= socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0xa, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:14:48 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0xc000, 0x0, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1733.698353][ T8796] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:14:48 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x3000], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) [ 1733.743641][ T8796] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:14:48 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x5502], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:14:48 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0xfd8f, 0x0, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:14:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x203, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:14:48 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1733.922691][ T8796] 8021q: adding VLAN 0 to HW filter on device bond391 [ 1733.989729][ T8796] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1734.011942][ T8796] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1734.024440][ T8896] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:14:49 executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0xa, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:14:49 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x3201], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:14:49 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0xf, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:14:49 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0xff2f, 0x0, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:14:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x5600], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:14:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x204, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:14:49 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1735.032573][ T8979] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1735.063230][ T8982] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1735.076130][ T8979] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:14:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x5800], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:14:49 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x3202], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:14:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x205, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1735.224307][ T8979] 8021q: adding VLAN 0 to HW filter on device bond392 [ 1735.232282][ T8982] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1735.298659][ T8982] 8021q: adding VLAN 0 to HW filter on device bond9 02:14:50 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1735.351542][ T8996] bond9: (slave ip6tnl1): The slave device specified does not support setting the MAC address 02:14:50 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x3, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1735.458027][ T8996] bond9: (slave ip6tnl1): Error -95 calling set_mac_address [ 1735.653220][ T8979] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1735.672655][ T8979] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1735.680609][ T9084] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:14:50 executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x3, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:14:50 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x3401], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:14:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x206, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:14:50 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x5b01], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:14:50 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x4, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:14:50 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x14, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) [ 1735.787959][ T9130] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:14:50 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x5, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1735.833845][ T9130] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:14:50 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x3501], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:14:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x207, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:14:50 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x5b03], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:14:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x208, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1736.021947][ T9130] 8021q: adding VLAN 0 to HW filter on device bond393 [ 1736.065151][ T9126] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1736.073544][ T9138] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1736.096260][ T9138] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1736.105771][ T9140] netlink: 'syz-executor.3': attribute type 20 has an invalid length. 02:14:50 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x6, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1736.132279][ T9140] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1736.152054][ T9140] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1736.184350][ T9250] bond394 (uninitialized): Released all slaves 02:14:51 executing program 0: unshare(0x6c060000) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x74) unshare(0x40000000) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x6) bind(0xffffffffffffffff, &(0x7f00000003c0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=@gettfilter={0x4c, 0x2e, 0x4, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xf, 0x3}, {0x6, 0x6}, {0x10, 0x1}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x603f0cd3}, {0x8, 0xb, 0x7f}, {0x8, 0xb, 0x800}, {0x8, 0xb, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44004}, 0x6ba0ef947d690eb4) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f000000000000f10febca0546", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca000000b0"], 0x140}}, 0x4810) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) 02:14:51 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x3503], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:14:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x210, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:14:51 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x39, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:14:51 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x7, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:14:51 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x3703], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:14:51 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x6102], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 1736.379486][ T9264] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:14:51 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x8, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:14:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x21a, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1736.520892][ T9274] 8021q: adding VLAN 0 to HW filter on device bond394 02:14:51 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x6103], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 1736.582034][ T9264] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.3'. 