffff8, 0x9, 0x0, 0x8, 0x7fff, 0x0, 0xe0, 0xf6fc, 0x1, 0x7, 0x7, 0x7, 0x9, 0x20, 0x7, 0x8001, 0x8, 0x9, 0x6, 0x8000, 0x1, 0x6, 0x5, 0xff, 0x0, 0x5, 0x9, 0x6, 0x5, 0x6, 0x1, 0x81, 0x0, 0x57800000, 0x2, 0x2bc, 0x5, 0x7, 0xffffffffffffffff, 0x6, 0x8000, 0x4, 0x96, 0x4, 0x7, 0x2, 0x800, 0x100000000, 0x6, 0x3ff, 0x5, 0x8, 0x10000, 0xff, 0x0, 0x4, 0x1, 0x6, 0x9, 0x3, 0x7f, 0x563, 0x100000001, 0x0, 0xfd, 0xffffffff, 0x7ff, 0x200, 0x81, 0x5, 0x6, 0x6, 0x7, 0x7f, 0x7f, 0x8, 0x8000, 0x7, 0xf373, 0x3, 0x6, 0xda18, 0x3ff, 0x3, 0x719, 0x3, 0x3, 0x4, 0x6, 0x200, 0x3, 0x3, 0x80000000, 0x8, 0x8000, 0x5, 0x6, 0xff, 0x6, 0x101, 0xd0d3, 0x81, 0x1, 0x100, 0x7eb6, 0xfff, 0x1ff, 0x6, 0x6, 0x3, 0x7, 0x100000001, 0x1, 0x9, 0x8000, 0x3, 0x7, 0x2, 0x1, 0x2, 0x100000001, 0x21, 0x100000001, 0x6f, 0xb0fe, 0x5]}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)='|{', &(0x7f0000000080), 0x1081, r1}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:02:57 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) [ 579.310989][T28005] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:02:57 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000400)=""/245, 0xf5, &(0x7f00000001c0)={&(0x7f0000000140)={'blake2s-224-generic\x00'}}) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) lseek(r0, 0x4200, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffb) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="2b1e735d0400000000000000014100000010531d18000000000000000069622b7b67327a539c9aa338393e84c7ff791b34750b7982c6e31e31abfee87b8a365b62479a6aae555137330d7e4aa7eb36a0272934a637618a939da35fffab2fe2f226dadf3d558ae0717cf3acc4993e000000ffef00000000"], 0x2c}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x70bd29, 0x800, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000011}, 0x4000000) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f0000000580)={0x4, &(0x7f00000005c0)=[{@fixed}, {}, {@fixed}, {@none}]}) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r3}, 0x38) 18:02:57 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffb) write$proc_mixer(r2, &(0x7f0000000100)=[{'PHONEOUT', @void}, {'MIC', @val={' \'', 'CD', '\' '}}], 0x27) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="380000002400071fa66dd6b6cd7f463705000001", @ANYRES32, @ANYBLOB="000000010068667363000000000802020000000000000000000000d53f035ee0d4fdf30449480ec8228b993f56ba34650e89dd4a04dff0db3885c69aa335a2bd7a13c6d63f01cd77f6bdc0e60f84ac9bec5666bd7e628e3df14d5653c415605abff171eaba2973a9d2aa198f4b8ba75e0d07e371bd40b431acfc6d1b1cc537a8d996ea4790951153163da1a32f2336c728b365e2da621e"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="495ee3d5667332d214376fa54a700000002c27", @ANYRES16=r3, @ANYRESOCT=r0], 0x70}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x24, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c845}, 0x800) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttynull\x00', 0x80800, 0x0) ioctl$FITHAW(r4, 0xc0045878) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:57 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x12) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @multicast2}, 0x3, 0x0, 0x4, 0x1}}, 0x26) r2 = open(0x0, 0x141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46000) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffb) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000080)=""/106) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x100, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:02:57 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:02:58 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./bus/file0\x00', 0x0, 0x263f6fd087f48cb3}, 0x10) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000000)="04", 0x10, r3) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000180)='cifs.idmap\x00', &(0x7f00000001c0)=',{/^p%\xc4^\x00') r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) ioctl$SNDCTL_DSP_SUBDIVIDE(r4, 0xc0045009, &(0x7f0000000080)=0x5) [ 580.013007][T28005] device bond236 entered promiscuous mode [ 580.059749][T28005] 8021q: adding VLAN 0 to HW filter on device bond236 18:02:58 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5689, 0x1, @perf_config_ext={0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1020000, 0x4}, 0x0, 0xffffffffffffffff, r2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:02:58 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) lseek(r0, 0x4200, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffb) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000300)="6613a26422bc8459ac4eba39b05f8956a8c7c878d1e2226dfd202589ffdf280fdc000948d2cda8675493d9eb4c4b0bf22bd9c227c2b496cca8fd845f93c75fd0b698edca6be4bfa4b8472e8b92af0d4cd1944b83bcd1ffe95002787c66e5a535206c60107418b43852b80b138bc67a652a54b4ab3fdc5e90dc892cec5188aa28a5de6268d0accce7a07f06b4210530ad4d71e7bb7671bb143cb442cf28096b3c00080000d7b4c7ad4994462f3822e76e98dd24a6", 0x101081}, 0x1d) 18:02:58 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 18:02:58 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) r2 = syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0xffffffffffffffff, 0x8000) ioctl$SIOCX25CALLACCPTAPPRV(r2, 0x89e8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffb) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f000001d080)={&(0x7f00000000c0)={0x14, r6, 0x709}, 0x14}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r6, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e6642ec557"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x48e19832188347f8}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x8804}, 0x20040800) 18:02:58 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0}, 0x38) r1 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000000)="04", 0x10, r1) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000000)={r1, 0xbf, 0x6a}, &(0x7f0000000080)={'enc=', 'pkcs1', ' hash=', {'wp512\x00'}}, &(0x7f0000000180)="5adf323cedb8ee7f3c6ba78f8adce27c8f27eb08e2800e9bc349730e744c50dd32f947297b7f189771f0557319372bee5f0a7d08d48ca8f21ca86e975e9bce350566cffa7e9ea6e52127e4ae6d3261017a05b0160528e8b70ad7b13c5c466957db5e2f58e379bedc3da1f94a310f81fffb256b36714ddccff55d0551eb622b56a36736c298b40b09f20725e26cc04e723a46812ad08dbb409b3981e674d53cbbf16ff3670522c638ffd3bc6f013b90be8d54ccd9d3ccb744341d26190169c3", &(0x7f0000000300)=""/106) 18:02:58 executing program 1: r0 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f00000000c0)={'icmp6\x00'}, &(0x7f0000000100)=0x1e) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x8040, 0x0) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000080)) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r2}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:02:58 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000020603000000000000000000000000050500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4042811}, 0x4000080) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0xc, 0x0, 0x1, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x100, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x0, 0xc, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) [ 580.475460][T28074] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:02:59 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:59 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x39b800, 0x0) getsockopt$inet_dccp_buf(r3, 0x21, 0xe, &(0x7f00000000c0)=""/100, &(0x7f0000000140)=0x64) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) [ 581.266681][T28074] device bond237 entered promiscuous mode [ 581.293462][T28074] 8021q: adding VLAN 0 to HW filter on device bond237 [ 581.308489][ T28] kauditd_printk_skb: 32 callbacks suppressed 18:02:59 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x106) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000000)) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r2}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:02:59 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) r0 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000000)="04", 0x10, r0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000000)={r0, 0xd6, 0x12}, &(0x7f0000000080)={'enc=', 'raw', ' hash=', {'blake2s-224-generic\x00'}}, &(0x7f0000000300)="649b73f9a8033b8678e03b43f5deae19156fb8b0882a40ed4f99bfff64fd5185b57e0a02ddfad9c5350e1b0b70742b2941438e811d3d9b9f42be40502329a7df24daa5eda73bf6deed7e5b0c55583e569a79cb36abd86f573f7fe31ab625d8222008663c571ba817f474e822648a1f8dcab548d0a5b16772563fd2f4e84279348e9cab66412e4b216c058a8973f98884863ea4a6c8eb8a3323f09fa8ace4d085bc48fd11aff0f765a3d1bf776ded730df20065b2e4bd804f64bce4ff235a8cea25e4001de663751d589e3ce8328ca121b3848c672ea2", &(0x7f0000000100)=""/18) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r1}, 0x38) [ 581.308502][ T28] audit: type=1804 audit(1595268179.379:333): pid=28127 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/471/bus" dev="sda1" ino=16377 res=1 errno=0 18:02:59 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffb) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000100)=[{0x0, 0x0, {0x1, 0xff, 0x1}, {0x1, 0xf0, 0x2}, 0xfd}, {0x0, 0x2, {0x2, 0x0, 0x3}, {0x2, 0xff, 0x3}, 0x2, 0x1}, {0x2, 0x1, {0x0, 0x0, 0x4}, {0x2, 0x1}, 0xfe}, {0x0, 0x2, {0x1, 0xf0}, {0x0, 0xf0, 0x1}, 0xff, 0xff}, {0x0, 0x0, {0x1, 0x0, 0x1}, {}, 0x1, 0x2}, {0x0, 0x3, {0x2, 0x0, 0x1}, {0x2, 0x0, 0x1}, 0xfe}, {0x1, 0x2, {0x0, 0xf0, 0x2}, {0x1, 0x1, 0x2}, 0xfd, 0xfe}], 0xe0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:02:59 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0x4}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) [ 581.763257][ T28] audit: type=1804 audit(1595268179.830:334): pid=28142 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/472/bus" dev="sda1" ino=16382 res=1 errno=0 [ 581.860951][T28143] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 582.094016][ T28] audit: type=1804 audit(1595268180.140:335): pid=28148 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/472/bus" dev="sda1" ino=16382 res=1 errno=0 18:03:00 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:03:00 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x1c1402, 0x40, 0x4}, 0x18) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r3 = open(0x0, 0x141042, 0x0) read$usbmon(r3, &(0x7f0000000200)=""/247, 0xf7) sendfile(r3, r3, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002400071fa66dd6b6cd7f463705000001", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x40, 0x2, [@TCA_RSVP_PINFO={0x20}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_RSVP_CLASSID={0x4}]}}]}, 0x70}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40c0}, 0x44) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={r4, 0x3ff, 0x9, 0x8}) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x541c, &(0x7f0000000180)) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:03:00 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) read$usbmon(r3, &(0x7f0000000200)=""/247, 0xf7) sendfile(r3, r3, 0x0, 0x8080ffffff7e) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000080)=0xffffffffffffff01) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:03:00 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46000) lseek(r1, 0x4200, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000300)=0x8) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffb) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000180)={@l2={0x1f, 0x5, @none, 0x5, 0x1}, {&(0x7f0000000080)=""/135, 0x87}, &(0x7f0000000000), 0x16}, 0xa0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0}, 0x38) [ 582.553825][T28143] device bond238 entered promiscuous mode [ 582.560281][T28143] 8021q: adding VLAN 0 to HW filter on device bond238 18:03:00 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0x4}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) [ 582.677944][ T28] audit: type=1804 audit(1595268180.750:336): pid=28198 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir194387852/syzkaller.kcCkwh/591/bus" dev="sda1" ino=16384 res=1 errno=0 18:03:01 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x28a806, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffb) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) read$usbmon(r5, &(0x7f0000000100)=""/246, 0xf6) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:03:01 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000) lseek(0xffffffffffffffff, 0x4200, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x8400fffffffb) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffb) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x3ff, 0x8, 0xe7, 0x8}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0x2, 0x0, 0x5e4e, 0xff, r5}, &(0x7f0000000180)=0x10) 18:03:01 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) [ 583.004362][T28203] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 583.151240][ T28] audit: type=1804 audit(1595268181.220:337): pid=28207 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir614119965/syzkaller.KZ2c1p/435/bus" dev="sda1" ino=16372 res=1 errno=0 [ 583.353220][ T28] audit: type=1804 audit(1595268181.260:338): pid=28207 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir614119965/syzkaller.KZ2c1p/435/bus" dev="sda1" ino=16372 res=1 errno=0 [ 583.378519][ T28] audit: type=1804 audit(1595268181.350:339): pid=28211 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/474/bus" dev="sda1" ino=16383 res=1 errno=0 18:03:01 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) read$usbmon(r1, &(0x7f0000000200)=""/247, 0xf7) sendfile(r1, r1, 0x0, 0x8080ffffff7e) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f00000001c0)=@buf={0xd2, &(0x7f0000000300)="4fb4ada5f7f43ef17b10f59175abd3cde0d46b564ae4b2f516f39a80953770ce0097fc7a97bd4c230ee94a5601a972b0ba74e9958e3a39bdc2bb64014371fe00d65d09ab0b94febeb9c9fe061a5c9683996ce415fc3ce9e91d57a69aba51fd0fbf7175394dcc0bd064827f0b47f51f3c9164dbc6807b0ca84f72428d73a221921f61dc68d5e940df25485ae2f62fbbf6716ba5097c38e9c369a8bb23056527a3194b5d66c8aa4a93a2e0473e0de427741dbec20421cc90a4e9376a1a2c8092093019cf79e5222137750da50bc659014f055c"}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r3 = open(0x0, 0x1c5043, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) ioctl$SNDRV_PCM_IOCTL_INFO(r4, 0x81204101, &(0x7f0000000080)) sendfile(r3, r3, 0x0, 0x8080ffffff7e) connect$llc(r3, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:03:01 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x88402, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x14, r4, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x24801080}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r4, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x19}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x20040844) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 583.559199][ T28] audit: type=1804 audit(1595268181.510:340): pid=28217 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir194387852/syzkaller.kcCkwh/591/bus" dev="sda1" ino=16384 res=1 errno=0 18:03:01 