02:14:51 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x3801], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:14:51 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x9, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1736.674303][ T9264] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1736.730125][ T9336] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.0'. 02:14:52 executing program 0: unshare(0x6c060000) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x74) unshare(0x40000000) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x6) bind(0xffffffffffffffff, &(0x7f00000003c0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=@gettfilter={0x4c, 0x2e, 0x4, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xf, 0x3}, {0x6, 0x6}, {0x10, 0x1}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x603f0cd3}, {0x8, 0xb, 0x7f}, {0x8, 0xb, 0x800}, {0x8, 0xb, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44004}, 0x6ba0ef947d690eb4) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f000000000000f10febca0546", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca000000b0"], 0x140}}, 0x4810) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) 02:14:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x224, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:14:52 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x6202], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:14:52 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x3a01], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:14:52 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="fc00000018000700ab092500090007000a060000000000060000369321000100ff0100000005d00000000000000398996c92773411419da79bb94b46fe000000bc00020000036c6c256f1a272f2e117c22ebc205214000000000008934d07302ad031720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x77, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:14:52 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xa, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:14:52 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xe, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1737.675357][ T9445] xt_ct_set_timeout: 50 callbacks suppressed [ 1737.675374][ T9445] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1737.710733][ T9450] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1737.740375][ T9447] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1737.761553][ T9445] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1737.763868][ T9454] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1737.796499][ T9464] xt_CT: You must specify a L4 protocol and not use inversions on it 02:14:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x22a, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1737.836699][ T9463] validate_nla: 3 callbacks suppressed [ 1737.836736][ T9463] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:14:52 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x10, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:14:52 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x3c01], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:14:52 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x6401], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 1737.880376][ T9488] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1737.935741][ T9463] 8021q: adding VLAN 0 to HW filter on device bond395 [ 1738.012866][ T9542] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1738.074014][ T9557] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1738.092124][ T9466] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.0'. 02:14:52 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x1d, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1738.104961][ T9559] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1738.166769][ T9557] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1738.260097][ T9447] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1738.288814][ T9447] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1738.300064][ T9569] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:14:53 executing program 0: unshare(0x6c060000) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x74) unshare(0x40000000) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x6) bind(0xffffffffffffffff, &(0x7f00000003c0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=@gettfilter={0x4c, 0x2e, 0x4, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xf, 0x3}, {0x6, 0x6}, {0x10, 0x1}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x603f0cd3}, {0x8, 0xb, 0x7f}, {0x8, 0xb, 0x800}, {0x8, 0xb, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44004}, 0x6ba0ef947d690eb4) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f000000000000f10febca0546", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca000000b0"], 0x140}}, 0x4810) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) 02:14:53 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x3c02], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:14:53 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x6402], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:14:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x22c, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:14:53 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:14:53 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2d, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1739.072211][ T9609] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:14:53 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x48, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:14:53 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x3e01], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) [ 1739.132060][ T9609] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:14:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x22f, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:14:54 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x4c, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:14:54 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x6600], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 1739.278867][ T9609] 8021q: adding VLAN 0 to HW filter on device bond396 02:14:54 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x4201], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) [ 1739.379983][ T9647] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1739.455717][ T9609] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1739.479996][ T9609] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1739.504913][ T9690] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:14:55 executing program 0: unshare(0x6c060000) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x74) unshare(0x40000000) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x6) bind(0xffffffffffffffff, &(0x7f00000003c0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=@gettfilter={0x4c, 0x2e, 0x4, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xf, 0x3}, {0x6, 0x6}, {0x10, 0x1}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x603f0cd3}, {0x8, 0xb, 0x7f}, {0x8, 0xb, 0x800}, {0x8, 0xb, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44004}, 0x6ba0ef947d690eb4) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f000000000000f10febca0546", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca000000b0"], 0x140}}, 0x4810) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) 02:14:55 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x50, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:14:55 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x4403], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:14:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x230, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:14:55 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x3}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:14:55 