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0xd4de, 0x4, 0x4}) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="4d8d8bfd18ab6352bd50d2e182961000"], 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x20004080) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffb) ioctl$TIOCNOTTY(r2, 0x5422) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r1}, 0x38) [ 583.621084][ T28] audit: type=1804 audit(1595268181.540:341): pid=28209 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/474/bus" dev="sda1" ino=16383 res=1 errno=0 18:03:01 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) fgetxattr(r0, &(0x7f0000000080)=@random={'trusted.', '):\x00'}, &(0x7f0000000100)=""/41, 0x29) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 583.776778][ T28] audit: type=1804 audit(1595268181.560:342): pid=28220 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/474/bus" dev="sda1" ino=16383 res=1 errno=0 [ 583.791306][T28203] device bond239 entered promiscuous mode [ 583.885444][T28203] 8021q: adding VLAN 0 to HW filter on device bond239 18:03:02 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x7ff) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0x3, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x2}, 0x40) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) read$usbmon(r3, &(0x7f0000000200)=""/247, 0xf7) sendfile(r3, r3, 0x0, 0x8080ffffff7e) ioctl$TIOCSTI(r3, 0x5412, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r2}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:03:02 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0x4}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 18:03:02 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x9, 0x101101) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f000001d080)={&(0x7f00000000c0)={0x14, r5, 0x709}, 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x78, r5, 0x300, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x54, 0x22, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10001}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8001}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x6000) 18:03:02 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0}, 0x38) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x410000, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f00000017c0)=@urb_type_iso={0x0, {0x8, 0x1}, 0xbe7c, 0x3, &(0x7f00000007c0)="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", 0x1000, 0x5, 0x1, 0x65, 0xfffffff9, 0x7, &(0x7f0000000080)="aa8ab7e06ed8e57226a17c78a31fbdc91648da382e9d3fd002bbee", [{0x7fffffff, 0x8001}, {0x2ab, 0x40, 0x7db}, {0xdb04, 0x3, 0x7}, {0x4, 0x10000, 0x101}, {0x6, 0x80000000, 0x20}, {0x5, 0x3f, 0x10001}, {0x3, 0xf1, 0x6}, {0x7489ebef, 0x8, 0x400}, {0x88, 0xfffffffa, 0x5}, {0x40, 0x10000, 0x3}, {0x4, 0xf09, 0x81}, {0x3, 0x800, 0x7}, {0x1000, 0x71d0, 0x3}, {0x1, 0x3, 0x7ff}, {0x800, 0x3, 0xc27}, {0x0, 0x52, 0x62f}, {0x5, 0x3082, 0x1000}, {0x56e, 0x9, 0x5}, {0x8b, 0x9, 0x2}, {0x2, 0x2, 0x2}, {0x9, 0x8000, 0x200}, {0x7, 0x10000, 0xfffffff8}, {0x1ff, 0x6, 0x1}, {0x2, 0x4, 0x1}, {0x1, 0x1f5c, 0x6}, {0x1b4, 0xd1}, {0x8, 0x1, 0x80000001}, {0x200, 0x94, 0x9}, {0xffff, 0x2, 0x101}, {0x0, 0x8, 0x3}, {0x6, 0x9, 0xff}, {0x80, 0xbd, 0x200}, {0x0, 0x40, 0x5580e89a}, {0x1, 0xfffeffff, 0x5d}, {0x80000000, 0x0, 0x3e}, {0x9, 0x37, 0x9}, {0x3, 0x9}, {0x5, 0x9, 0x8}, {0x0, 0x100, 0x1}, {0xffffffff, 0x80000001, 0x5}, {0x7f, 0x22, 0x4}, {0x7, 0xcf6, 0x8}, {0xfffffffb, 0x6, 0x7ff}, {0x4, 0x0, 0x8}, {0x10000, 0x10001, 0x1}, {0x597, 0x6, 0x7}, {0x6, 0x5, 0x7}, {0x200, 0x3, 0x3f}, {0x1f, 0x842}, {0xfa1, 0x1, 0xffffffff}, {0x8, 0x16, 0x1f}, {0x6, 0x5, 0x20}, {0x4, 0x6, 0x59e6}, {0x8000, 0xff, 0x2}, {0xfffffffe, 0x100, 0x5}, {0x1, 0x81, 0x3f}, {0x194, 0xffffffff, 0x6}, {0x5, 0x91, 0x9}, {0x4, 0x1, 0xffff}, {0x8, 0x5, 0x4}, {0x3, 0x5, 0x211e}, {0x6d2b, 0x3, 0x8d}, {0xfffffffc, 0x80000000, 0xffff8a44}, {0x7ff, 0x5, 0x8}, {0x4, 0xd100, 0x10000000}, {0x3, 0x30, 0xfffffff7}, {0x7, 0x14, 0x1}, {0x0, 0x5, 0x800}, {0x7, 0x8, 0x8}, {0x1, 0xffffffff, 0x400}, {0xfda, 0x1000, 0x80000001}, {0x0, 0x6c, 0x97}, {0x10001, 0x3, 0x5}, {0x3, 0x80, 0x7}, {0x1f, 0xfff, 0x5}, {0xb71c, 0x80008000, 0x4}, {0x400, 0x7fff, 0x5}, {0xef, 0x1ff, 0x7ff}, {0x1, 0xae3d, 0x7}, {0x3, 0x2, 0x3}, {0x81, 0x101, 0x6}, {0xfff, 0x1, 0x7}, {0x9, 0x9, 0x8}, {0x7ff, 0x10000, 0x7}, {0x7a, 0x9, 0x6}, {0x460, 0x2, 0x33}, {0x8, 0x8, 0x1}, {0x7f, 0x0, 0x6c8}, {0x5, 0x20, 0xffff}, {0x5, 0x5, 0x7}, {0x0, 0x4, 0x4}, {0x80, 0x8001, 0x3}, {0x7ff, 0x7, 0x9}, {0x40, 0x0, 0xdf}, {0x93, 0x10000, 0xfffffff8}, {0x8, 0x9, 0x4}, {0xff, 0x5, 0x9}, {0x4, 0x5, 0xed1b}, {0x3, 0x8, 0x6}, {0x40, 0x2, 0x6c}, {0x8000, 0x2, 0x2}]}) read$usbmon(0xffffffffffffffff, 0x0, 0x0) [ 584.482121][T28275] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:03:02 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x46000) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) ioctl$DRM_IOCTL_MODE_CURSOR2(r4, 0xc02464bb, &(0x7f0000000100)={0x1, 0x2, 0xfffffffc, 0x0, 0x4, 0x5, 0x101, 0xff, 0x9}) lseek(r3, 0x4200, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) ioctl$VT_RELDISP(r6, 0x5605) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:03:03 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, &(0x7f0000000080)={0x8, 0x1}) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:03:03 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000)='NLBL_UNLBL\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0}, 0x38) [ 585.328604][T28275] device bond240 entered promiscuous mode [ 585.384675][T28275] 8021q: adding VLAN 0 to HW filter on device bond240 18:03:03 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x4]}, 0x8, 0x80000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @rand_addr=0x64010101}, 0x1, 0x2, 0x2}}, 0x26) r4 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r4, r4, 0x0, 0x8080ffffff7e) connect$llc(r4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:03:03 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 18:03:03 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x100) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f0000000080)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) setsockopt$inet6_dccp_buf(r2, 0x21, 0xa401ca76c1fcb5c0, &(0x7f0000000100)="8b24d8fd6a8de7b1ef9c8e0b6c5fa27a13b64806647138defdff86901f43c37182cf8df5bc6d892a5884be9ca1a7cfc5f9b285aada538281e913d112e684b172eb62f036ee2c23cc104671109b52439e0a70932e3167ab5b07bd8ffb5dde046a88e2f31ac5a7b41b9a45875bb74643a01f7cbde96aa7e3c8f4b24e1233fa09d21f011cea2f356b9358d6f8a03679dce9b4d01ba889a7a02c8943810d0ee7c5e4bb1c1f2a6ee532ae2b9e", 0xaa) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:03:03 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46000) lseek(r0, 0x4200, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffb) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r2}, 0x38) [ 585.718071][T28339] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:03:03 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x1, 0x2, 0x1, {0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, [], 0x1}, 0x9c7}}}, 0x32) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:03:03 executing program 3: socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) r3 = perf_event_open(0x0, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) dup2(r3, 0xffffffffffffffff) pwrite64(0xffffffffffffffff, &(0x7f0000000180)="d94688ead92e7091367d0e54366e5f722c805af7466c6bf574f96c14bf1f8cdc71ccbe897fc13eb98ef492c930227ebe70b3e1bc7a40bb7c97b53b17eb594ee138bd9c22bf7d60acce5bc42b5a5632381059d97ed509275620daa1b9bc67f49a64d3df7ca37b81f1a9d24c3ae3a8f6b06774452214ac0155e891b7b4ecbd3113519662629f6999739dba34172b1d906713110f36a0832931a0d34942d5767bc4aa676f07b5a879f743afb54749a02e282371e078b22d67e6716955fd0b141d166e1b15411e06ddb633", 0xc9, 0x2a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) madvise(&(0x7f0000b24000/0x1000)=nil, 0x1000, 0xa) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000080)={0x8, 0xff, 0x5}) 18:03:04 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280), 0x400000000000085, 0x24000000) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:03:04 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) read$usbmon(r3, &(0x7f0000000200)=""/247, 0xf7) sendfile(r3, r3, 0x0, 0x8080ffffff7e) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x0, 0x0, 0x1, 0xf, 0x8, 0x400}, 0x20) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) read$usbmon(r4, &(0x7f0000000200)=""/247, 0xf7) sendfile(r4, r4, 0x0, 0x8080ffffff7e) write$FUSE_NOTIFY_INVAL_INODE(r4, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x2, 0x6, 0x1f7}}, 0x28) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) [ 586.499567][T28339] device bond241 entered promiscuous mode [ 586.513719][T28339] 8021q: adding VLAN 0 to HW filter on device bond241 [ 586.576939][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 586.576954][ T28] audit: type=1804 audit(1595268184.650:351): pid=28398 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir194387852/syzkaller.kcCkwh/594/bus" dev="sda1" ino=16365 res=1 errno=0 18:03:04 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) [ 586.913960][T28404] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:03:05 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0}, 0x38) 18:03:05 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffb) read$usbmon(r2, &(0x7f00000002c0)=""/254, 0xfe) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 587.288173][T28404] device bond242 entered promiscuous mode [ 587.301096][T28404] 8021q: adding VLAN 0 to HW filter on device bond242 [ 587.439724][ T28] audit: type=1804 audit(1595268185.510:352): pid=28442 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/479/bus" dev="sda1" ino=16373 res=1 errno=0 [ 587.566814][ T28] audit: type=1804 audit(1595268185.640:353): pid=28445 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/479/bus" dev="sda1" ino=16373 res=1 errno=0 18:03:05 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 18:03:05 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) connect$llc(r2, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) read$usbmon(r3, &(0x7f0000000200)=""/247, 0xf7) sendfile(r3, r3, 0x0, 0x8080ffffff7e) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x10c, 0x4, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x90, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller1\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'wg0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'geneve1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'wg0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2eed8ca7}, @NFTA_HOOK_DEV={0x14, 0x3, 'bond0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x51e59cc6}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4040085}, 0x20000040) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) [ 587.735954][T28449] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:03:05 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffb) getpeername$llc(r2, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000100)=0x10) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, @perf_config_ext, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 587.980520][ T28] audit: type=1804 audit(1595268186.050:354): pid=28459 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/480/bus" dev="sda1" ino=16381 res=1 errno=0 18:03:06 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000) lseek(0xffffffffffffffff, 0x4200, 0x0) r3 = open(&(0x7f0000000300)='./file0\x00', 0x400201, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x1000) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)=0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r6) mount$fuse(0x0, 0x0, &(0x7f0000000000)='fuse\x00', 0x288000, &(0x7f0000000340)=ANY=[@ANYBLOB="00000061559892d1b164ea26d624a9da1a9aa55607ce1a1afb06f4672b03db911e8cf9fa7ac703dd27f99e5f0d0451a4f6c8ec56f1d44f17bb6e9878f96ae0f456466a1b90dd866421cb731f327bfd1ca792", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',euid<', @ANYRESDEC=r6, @ANYBLOB=',subj_type=,permit_directio,appraise_type=imasig,\x00']) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x40042, &(0x7f00000005c0)=ANY=[@ANYBLOB="665f16", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC=0xee01, @ANYBLOB="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", @ANYRESDEC=r6, @ANYBLOB=',func=FIRMWARE_CHECK,rootcontext=sysadm_u,fsname=-(\'(\',obj_role=\',\x00']) [ 588.210874][ T28] audit: type=1804 audit(1595268186.150:355): pid=28463 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/480/bus" dev="sda1" ino=16381 res=1 errno=0 18:03:06 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mISDNtimer\x00', 0x400000, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 588.494793][T28449] device bond243 entered promiscuous mode [ 588.531808][T28449] 8021q: adding VLAN 0 to HW filter on device bond243 18:03:06 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) read$usbmon(r0, &(0x7f0000000200)=""/247, 0xf7) sendfile(r0, r0, 0x0, 0x8080ffffff7e) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) read$usbmon(r1, &(0x7f0000000200)=""/247, 0xf7) sendfile(r1, r1, 0x0, 0x8080ffffff7e) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000100)) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000080)=0x3) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f00000002c0)=""/248, 0x103) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x2) sendmmsg(r2, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x1, 0x4) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:03:06 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f00000007c0)="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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc, 0x80, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x40) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x254440, 0x0) getsockopt$nfc_llcp(r3, 0x118, 0x0, &(0x7f0000000080)=""/141, 0x8d) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000180)="2eb9a207248b22b8ef5204882d8a3eaa1d32ed38e45587a4e36b2a52a73e9acefd6f0e188865ee2670704a3efe2c6c1b9ae69ca7e029215bbdf5f02a60580664e7d067c327c5de4641fc", 0x158b, r2}, 0x38) 18:03:06 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 18:03:07 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 588.948640][T28509] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:03:07 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0xd8, 0x8, 0x10001}) ioctl$HIDIOCGPHYS(r2, 0x80404812, &(0x7f0000000100)) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r4 = socket(0x400000000000010, 0x2, 0x0) write(r4, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r3, 0x1, 0x31, &(0x7f0000000000), 0x8) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:03:07 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) read$usbmon(r3, &(0x7f0000000200)=""/247, 0xf7) sendfile(r3, r3, 0x0, 0x8080ffffff7e) r4 = openat2(r3, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x200, 