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x6601], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 1740.482159][ T9789] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:14:55 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x60, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:14:55 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x4800], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) [ 1740.535153][ T9789] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:14:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x248, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:14:55 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x6801], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:14:55 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x4801], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:14:55 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x68, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1740.700526][ T9789] 8021q: adding VLAN 0 to HW filter on device bond397 [ 1740.794920][ T9806] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1740.839436][ T9789] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1740.869588][ T9789] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1740.910057][ T9886] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:14:56 executing program 0: unshare(0x6c060000) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x74) unshare(0x40000000) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x6) bind(0xffffffffffffffff, &(0x7f00000003c0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=@gettfilter={0x4c, 0x2e, 0x4, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xf, 0x3}, {0x6, 0x6}, {0x10, 0x1}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x603f0cd3}, {0x8, 0xb, 0x7f}, {0x8, 0xb, 0x800}, {0x8, 0xb, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44004}, 0x6ba0ef947d690eb4) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f000000000000f10febca0546", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca000000b0"], 0x140}}, 0x4810) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) 02:14:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x6802], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:14:56 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x6c, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:14:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x24a, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:14:56 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x4803], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:14:56 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x6}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:14:56 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x70, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1741.673522][ T9945] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:14:56 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x4901], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) [ 1741.753420][ T9945] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:14:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x6a03], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:14:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x250, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:14:56 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x74, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1741.864363][ T9945] 8021q: adding VLAN 0 to HW filter on device bond398 [ 1741.946234][ T9967] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.0'. 02:14:56 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x4a00], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) [ 1742.002686][ T9945] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1742.066013][ T9945] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1742.109734][T10041] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:14:57 executing program 0: unshare(0x6c060000) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x74) unshare(0x40000000) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x6) bind(0xffffffffffffffff, &(0x7f00000003c0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=@gettfilter={0x4c, 0x2e, 0x4, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xf, 0x3}, {0x6, 0x6}, {0x10, 0x1}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x603f0cd3}, {0x8, 0xb, 0x7f}, {0x8, 0xb, 0x800}, {0x8, 0xb, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44004}, 0x6ba0ef947d690eb4) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f000000000000f10febca0546", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca000000b0"], 0x140}}, 0x4810) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) 02:14:57 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x7a, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:14:57 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x4a03], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:14:57 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x8}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:14:57 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x6c02], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:14:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x256, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1743.158386][T10130] xt_ct_set_timeout: 41 callbacks suppressed [ 1743.158403][T10130] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1743.159121][T10131] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1743.193645][T10136] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:14:58 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xa0, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:14:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x258, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1743.203992][T10130] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1743.238596][T10137] xt_CT: You must specify a L4 protocol and not use inversions on it 02:14:58 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x4b01], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) [ 1743.271370][T10143] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1743.317997][T10142] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1743.323813][T10159] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1743.405145][T10201] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1743.415661][T10142] 8021q: adding VLAN 0 to HW filter on device bond399 02:14:58 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x6d03], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 1743.452343][T10201] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1743.457929][T10144] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.0'. 