0x150, 0x1a}, 0x18) sendmsg$AUDIT_ADD_RULE(r4, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x438}, 0x1, 0x0, 0x0, 0x4000004}, 0x8c4) sendfile(r2, r2, 0x0, 0x8080ffffff7e) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f00000007c0)={r5, 0x8, 0x401}) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000800)={0x3, 'veth1_to_bridge\x00', {0x7}, 0x7f}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:03:07 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) write$ppp(r2, &(0x7f0000000100)="aaa5029c0c695e694163f3467bdab32c09fedf3be362c2b20ccc1b32b79bfb7cfc3191026c6b93afe96922a88f69d7b6618373453e429d8effa6ccd878ba54c6c92432a4975e614a8d86ffbd25499d543d601db91971251976f1bb6aba676a9d42cda4fc4d43277ed2f11c5275d5fca78d5a89f7cc7e352c7b93fcfd0dc9a955c034dd34b7e9372c8e843898ca1fe039ad8c48a8cb3275f1d98099453578b9a7a74c1d69753040a7b2e582225d2d9245e4faabe44b555e44e1e3e5aaf8e0e8526ce8b73f7406112f0a27c6f13f55b576e6736fa43f19e41e43d253b35265b2519fd2fe31cb566c2f50c871a4035e8f", 0xef) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:03:07 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000030643fbeb31377f09d0cde81f6e371654fce263000000000000030000000500"], 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x40000) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x2, 0x6}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x200, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0xc080661a, &(0x7f00000000c0)={{0x3, 0x0, @descriptor="2fa808ca0a30f7c1"}}) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f0000000380)=&(0x7f0000000340)) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) mkdir(&(0x7f00000003c0)='./bus\x00', 0x4) [ 589.666705][T28509] device bond244 entered promiscuous mode [ 589.692098][T28509] 8021q: adding VLAN 0 to HW filter on device bond244 18:03:07 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000680)=""/252, 0xfc, &(0x7f0000000240)={&(0x7f0000000200)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x1000000010, 0x80002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280052000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30096050000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@delchain={0x24, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x8}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000000)="04", 0x10, r7) add_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000300)="b1b90a0f1927da9ab887643b6b9b705bf8ed0559af42bd2e6d3832a516cbd37a26bb1ef1c1364cd9058a2ec61a1b04f96dfe414e75d461b66fb03c0242d8687f1f4f857137f67f2ef41dfe770033122241cd9dd165045a50764b9179df81ba138dc0399da70ee739ae355d21ab9879bcb56b6029e1b98cad3f7fb38d514e8b33ea49d4ad9201d9598b7768c2c60d85657514bc0bee86521b3d0f5b47b0e4320b1aad8c44eb8e888b386452614b6bed68d58545ae3661b22c0f2c04c50527913546e0de62ee2b1bc3a20c8ab96a", 0xcd, r7) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/mice\x00', 0x400602) 18:03:07 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 18:03:08 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r2, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '~\x7f\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000840}, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, [], 0x1}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000085}, 0x20000000) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000140)={0x0, @motion_det}) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r3}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) [ 590.036809][T28571] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 18:03:08 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002400071fa66dd6b6cd7f463705000001", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x40, 0x2, [@TCA_RSVP_PINFO={0x20}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_RSVP_CLASSID={0x4}]}}]}, 0x70}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000001c000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002400071fa66dd6b6cd7f463705000001", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00010000000000080002000000000000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="70ffffffff00"/17, @ANYRES32=r5, @ANYBLOB="0000000000000000080000000a000100727376703600000040000200200004000000000000000000000000000000000000000000000000000000000014000200200100000000000000000000000000010400010000000000"], 0x70}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)={0x1c8, 0x0, 0x600, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x40000}, 0x80) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) 18:03:08 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/237, 0xed, &(0x7f0000000240)={&(0x7f0000000140)={'wp256\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000400)={0x1745, 0x8, 0xfffffffffffffffe, 0x3, 0x5, 0x90fe}) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) sendmsg$AUDIT_USER(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000ed0322042bbd7000ffdbdf25a27c1f22d55f032bf2f7b25ae5ac442f43e6fa98417c0b90657f8971102810895a50499c9090baed64c7a9ffdc84173c931d36754ff5a59d6823c4060000006721f832dde09c7455a3c87592c24cbcc6651e3bbba61b55ab5da0f29ff3e483282ede4fcccd3e00eab6468563020000006591b713b2ef0000"], 0x8c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4048885) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000080)=0x10000) io_setup(0x801ff, &(0x7f0000000180)=0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000000440)) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0}, 0x38) set_thread_area(&(0x7f00000003c0)={0x2, 0x100000, 0x400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1}) [ 590.437591][ T28] audit: type=1804 audit(1595268188.510:356): pid=28592 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir194387852/syzkaller.kcCkwh/598/bus" dev="sda1" ino=16367 res=1 errno=0 [ 590.810608][T28571] device bond245 entered promiscuous mode [ 590.858306][T28571] 8021q: adding VLAN 0 to HW filter on device bond245 [ 590.900938][T28579] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 591.062756][T28582] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 591.095740][T28579] syz-executor.3 (28579) used greatest stack depth: 23200 bytes left 18:03:09 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) [ 591.105223][ T28] audit: type=1804 audit(1595268189.180:357): pid=28596 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir194387852/syzkaller.kcCkwh/598/bus" dev="sda1" ino=16367 res=1 errno=0 18:03:09 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000180)) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x86) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffb) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x1, 0x0, 0x0, 0x200}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000100)={{0xa, 0x4e24, 0xffff, @private1, 0x20}, {0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, [], 0x2c}, 0x2}, 0xfffc, [0x7fff, 0xffffffff, 0x6, 0x1ff, 0x15a, 0x8, 0x65a, 0x8]}, 0x5c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) sendmmsg$unix(r3, &(0x7f0000001640)=[{&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000740)=[{&(0x7f00000003c0)="5559394efad62bd4f74ff302c1f69fdced03b40a45b2c6a9dd3ab69a0f727c75c3b50021d32938c1928818b1f0756e5216a85d9e7a2ce9bbb27df5e2b496921bc189c38f44d7e272da7612dc79a5a80a25ebe6dcd5", 