02:14:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x266, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:14:58 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xc0, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1743.540124][T10220] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1743.542607][T10222] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1743.593437][T10136] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1743.678910][T10136] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1743.715476][T10156] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:14:59 executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x14, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:14:59 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x4b02], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:14:59 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2b9, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:14:59 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x6e02], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:14:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x26e, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:14:59 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:14:59 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x300, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1744.526003][T10311] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:14:59 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x4c02], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:14:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x270, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:14:59 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x7000], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 1744.612227][T10313] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1744.634058][T10320] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 02:14:59 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x36d, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:14:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x274, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1744.821028][T10320] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1744.901477][T10319] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1745.058749][T10319] 8021q: adding VLAN 0 to HW filter on device bond400 [ 1745.135809][T10323] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 1745.157355][T10446] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:15:00 executing program 0 (fault-call:6 fault-nth:0): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 02:15:00 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x4d03], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:00 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x3a0, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x7101], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x276, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1745.192991][T10446] bond401 (uninitialized): Released all slaves [ 1745.213861][T10311] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1745.232848][T10311] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:00 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xa}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:15:00 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x5000], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) [ 1745.351518][T10461] FAULT_INJECTION: forcing a failure. [ 1745.351518][T10461] name failslab, interval 1, probability 0, space 0, times 0 [ 1745.364144][T10461] CPU: 0 PID: 10461 Comm: syz-executor.0 Tainted: G W 5.13.0-syzkaller #0 [ 1745.373947][T10461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1745.384003][T10461] Call Trace: [ 1745.387281][T10461] dump_stack_lvl+0xcd/0x134 [ 1745.391894][T10461] should_fail.cold+0x5/0xa [ 1745.396407][T10461] ? __sigqueue_alloc+0x310/0x630 [ 1745.401522][T10461] should_failslab+0x5/0x10 [ 1745.406022][T10461] kmem_cache_alloc+0x5e/0x4a0 [ 1745.410797][T10461] __sigqueue_alloc+0x310/0x630 [ 1745.415688][T10461] __send_signal+0x631/0x1090 [ 1745.420373][T10461] send_sig+0xcb/0x160 [ 1745.424441][T10461] ? send_sig_info+0x140/0x140 [ 1745.429203][T10461] ? __init_waitqueue_head+0xd0/0xd0 [ 1745.434544][T10461] ? fs_reclaim_release+0x9c/0xf0 [ 1745.439565][T10461] sk_stream_error+0xaa/0x100 [ 1745.444253][T10461] tcp_sendmsg_locked+0x1959/0x2e50 02:15:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x7103], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 1745.449463][T10461] ? lock_downgrade+0x6e0/0x6e0 [ 1745.454315][T10461] ? tcp_remove_empty_skb+0x8a0/0x8a0 [ 1745.459787][T10461] ? rwlock_bug.part.0+0x90/0x90 [ 1745.464730][T10461] ? __local_bh_enable_ip+0xa0/0x120 [ 1745.470019][T10461] tcp_sendmsg+0x2b/0x40 [ 1745.474262][T10461] inet6_sendmsg+0x99/0xe0 [ 1745.478740][T10461] ? inet6_compat_ioctl+0x310/0x310 [ 1745.483940][T10461] sock_sendmsg+0xcf/0x120 [ 1745.488353][T10461] __sys_sendto+0x21c/0x320 [ 1745.492857][T10461] ? __ia32_sys_getpeername+0xb0/0xb0 [ 1745.498209][T10461] ? lock_downgrade+0x6e0/0x6e0 [ 1745.503041][T10461] ? lock_release+0x522/0x720 [ 1745.507695][T10461] ? lock_acquire+0x442/0x510 [ 1745.512374][T10461] ? lock_release+0x522/0x720 [ 1745.517045][T10461] ? __context_tracking_exit+0xb8/0xe0 [ 1745.522497][T10461] ? lock_downgrade+0x6e0/0x6e0 [ 1745.527331][T10461] ? lock_downgrade+0x6e0/0x6e0 [ 1745.532163][T10461] ? get_vtime_delta+0x26e/0x420 [ 1745.537091][T10461] __x64_sys_sendto+0xdd/0x1b0 [ 1745.541841][T10461] ? syscall_enter_from_user_mode+0x21/0x70 [ 1745.547721][T10461] do_syscall_64+0x35/0xb0 [ 1745.552123][T10461] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1745.558017][T10461] RIP: 0033:0x4665d9 [ 1745.561893][T10461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1745.581478][T10461] RSP: 002b:00007f2bc6490188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1745.589880][T10461] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 02:15:00 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x500, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1745.597834][T10461] RDX: 00000000d0d0c2ac RSI: 0000000020000080 RDI: 0000000000000005 [ 1745.605783][T10461] RBP: 00007f2bc64901d0 R08: 0000000000000000 R09: 0000000000000000 [ 1745.613729][T10461] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 1745.621677][T10461] R13: 0000000000a9fb1f R14: 00007f2bc6490300 R15: 0000000000022000 02:15:00 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 02:15:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x27a, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:00 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x5001], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) [ 1745.712964][T10479] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1745.740096][T10479] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:15:00 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x600, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1745.934366][T10479] 8021q: adding VLAN 0 to HW filter on device bond401 02:15:00 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x42800) fcntl$setsig(r2, 0xa, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r2, 0x3b70, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x249e}) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) 02:15:00 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x5302], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:00 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x700, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1746.058835][T10485] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x27e, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1746.104670][T10485] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:15:01 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xb}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:15:01 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) mmap$snddsp_status(&(0x7f0000ffc000/0x2000)=nil, 0x1000, 0xa, 0x30, r2, 0x82000000) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000000180)={0xa, 0x2, 0x6, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) fsetxattr(r2, &(0x7f00000001c0)=@known='trusted.overlay.origin\x00', &(0x7f0000000200)='\x00', 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 02:15:01 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x5403], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x7400], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:01 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x900, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:01 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000b40)={0xffffffffffffffff}, 0x0) fcntl$setsig(r2, 