0x55}, {&(0x7f0000000440)="e669143833ccdaf8a4e21bce2d3c8ccafae0c0be6da5c2ee4ee9a0a21f1794ceae7349651885ac6ba20f1fdbb85f715efcf20a3a0b2bbdf86f599f5c8cfb530194e3a9e6f1094e62838c7b7685eb1629b0bc5c7b52a47904ebd2acde7aacd6841c018d49799eba02638e174a736946d688cdaf2c9d8dd9b18a478d4886be56df3cc6de11ab0b9f6fbabcf97ac610c1bee1c8b3f0c3bcc6be3d3925f21298f7d7932869d86d9171d9a93010b59460cca5d034d9eed899c161e620e022245fcac0b786f2800ff4e99c4c8eab6ce4e688612877d0e30e29721b3215b3aeacef28d55010d175c4133265138dc19b04373e3015f195239e00", 0xf6}, {&(0x7f0000000540)="cde686efe3dd32062bbe6f84ba0f248a359d690e0ec0e5ff62064e7cdd46e91d6d233a8580a62873a849e34a06e905ce36d7f0ff5c191fd37b392c53b28a4f720a0bdc31e32cdbaac73af0b2d98ed2f14580827949ce90cf5522fbb9678a2cc49e91f1d4ff1a1ddef7180b805baadf4fbeda75d5770c76384696c917e38ea98b6a64c7404a620b15e96fffc189fd56a81682aeb1a0d40beab2accaa24150f63984819953", 0xa4}, {&(0x7f0000000600)="182934eac914e0a0937802c0f2c72fbbab40f0489acd86efeb5a052669cfc09e26349303978d972bbbf70d024adc5b443bc6d094391fb988421555edb26fe3e18808fa7e712ff5b8f94c3173fa", 0x4d}, {&(0x7f00000001c0)="e91d9df376376e934f277c7c2f747eba571c99cc9f46", 0x16}, {&(0x7f0000000680)="dd1be05d1bb7d481f92d80662397fd273e40e31bd5b89e20b6fd16c1f9530a9e1e8ff764be4138b08b593958b958ffae2bd4511de917cc9dc95dedc3e5cd4cd9369950b413550652bca3b4965ae3b4bed82256f1d240b5f9e48d55c894602e0ee06cbe2d60c915fd9fb586b04349f8c8f061f98d6945bbea82abae4fc34e30b8ab451d27", 0x84}], 0x6, &(0x7f0000000bc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r1, r2, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8, 0x10}, {&(0x7f0000000cc0)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000d40)="8cb3257b6f371125c543f4f81580", 0xe}, {&(0x7f0000000d80)="eb4065272923f35f4647291c9613025cf528282135a2cf7ad694a66ed002c4de4a7cb1a1fa9248cf82e6280fa6cd255e57474aa9ba6f07ceedf836baf26f11cf24f1efd9e9ff3922684a45ff", 0x4c}, {&(0x7f0000000e00)="f2f72d8968206d47905d4ffda2d09f00b7df815d2cd6f964460fae04687d2d1b16f0db3ba6d8d9808cdc295d70f2bd108091d12a1680ffbabab16dbaa543323ef9ec1a973633bd2baec6270ccccd218f2f8fe0172b0443cade6bb1df8152e27d", 0x60}, {&(0x7f0000000e80)="06797a0be5955b158716e211f327bcbadb301479c2a782fa7a7bad0d4eef34f344db55641178d0eeccedcd5f5acd66770154b2e176b19a0df4fcf4d0526b2fc70f196a188abaec8101ea7a3cd86b9c6a8b3285913d563502c03667842108680f001ae35b56a7b4b53e37cc61c3fcee7fb03bf76eb01f8cabc6758e55b76e9f1694555276348050d53a67c7220ebb7c1c6cd9fcaff93ecdbcaec0d35870304e03c16cb3d1aef1635d640ae6050e990d7826f1455746be3c98bec6c682a117e2108e072e33ee2f5b734d9916f8bf32b7", 0xcf}], 0x4, &(0x7f0000001000)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60, 0x4000000}, {&(0x7f0000001080)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000013c0)=[{&(0x7f0000001100)="19f22f8bc76a3c487c55c6f508363231ee825fcadc68c471d1ce17df4b5cc07937bb35e80b03f602df7f0d6e62d8d2558f52d0e3e69af7391500ab1df45ed58e7101a0b39707ee5d449cb249e91adb7895f46b1168d3075a3967c92ee48a1dcf9c16094da1c76060b9ba2ea3afba7da2ad963db2f293aac67f18f3ecae905b9166d89c8782bd61d79e3d34c8d5b612114cb2854556e7af92fdba965080c0dd5db0c6068bb263585560d13a184cac19a36f06744fb5b367e1ea926bb2b15794206f7417", 0xc3}, {&(0x7f0000001200)="0b8c80765905a303394a41dab25f77ced6b6f5bf9b844a086fbdc0dfc665f2692c36d82a16abd47eded3f7a61a598819102f86029fc879bf91f63c3b6c050ccec2acd2b4a0c28806918c7cc70c114f8c839d603462b24779f77869a93a58c692484a7716d5c63aa20e7cd1dd837c0bf02a200f28aa9fb807a60f10fd0eaabfa19846e60e532a41a2b02c226bda1c8d392a1862028541c94c213d5a4f383a529e", 0xa0}, {&(0x7f00000012c0)="b26d979ccef5a4d2687a60b9b5be3094688c7d8c9751975d416a0ea10890ec7d4699360347fa1ba499e1c4177c74d59a655fffc4d0ed0e69f931bf3d116de0660e5769e6a551678c6397ee6843dacc8e529ea1632a4c161c1c", 0x59}, {&(0x7f0000001340)="58f340d1271944bd3139140d2d3365ba5f0be5a5ca31d7d41bac6255f1b3dfc7c8e4244c7328dced178454e066707382579f733c73a7bc3cebfc532789d3d7b90063fc3779e7a213966cf240bb4690ea4a7b495c", 0x54}], 0x4, &(0x7f0000001500)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r1, r4]}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x110, 0x4000}], 0x3, 0x8081) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:03:09 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffb) r4 = open(0x0, 0x141042, 0x120) read$usbmon(r4, &(0x7f0000000200)=""/247, 0xf7) sendfile(r4, r4, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffb) ioctl$DRM_IOCTL_CONTROL(r6, 0x40086414, &(0x7f0000000000)={0x2, 0xa1b}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:03:09 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) connect$llc(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x8400fffffffb) r4 = syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000009a03e4c42d11d994fad49bd675e611b9877f67c4946b77e081e83f75fece0ff066ba050805cdc2433cbf857ead4abcacf68ba54fb4291e5c0dbc135693ac96b80c114f6aa0b903a9c2db34c22eca24c1b8dc1df1b7a27561bc67ea57a5b950fcf56e9a374675fd256a4f96362933e0b987d03dedd55b97726f4381149a455d82d8f9033a0967dd5c", @ANYRES16=r4, @ANYBLOB="000326bd7000fedbdf250500000008000101000000000c0005000e00000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc0040) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x200801, 0x0) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9c000000dd4191459b6def447c4c638cac30e07be4c7739faf8a834a01a1c6eb4a610a80554e597bb06680", @ANYRES16=r4, @ANYBLOB="01002abd7000fcdbdf250500000008000100000000000c00030000000000000000000c00080002000000000000002c00078008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="0c00030009000000000000000c00060001000000000000000c00080006000000000000000c00030006000000000000000c000400f7ffffffffffffff"], 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) [ 591.237462][T28627] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 591.247274][ T28] audit: type=1804 audit(1595268189.320:358): pid=28629 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/484/bus" dev="sda1" ino=15827 res=1 errno=0 [ 591.457725][ T28] audit: type=1804 audit(1595268189.340:359): pid=28629 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/484/bus" dev="sda1" ino=15827 res=1 errno=0 18:03:09 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0}, 0x38) 18:03:09 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 591.700425][ T28] audit: type=1804 audit(1595268189.420:360): pid=28633 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir614119965/syzkaller.KZ2c1p/443/bus" dev="sda1" ino=15939 res=1 errno=0 18:03:09 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000000)=0x3, 0x4) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x40000, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x8) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = open(0x0, 0x141042, 0x0) read$usbmon(r5, &(0x7f0000000200)=""/247, 0xf7) sendfile(r5, r5, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5c2169d99f24061, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r4, &(0x7f0000000300)=""/253, 0xfd, 0x40002004, &(0x7f0000000140)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x31}}, 0x80) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f00000001c0)={0x1, @multicast2, 0x4e23, 0x1, 'lc\x00', 0x177bdf5093af1939, 0x9, 0x30}, 0x2c) sendmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) ioctl$SIOCGIFMTU(r6, 0x8921, &(0x7f00000000c0)) 18:03:09 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffb) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r4, 0x7709, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x3, 0x0, {0xa, 0x4e23, 0x40, @mcast2, 0x2d96}}}, 0x3a) r5 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000740), &(0x7f0000000780)=0x4) sendfile(r5, r5, 0x0, 0x8080ffffff7e) connect$llc(r5, 0x0, 0x0) mq_unlink(&(0x7f0000000100)='.