0xa, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000000340)={0x4, "36e3f6b1640222590beb7ee5f3f45a691fd8cb94914fa5d63769be393be494332f11eed51bea29bac66cd06d5472ba23c9f9a1eb10d2b664757b5bd38423c314", {0x8000000000000, 0x1}}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000040)=ANY=[@ANYBLOB="0800000069f9800000000000"]) pipe2(&(0x7f0000000b40)={0xffffffffffffffff}, 0x0) fcntl$setsig(r3, 0xa, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280), 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000300)) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x800}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r4, 0x0, r1, 0x0, 0x406f408, 0x0) pipe2(&(0x7f0000000b40)={0xffffffffffffffff}, 0x0) fcntl$setsig(r6, 0xa, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r6, 0x81785501, &(0x7f0000000180)=""/82) 02:15:01 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x5600], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x7502], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 1746.368774][T10573] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:01 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @mcast2, 0xb7}, 0x47) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0xa000000000, 0x10001, 0x7fffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) r4 = openat$cgroup_ro(r1, &(0x7f0000000080)='freezer.state\x00', 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000300)="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", 0x45a, 0x1, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) 02:15:01 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xa00, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x28c, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1746.419511][T10573] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1746.503546][T10573] 8021q: adding VLAN 0 to HW filter on device bond402 [ 1746.524975][T10573] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1746.551330][T10583] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:15:01 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xe00, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:01 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x10}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:15:01 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r3, 0x0, 0x0, 0x24040801, &(0x7f0000b63fe4)={0xa, 0x2, 0x9176, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 02:15:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x7600], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:01 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x5800], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:01 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x1d00, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x298, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:01 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x5, 0x8001, @mcast1, 0xd4b}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x4000, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) [ 1746.839425][T10677] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:01 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x5b01], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:01 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x1f00, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x7a00], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x2ae, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:01 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) [ 1746.986489][T10677] 8021q: adding VLAN 0 to HW filter on device bond403 [ 1747.027467][T10688] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:02 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x11}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:15:02 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2000, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:02 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x5b03], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x2b0, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:02 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000040)=0x3, 0x4) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 02:15:02 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2d00, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:02 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x6103], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:02 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x7c00], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:02 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0xc90400, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x2f, 0x0, "b6fa94a765946125ac780af7e508cae9b357bab56e8de8b3b7cec3de5fe962f03b06bf52a1fd6e9f21f4e549654f02385387cdef604bc895fa2b685fbce5ac9a32c9784f24ad0ba0303bad0293347efd"}, 0xd8) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71eaa3ce110d5578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa794751b159eeb5a688138dea09b7707bfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/220, 0xdc, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) [ 1747.402362][T10780] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x2b2, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:02 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x6401], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:02 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2fff, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1747.534185][T10789] 8021q: adding VLAN 0 to HW filter on device bond404 [ 1747.621630][T10780] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1747.655937][T10849] bond405 (uninitialized): Released all slaves 02:15:02 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="fc00000018000700ab092500090007000a060000000000060000369321000100ff0100000005d00000000000000398996c92773411419da79bb94b46fe000000bc00020000036c6c256f1a272f2e117c22ebc205214000000000008934d07302ad031720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x39}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:15:02 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x7d03], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:02 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x6402], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x2c4, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:02 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000040)=0x7ff, 0x4) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180), 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x9b1, 0x0) 02:15:02 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x4000, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:02 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x338, 0x140, 0xffffffff, 0xffffffff, 0x140, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x8, 0x2, '\x00', {0xed}}}}, {{@ipv6={@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xffffff00, 0xffffffff], [0xff000000, 0xff, 0x0, 0xff000000], 'veth0_to_hsr\x00', 'batadv0\x00', {0xff}, {0xff}, 0x2f, 0x0, 0x0, 0x22}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@eui64={{0x28}}, @common=@inet=@udp={{0x30}, {[0x4e23, 0x4e21], [0x4e22, 0x4e21], 0x2}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x3, 0x7f}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) sendto$inet6(r2, 0x0, 0x0, 0x20004005, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @local, 0x20000}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f00000001c0)=""/238, 0xee, 0x100, &(0x7f00000006c0)={0xa, 0x4e23, 0x3f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x101}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0x4, 0x4, 0x3, {0xa, 0x4e24, 0xb3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}}}, 0x3a) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) 02:15:02 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x6600], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) [ 1747.870047][T10870] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:02 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x4800, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x2cd, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:02 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x7e00], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:02 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x80282, 0x0) sendto$inet6(r2, &(0x7f0000000180)="eb67ced5bda03b8c1aede70e02fcba2eb71a903ad71791b0472f7a900e7854e3bfb9207664e601f782437a744386c1890d6a1fcfe8999416e5510e285a16c56dcef70522deb472e4409d897cde58fdecc44f4f60e2b0099879888d010cc589a0aca3ad9c4db6e10b4c425362b3a34f2b1290f5be69e41e7199c5a7a782585c472d3c3c72544e33997afd09072ac7a5360d244725b2cd7663796305683b36a5c72ac63a959a47814ec47eab0d628ee9f1c7377e50596dfb7a587480cb5dd5bf72ba33a30d", 0xc4, 0x2004c095, &(0x7f0000000280)={0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}, 0x1c) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) [ 1747.994292][T10870] 8021q: adding VLAN 0 to HW filter on device bond405 [ 1748.063772][T10870] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1748.098205][T10870] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:03 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x301}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:15:03 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x4c00, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:03 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x6603], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:03 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000000040)={0x0, 0x4}) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 02:15:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x2ce, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:03 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x8202], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:03 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x5000, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1748.221171][T10948] xt_ct_set_timeout: 80 callbacks suppressed [ 1748.221209][T10948] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1748.249311][T10953] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1748.284710][T10956] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1748.287239][T10958] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:03 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) accept$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x1c) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 02:15:03 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x6801], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) [ 1748.413750][T10956] xt_CT: You must specify a L4 protocol and not use inversions on it 02:15:03 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x6000, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:03 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) [ 1748.419154][T10984] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1748.469463][T10958] 8021q: adding VLAN 0 to HW filter on device bond406 02:15:03 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x6802], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) [ 1748.508713][T11012] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1748.539795][T11016] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1748.561167][T10958] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1748.625174][T11030] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1748.632372][T11031] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1748.658145][T10958] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:03 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="fc00000018000700ab092500090007000a060000000000060000369321000100ff0100000005d00000000000000398996c92773411419da79bb94b46fe000000bc00020000036c6c256f1a272f2e117c22ebc205214000000000008934d07302ad031720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x3, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:15:03 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000240)='syz0\x00') bind(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000b40)={0xffffffffffffffff}, 0x0) fcntl$setsig(r3, 0xa, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f00000002c0)=0x1) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) r4 = socket$inet6(0xa, 0x5, 0x1f) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7}, 0x1c) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x339a00, 0x0) getsockname$l2tp6(r5, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000200)=0x20) 02:15:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x2d0, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:03 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x6a03], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:03 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x8501], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:03 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x6800, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1748.699372][T11019] validate_nla: 7 callbacks suppressed [ 1748.699388][T11019] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:15:03 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x6c00, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:03 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x6d03], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:03 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) r3 = syz_io_uring_complete(0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r4, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8840}, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) [ 1748.787630][T11047] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1748.871685][T11053] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:03 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x8702], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:03 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x6e00], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:03 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x6d03, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1748.988204][T11056] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1749.118968][T11056] 8021q: adding VLAN 0 to HW filter on device bond407 [ 1749.275428][T11069] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1749.331788][T11056] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1749.341974][T11056] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1749.354040][T11132] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1749.366626][T11132] bond408 (uninitialized): Released all slaves 02:15:04 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x5, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:15:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x2d6, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:04 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0xd) 02:15:04 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x6e03], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:04 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x7000, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:04 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x8815], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x2e4, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:04 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x8903], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 1749.495107][T11152] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1749.524812][T11152] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:15:04 