\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) 18:03:09 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7fffffff, 0xa80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, r2, 0x423, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r2, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4008814) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r3}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) [ 591.843426][ T28] audit: type=1804 audit(1595268189.480:361): pid=28634 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/484/bus" dev="sda1" ino=15827 res=1 errno=0 [ 592.026502][T28627] device bond246 entered promiscuous mode [ 592.057869][ T28] audit: type=1804 audit(1595268189.490:362): pid=28629 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir722011854/syzkaller.8bVjlp/484/bus" dev="sda1" ino=15827 res=1 errno=0 [ 592.129997][T28627] 8021q: adding VLAN 0 to HW filter on device bond246 18:03:10 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x4d92f3f452e7afae, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:03:10 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000080)=""/258, 0x102, &(0x7f0000000240)={&(0x7f0000000000)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0}, 0x38) [ 592.346693][ T28] audit: type=1804 audit(1595268189.490:363): pid=28639 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir614119965/syzkaller.KZ2c1p/443/bus" dev="sda1" ino=15939 res=1 errno=0 18:03:10 executing program 4: munlockall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000040)=0x8) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0xc, 0x40000000}]}}}]}, 0x3c}}, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x3, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x17}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4e60}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) [ 592.580113][ T28] audit: type=1804 audit(1595268189.570:364): pid=28633 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir614119965/syzkaller.KZ2c1p/443/bus" dev="sda1" ino=15939 res=1 errno=0 18:03:10 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x48080, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000100)=""/127) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 592.670021][T28701] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 592.765329][ T28] audit: type=1804 audit(1595268189.670:365): pid=28633 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir614119965/syzkaller.KZ2c1p/443/bus" dev="sda1" ino=15939 res=1 errno=0 18:03:10 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, r6, 0x423, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000480)) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, r6, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x24040000}, 0x4002090) read$usbmon(r2, &(0x7f0000000200)=""/247, 0xf7) sendfile(r2, r2, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) r7 = creat(&(0x7f0000000080)='./file0\x00', 0x1c) mq_timedsend(r7, &(0x7f0000000100)="38666884e9e03a10616907ae3173af0ab01e28f07830136a81d111fdf91d5660de4d7f38a1a2af335b82cf2bb42d3727ee6d257c45136b4744624b3ee5a78e0b814aa34b0730355f6718c197d84894128d57826ee18783f1688e36dc3399440cc1db0455d4c1a25502a347e7961eb83ee908091a07d66bf138", 0x79, 0xffff, &(0x7f0000000400)={0x0, 0x989680}) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:03:11 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000100)="f951844ed02e8fe5daf23a1078e060595e1dc28d3ebef348b84d2522a718046f89aedd4797c58d32946372a0f5dd8b7db1408f000000660300000000000000f9b4f9bb1a1d1fa2c4be35c0dc5f07e747c22ebebf38ed3f034622a624ad63e432dd5b5a7cd00913c9ed63e6761f209a06be", 0x1081, r0, 0x4}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000000)="04", 0x10, r1) keyctl$get_security(0x11, r1, &(0x7f0000000080)=""/88, 0x58) 18:03:11 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r2 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, r2, 0x0, 0x8080ffffff7e) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) connect$llc(r3, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, 0x0) [ 592.992653][ T28] audit: type=1804 audit(1595268189.730:366): pid=28635 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir364736473/syzkaller.Rispx1/421/bus" dev="sda1" ino=15970 res=1 errno=0 18:03:11 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffb) connect$l2tp(r3, &(0x7f0000000080)={0x2, 0x0, @local, 0x2}, 0x10) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) [ 593.226338][ T28] audit: type=1804 audit(1595268189.730:367): pid=28645 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir614119965/syzkaller.KZ2c1p/443/bus" dev="sda1" ino=15939 res=1 errno=0 18:03:11 executing program 5: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, &(0x7f0000000240)={&(0x7f0000000140)={'wp384-generic\x00'}}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xc5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept(0xffffffffffffffff, &(0x7f00000003c0)=@isdn, &(0x7f0000000080)=0x80) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0xff, 0x40, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r4}, 0x38) creat(&(0x7f0000000040)='./bus\x00', 0x0) 18:03:11 executing program 1: keyctl$dh_compute(0x17, 0x0, &(0x7f0000000580)=""/245, 0xf5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x402, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x1, 0x40, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000240), 0x1081, r0}, 0x38) read$usbmon(0xffffffffffffffff, 0x0, 0x0) [ 593.393590][ T28] audit: type=1804 audit(1595268189.740:368): pid=28633 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir614119965/syzkaller.KZ2c1p/443/bus" dev="sda1" ino=15939 res=1 errno=0 [ 593.419284][T28701] bond247 (unregistering): Released all slaves 18:03:11 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @empty}, 0x2}}, 0x2e) recvmsg(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000300)=""/245, 0xf5}, {&(0x7f0000000180)=""/3, 0x3}, {&(0x7f0000000400)=""/97, 0x61}, {&(0x7f0000000480)=""/144, 0x90}, {&(0x7f0000000540)=""/177, 0xb1}, {&(0x7f0000000600)=""/80, 0x50}, {&(0x7f0000000680)=""/201, 0xc9}], 0x7, &(0x7f0000000800)=""/237, 0xed}, 0x40) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, &(0x7f0000000a00)) sendmsg$AUDIT_SIGNAL_INFO(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x10, 0x3f2, 0x300, 0x70bd26, 0x25dfdbff, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8020) r3 = open(0x0, 0x141042, 0x0) read$usbmon(r3, &(0x7f0000000200)=""/247, 0xf7) sendfile(r3, r3, 0x0, 0x8080ffffff7e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffb) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000080)) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080025c87000fedbdf0e340900000000000000000001f4000008002c0005000000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x1) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)) 18:03:11 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r1 = open(0x0, 0x141042, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000200)=""/247, 0xf7) sendfile(r1, r1, 0x0, 0x8080ffffff7e) connect$llc(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4800) ioctl$CHAR_RAW_FLSBUF(r2, 0x1261, &(0x7f00000000c0)=0x2bb) sendmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, 0x0) [ 593.539392][ T28] audit: type=1804 audit(1595268189.990:369): pid=28682 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir364736473/syzkaller.Rispx1/422/bus" dev="sda1" ino=16049 res=1 errno=0 [ 593.593156][ T8988] ================================================================== [ 593.601656][ T8988] BUG: KASAN: use-after-free in __linkwatch_run_queue+0x58a/0x630 [ 593.609472][ T8988] Write of size 8 at addr ffff88804815c578 by task kworker/0:5/8988 [ 593.617626][ T8988] CPU: 0 PID: 8988 Comm: kworker/0:5 Not tainted 5.8.0-rc6-next-20200720-syzkaller #0 [ 593.627170][ T8988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 593.637240][ T8988] Workqueue: events linkwatch_event [ 593.642431][ T8988] Call Trace: [ 593.645718][ T8988] dump_stack+0x18f/0x20d [ 593.650033][ T8988] ? __linkwatch_run_queue+0x58a/0x630 [ 593.655470][ T8988] ? __linkwatch_run_queue+0x58a/0x630 [ 593.660930][ T8988] print_address_description.constprop.0.cold+0xae/0x497 [ 593.667938][ T8988] ? lock_release+0x8e0/0x8e0 [ 593.672603][ T8988] ? lockdep_hardirqs_off+0x6a/0xb0 [ 593.677842][ T8988] ? vprintk_func+0x97/0x1a6 [ 593.682420][ T8988] ? __linkwatch_run_queue+0x58a/0x630 [ 593.687856][ T8988] ? __linkwatch_run_queue+0x58a/0x630 [ 593.693325][ T8988] kasan_report.cold+0x1f/0x37 [ 593.698073][ T8988] ? __linkwatch_run_queue+0x58a/0x630 [ 593.703525][ T8988] __linkwatch_run_queue+0x58a/0x630 [ 593.708792][ T8988] ? linkwatch_do_dev+0x180/0x180 [ 593.713800][ T8988] ? _raw_spin_unlock_irq+0x1f/0x80 [ 593.719002][ T8988] ? lock_is_held_type+0xbb/0xf0 [ 593.723924][ T8988] linkwatch_event+0x4a/0x60 [ 593.728580][ T8988] process_one_work+0x94c/0x1670 [ 593.733522][ T8988] ? lock_release+0x8e0/0x8e0 [ 593.738327][ T8988] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 593.743696][ T8988] ? rwlock_bug.part.0+0x90/0x90 [ 593.748628][ T8988] ? lockdep_hardirqs_off+0x6a/0xb0 [ 593.753840][ T8988] worker_thread+0x64c/0x1120 [ 593.758643][ T8988] ? __kthread_parkme+0x13f/0x1e0 [ 593.763733][ T8988] ? process_one_work+0x1670/0x1670 [ 593.768940][ T8988] kthread+0x3b5/0x4a0 [ 593.773004][ T8988] ? __kthread_bind_mask+0xc0/0xc0 [ 593.778105][ T8988] ? __kthread_bind_mask+0xc0/0xc0 [ 593.783275][ T8988] ret_from_fork+0x1f/0x30 [ 593.787686][ T8988] Allocated by task 28701: [ 593.792084][ T8988] kasan_save_stack+0x1b/0x40 [ 593.796741][ T8988] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 593.802381][ T8988] kvmalloc_node+0xb4/0xf0 [ 593.806812][ T8988] alloc_netdev_mqs+0x97/0xdc0 [ 593.811575][ T8988] rtnl_create_link+0x219/0xad0 [ 593.816407][ T8988] __rtnl_newlink+0xfa0/0x1750 [ 593.821149][ T8988] rtnl_newlink+0x64/0xa0 [ 593.825460][ T8988] rtnetlink_rcv_msg+0x44e/0xad0 [ 593.830417][ T8988] netlink_rcv_skb+0x15a/0x430 [ 593.835172][ T8988] netlink_unicast+0x533/0x7d0 [ 593.839914][ T8988] netlink_sendmsg+0x856/0xd90 [ 593.844657][ T8988] sock_sendmsg+0xcf/0x120 [ 593.849053][ T8988] ____sys_sendmsg+0x6e8/0x810 [ 593.853796][ T8988] ___sys_sendmsg+0xf3/0x170 [ 593.858363][ T8988] __sys_sendmsg+0xe5/0x1b0 [ 593.862856][ T8988] do_syscall_64+0x60/0xe0 [ 593.867264][ T8988] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 593.873134][ T8988] Freed by task 28701: [ 593.877182][ T8988] kasan_save_stack+0x1b/0x40 [ 593.881835][ T8988] kasan_set_track+0x1c/0x30 [ 593.886414][ T8988] kasan_set_free_info+0x1b/0x30 [ 593.891326][ T8988] __kasan_slab_free+0xd8/0x120 [ 593.896154][ T8988] kfree+0x103/0x2c0 [ 593.900029][ T8988] kvfree+0x42/0x50 [ 593.903906][ T8988] device_release+0x71/0x200 [ 593.908476][ T8988] kobject_put+0x171/0x270 [ 593.912870][ T8988] put_device+0x1b/0x30 [ 593.917007][ T8988] free_netdev+0x35d/0x480 [ 593.921405][ T8988] __rtnl_newlink+0x14d8/0x1750 [ 593.926235][ T8988] rtnl_newlink+0x64/0xa0 [ 593.930544][ T8988] rtnetlink_rcv_msg+0x44e/0xad0 [ 593.935459][ T8988] netlink_rcv_skb+0x15a/0x430 [ 593.940201][ T8988] netlink_unicast+0x533/0x7d0 [ 593.944942][ T8988] netlink_sendmsg+0x856/0xd90 [ 593.949684][ T8988] sock_sendmsg+0xcf/0x120 [ 593.954078][ T8988] ____sys_sendmsg+0x6e8/0x810 [ 593.958817][ T8988] ___sys_sendmsg+0xf3/0x170 [ 593.963388][ T8988] __sys_sendmsg+0xe5/0x1b0 [ 593.967868][ T8988] do_syscall_64+0x60/0xe0 [ 593.972278][ T8988] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 593.978152][ T8988] The buggy address belongs to the object at ffff88804815c000 [ 593.978152][ T8988] which belongs to the cache kmalloc-8k of size 8192 [ 593.992267][ T8988] The buggy address is located 1400 bytes inside of [ 593.992267][ T8988] 8192-byte region [ffff88804815c000, ffff88804815e000) [ 594.005702][ T8988] The buggy address belongs to the page: [ 594.011317][ T8988] page:00000000b1f0f8e3 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4815c [ 594.021443][ T8988] head:00000000b1f0f8e3 order:2 compound_mapcount:0 compound_pincount:0 [ 594.029743][ T8988] flags: 0xfffe0000010200(slab|head) [ 594.035025][ T8988] raw: 00fffe0000010200 ffffea0000fb2208 ffffea00013c1508 ffff8880aa000a00 [ 594.043588][ T8988] raw: 0000000000000000 ffff88804815c000 0000000100000001 0000000000000000 [ 594.052145][ T8988] page dumped because: kasan: bad access detected [ 594.058536][ T8988] Memory state around the buggy address: [ 594.064232][ T8988] ffff88804815c400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 594.072285][ T8988] ffff88804815c480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 594.080333][ T8988] >ffff88804815c500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 594.088368][ T8988] ^ [ 594.096321][ T8988] ffff88804815c580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 594.104362][ T8988] ffff88804815c600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 594.112396][ T8988] ================================================================== [ 594.120429][ T8988] Disabling lock debugging due to kernel taint [ 594.126556][ T8988] Kernel panic - not syncing: panic_on_warn set ... [ 594.133122][ T8988] CPU: 0 PID: 8988 Comm: kworker/0:5 Tainted: G B 5.8.0-rc6-next-20200720-syzkaller #0 [ 594.144022][ T8988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 594.154070][ T8988] Workqueue: events linkwatch_event [ 594.159258][ T8988] Call Trace: [ 594.162535][ T8988] dump_stack+0x18f/0x20d [ 594.166848][ T8988] ? __linkwatch_run_queue+0x510/0x630 [ 594.172361][ T8988] panic+0x2e3/0x75c [ 594.176237][ T8988] ? __warn_printk+0xf3/0xf3 [ 594.180852][ T8988] ? _raw_spin_unlock_irqrestore+0x5b/0xe0 [ 594.186648][ T8988] ? __linkwatch_run_queue+0x58a/0x630 [ 594.192079][ T8988] ? __linkwatch_run_queue+0x58a/0x630 [ 594.197525][ T8988] end_report+0x4d/0x53 [ 594.201656][ T8988] kasan_report.cold+0xd/0x37 [ 594.206322][ T8988] ? __linkwatch_run_queue+0x58a/0x630 [ 594.211753][ T8988] __linkwatch_run_queue+0x58a/0x630 [ 594.217011][ T8988] ? linkwatch_do_dev+0x180/0x180 [ 594.222012][ T8988] ? _raw_spin_unlock_irq+0x1f/0x80 [ 594.227185][ T8988] ? lock_is_held_type+0xbb/0xf0 [ 594.232097][ T8988] linkwatch_event+0x4a/0x60 [ 594.236665][ T8988] process_one_work+0x94c/0x1670 [ 594.241582][ T8988] ? lock_release+0x8e0/0x8e0 [ 594.246234][ T8988] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 594.251583][ T8988] ? rwlock_bug.part.0+0x90/0x90 [ 594.256497][ T8988] ? lockdep_hardirqs_off+0x6a/0xb0 [ 594.261674][ T8988] worker_thread+0x64c/0x1120 [ 594.266332][ T8988] ? __kthread_parkme+0x13f/0x1e0 [ 594.271341][ T8988] ? process_one_work+0x1670/0x1670 [ 594.276541][ T8988] kthread+0x3b5/0x4a0 [ 594.280586][ T8988] ? __kthread_bind_mask+0xc0/0xc0 [ 594.285671][ T8988] ? __kthread_bind_mask+0xc0/0xc0 [ 594.290757][ T8988] ret_from_fork+0x1f/0x30 [ 594.296437][ T8988] Kernel Offset: disabled [ 594.300785][ T8988] Rebooting in 86400 seconds..