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x7000], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:04 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x7400, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1749.578020][T11152] 8021q: adding VLAN 0 to HW filter on device bond408 02:15:04 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) pipe2(&(0x7f0000000b40)={0xffffffffffffffff}, 0x0) fcntl$setsig(r3, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x29, 0x5d, 0x1, 0xebf6, 0x48, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x40, 0x3, 0x8}}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@deltclass={0x2c, 0x29, 0x7cf3bd3bfe939422, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x7, 0xfff2}, {0x425cdaf3c70f76ae, 0x10}, {0x4, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x48001) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) sendto$inet6(r0, &(0x7f0000000340)="9c8849740f238766957fb0c7c405597b37412be78f921f3dc82829b686039e806b", 0x21, 0x0, &(0x7f0000000380)={0xa, 0x4e21, 0x8, @mcast1, 0xecd9}, 0x1c) pipe2(&(0x7f0000000b40)={0xffffffffffffffff}, 0x0) fcntl$setsig(r5, 0xa, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@getneightbl={0x14, 0x42, 0x20, 0x70bd2d, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20060000}, 0x40050) [ 1749.660577][T11194] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 1749.677111][T11152] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1749.703282][T11200] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:15:04 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:15:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x2ee, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:04 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x8a01], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:04 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x40) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000040)={0x3ff, 0x7c415df3, {r3}, {0xffffffffffffffff}, 0x6, 0x1}) 02:15:04 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x7103], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:04 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x7a00, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1749.883821][T11225] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1749.915441][T11225] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:15:04 executing program 0: write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00'}, 0x1c) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x406f408, 0x0) 02:15:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x2f0, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:04 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x8ffd, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:04 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x8c00], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 1750.045768][T11225] 8021q: adding VLAN 0 to HW filter on device bond409 [ 1750.073833][T11239] netlink: 'syz-executor.3': attribute type 8 has an invalid length. 02:15:04 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x7400], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:04 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xa000, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1750.145831][T11225] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1750.196098][T11225] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1750.265291][T11290] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:15:05 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x7600], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:05 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xa003, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:05 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000180), 0x4, 0x101100) write$binfmt_misc(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x3, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40000) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0x406f408, 0x0) 02:15:05 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x9101], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:05 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x9, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:15:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x2f4, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:05 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4000, &(0x7f0000b63fe4)={0xa, 0x4e21, 0x400, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 02:15:05 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xb902, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1750.443954][T11330] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:05 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x9103], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:05 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x7602], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:05 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xc000, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1750.525272][T11345] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:15:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000340)={0x0, 0x0, 0x9}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000003740)=ANY=[@ANYBLOB="f4000000", @ANYBLOB="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", @ANYBLOB="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"], 0xf4}, 0x1, 0x0, 0x0, 0x80001}, 0x48000) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0xf0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [0x0, 0x0, 0x0, 0xff], [], 'geneve1\x00', 'vcan0\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendmmsg(r6, &(0x7f00000023c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000380)="4d7ae87629c4ca239249f19b4b27b4ad87dd636a308517d409e143b93e44d5bab7bc7c8d54ca644752c2185b94e048d2627afa3fa54ef564372da83fdc550147a45e6190fc819c99576277afa33d378dab5542616b0b44b0ae0c99670818490c1d392dba0a049548135515703a1ea8d89fea0c21b5b37f44c608898e2d0eaf70975bbbaf432eeb76a0", 0x89}, {&(0x7f0000000440)="598aaac30caaa507e28d0b51d85a0bf74563f02b493d8b59a52d07999ceefa21e1182b1c1055311ee7cdc77688350b203cf4f7f4133e11172cd78ceeec68bd73b15f05d3ca945de6fd4ee910ad1972152a1f0b9898b2238b8d7e158c738453928b13fba428e12d3950a6435d75d24a62f74901468928a31c42b2c23d1df5f5aa196acd1a7cbecbbe956bace6640d28a584859ec3baa2094a280f1c53cb77c7267d5b26d64fc3dad2e21abb27ca84126a865238a29a6d649cb40ba5a172037d11f0794d07142b1d644ae992e30f4d05699845a621d1731f320c55446ecc9fbaeb3e431c456ad8ae42dced8f8c644060274ba7bf400043a1dd23d5", 0xfa}, {&(0x7f0000000540)}, {&(0x7f0000000580)="8943a8fa69435862e3dad1df13dea84e29e165347c0215fdd70d3f8de341ae940f19535e16bc8bb87d342adc7c", 0x2d}, {&(0x7f00000005c0)="c917f551d61707a9e851ad96344149769902a66d1bf9ba7c666e67d73cdfddcc9c8a1f674723b44dcaec08f23be6cadfe84f5b7a07d74bbc67c146d1e0626cd03b480ca6b98af10779227608effd34e2826ec69d28385e94085a24013b6428518f2036a2de8f74d6ce154f2b35e0acd9178fa15678e945c91b224b4d8e954c9a5553249a2676e62617d852765e4ead66e9dc2b9850fa6984f6472ef5c20f3e1b0814039b81fda24628150d252c01e8", 0xaf}, {&(0x7f0000000680)="f22eff35dd50b724294e500f59f93013fed401e665020d4035e14f7d9cf508937922bbfa83472c193a1050583675828a8a4c59cad355e47f7428418b8d4b8c616e108abf6381081bbdee9a7ca9", 0x4d}], 0x6, &(0x7f0000000b40)=[{0x48, 0x3a, 0xfffffff9, "913a4acd71f0953be339bd5c6896749ebed0778548733dc9d6a9feaa51e40796c9da3657474d2b11ed2a97dad53de14c47de"}, {0x1010, 0x88, 0x10001, "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"}, {0xa8, 0x101, 0x6, "cb9bc723c2d64fe242630dd20657f9cd9d43e88a4aebd50c261d544abf81b6c8cc03b74417985c15d67c70650372d3129130c38a946dd073d2875b9c5188da96c8d3235f74f083f7acbdb0c37e0f88351753bbc4c9b90f5265c26dadcc8a582ba21b603773dbe3fd0f7274f24945f176ddee7f8cadc12587f2b72ae83c19b0d4a839356a9d83675afd7c319614584af2257b37ce"}, {0xb0, 0x113, 0x8, "5dbfc72d1744e1aa4e85fd3a4c031965333c75d62ac8db197d1c74b19a46c09e500d432a39282fe313ce745e52e2480bcda701138e4955f1013b7e8fe45dd0bd13cf9f035b5d106f2c1e11b3556dd3fee47f91fb67716b3a10076d470790df72899ae39e15ef643b92496e6ef5106ff30405333614aea12c2fd44808fedd2d264e9fb9557db0cb9e281741445c173ea956d36ce6f7b0c75b9843c4"}, {0x50, 0x116, 0x9, "0a1263851dacbc51bf3866cf533c79dbc4c0bfbf37d686481f1804d7d2c1f36ef01605656a78b011041a7aa16c0667c7f5e8f9538cb4d02d804baa2fb7"}, {0xd8, 0x110, 0xb8, "ab5346cd20b2637000678374c653b883ddeeb880243d19906f0b7d8ad66676872e72e9a567b11ba344653cfdd9595f3f04260046592ad749767b15d1c1d53765ebfd9b846c7d896a948139b9104345946a494d7dc44ddb477845f0c66a5958f5873197b006d7f5d7416cae49f538fac0d0642b8113dd93123cb73c013cae8ca34bba6851820915e7ebdad8f5f316fb420dcd4350f1b7768226ee96dd8e10036b371277f50eb5c831268ae2e5a42694efcb45d07cefa0d023c18658cc7fa01962b18d09def8"}, {0xb0, 0x11b, 0x8000, "9d9a10a1029ae4594e7611d27515a97eb8dbeb128b87cdfad185d1426d6fbeacdf8e440e2908253631f31fbcc0e70757c68521a50596bc5f5e4e85e90ea04411d761845f2f31771736936623cfd4e001e3497f5ee34c43134311879d8bc1c8e98f7e27634b704d4ca885f69ddd34d8b7850a9c020789ecbd747f9cd144bea2e726eefcdb373541da5aecb53b73f9fc1c3b9105fc1c6966e16a91e5f15e"}, {0x28, 0x102, 0x81, "2603a0a0573ea56f2cbad4b0b2d7f54d419bc8"}, {0x68, 0x10c, 0x7, "45f9434dda7545637f00cb732829156c726ed4284be117f96913d8a152a9f398f99368edb0c4617756113b5ed18ec5138630f9d53a28ec7d0d429885337649cd5e2b52ded8c02fd203b23fcacae4ea0a98c286"}, {0x10, 0x115, 0x9}], 0x1428}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000780)="7adca5ae54676e733a2688d3f25e5a37621d5ae7962512692a0a3e51c2e77c98c51dd926887c08d29721bb36b67a962f3b6a38e5c342d017", 0x38}, {&(0x7f0000001f80)="d6935e482ebeb3f3a3f389bed288d2b4171c9ece9752b4ade1aa66f107b63daa63ca96b268c7c66af2f62113e88e7170a28bedc5b849a5365fb0128c8c470e90d382e0ed0fdd7a8b5810f9c15f3cbe8eca05e282403a2649faca2f871cea418b9686e93de14add1f34290426c7c605b7b89098d9638d9b583a923fc6791064ee946fc568f505bffce8eeee4154454f9b9f2c93ba64cd1831d73f0b694ef39ad2ca74a0297cb33d8cabf693f52e725e286960c9a138202228b2e64885d82d60a772fb0e03fa98edbabf4192c480d439e9a77a65d3b07e4b58944f248a2ffa92f307730cc10bc56cfc533a", 0xea}, {&(0x7f0000002080)="960569a76ca5d25053c1b9c82a2619a3e23923551a0fc90d410ddf4e8f41faab03fb3b71a38e2fceff012162619f684c1797fbbd3d53cfc1b70f7595e8022d76285c4340202af500eeb1d50b3608f9746ceda1a219a224581e6d740a40b1f5d60ba5f2dd169623ff977a064c21f98840879f0afe18518a0736d7037ed281b492b8ed491482435dbc7d1c21ddd6102b15c3a23dedfa6af3c619c80e5236ae7a587f0d8057fa502ff9dbf61ed90609c5c3e436fa", 0xb3}, {&(0x7f0000002140)="a6e0676db98815e57a9608c74b84a26aed6b177ce9076728d8c12d1bab7caf590cee1395678c31e714f901567613e569e32b457a04b329546b65d37d2d81a10ecdc16042accfeb6060e8008858068da4059646ed5879607d62f5e70d4e370697f7b12814f08bcbdd", 0x68}], 0x4, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], 0x1c8}}], 0x2, 0x24000014) write$binfmt_misc(r5, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) pidfd_getfd(r3, r3, 0x0) splice(r7, 0x0, r4, 0x0, 0x406f408, 0x0) [ 1750.716832][T11345] 8021q: adding VLAN 0 to HW filter on device bond410 02:15:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x2f6, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:05 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xfd8f, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:05 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x7a00], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:05 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x9201], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 1750.816467][T11330] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1750.848474][T11408] bond411 (uninitialized): Released all slaves 02:15:05 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0xa, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:15:05 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x7e00], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:05 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="084eb57a1487f2ad425b2b8380464529b1f34a87331789272fa3b3532246fa999d8661eb4bc34d0ea1ae259eb5bf95c2fa23996cc0f00f4631dc3b3a03f850e378d8c715fe5b9238ee77b24a42031c09ca597c7d863b9469828400dc5da8069721b2ee84fa385ba9289fa9ea9323f5c01ff5ee06fef78cf56ccce87d2eda37ee615fcf1d53028b922160beeb5922ef1b5a9a8acd916c2f082f0a36d7a6758eda2e126e84aefd8a5e29248b579c1865ca9415dcb60d474a4139fb46728b5e47e7f170358ec6f21b1d2d464b369cdad979a79ea3390005", 0xd6, 0x4000000, &(0x7f00000001c0)={0xa, 0x4e21, 0x7f, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff8001}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87, 0x0, 0x1}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'wg2\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) openat2(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0xa4002, 0x90, 0x10}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0xf0, 0xf0, 0x0, 0x0, 0x1e0, 0x200, 0x200, 0x1e0, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3, 0x9, 0x10000, 'syz1\x00', {0x9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) socket$tipc(0x1e, 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2640, 0x0) splice(0xffffffffffffffff, &(0x7f0000000240)=0x9, 0xffffffffffffffff, &(0x7f0000000280)=0x7, 0xfffffffffffffffc, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) bind(r4, 0x0, 0xffffffffffffffeb) 02:15:05 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xff00, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1751.040257][T11424] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:05 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x8202], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x2fc, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:06 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x9502], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:06 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xff2f, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1751.196205][T11424] 8021q: adding VLAN 0 to HW filter on device bond411 02:15:06 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2000000000f, &(0x7f0000f10000)=0x80000001, 0x4) getresuid(&(0x7f0000000180), &(0x7f0000000200)=0x0, &(0x7f0000000240)) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private=0xa010100, @in, 0x4e24, 0x5, 0x4, 0x0, 0x2, 0xa0, 0xa0, 0x32, 0x0, r1}, {0x0, 0xffffffff, 0x401, 0x72, 0x80, 0x9, 0x3}, {0x6, 0x3, 0xffffffffffff0001, 0x4}, 0x318f, 0x6e6bb8, 0x0, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x0, 0x6c}, 0x2, @in6=@remote, 0x34ff, 0x0, 0x0, 0x0, 0x6, 0x1001, 0x20}}, 0xe8) getgroups(0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xee00]) semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000001c0)={{0x2, r1, 0xee01, 0xffffffffffffffff, r2, 0x4, 0x8}, 0xe0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}) sendmmsg(r0, &(0x7f0000004780)=[{{&(0x7f0000000380)=@pptp={0x18, 0x2, {0x3, @multicast1}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)="724ddf627ac8f131f6b759dbb1d46df9bcfdd2236ca427931c5e30d737fe6c10a2151f8cf88de12149e171643e32032c3541c8a739203ff1005e872a1e0a22718f925d047e9923f9ff8b42ca91b15ced183cc0", 0x53}, {&(0x7f0000000480)="e7ba52ed3a504b75e6af7a4b10b6c4490595b491c8231de300237f8912aafd853967ca460ed2f14b06589a422712913300b287bf9510504db84ba03a5364932a3c434e15ca2c00fa20be0276096de34ab1a0262f7f95a94e3522b02a4929d2a65776ae7dc82fc84cdc3e31155e1c1c777fed760d36686ccec9d91b49b894939adffe203a398d339509083ebeef1b2f9285b1ed76e3b732edbb257be69c44fde0b38cd2844dc54f9e4505c71f35af0de3039934d3426e199eb2bc1a7dd47c9bcdb2b5a44290a29fd3343cdd280e21f6bd15b5337adadd8ca11f6ae76499", 0xdd}, {&(0x7f0000000580)="2a928b65e58727c4", 0x8}], 0x3, &(0x7f0000000600)=[{0xe0, 0x5, 0xfffffff8, "1a854db82214f5e4023fad3c2bf85be2b30636d6976590571437e86cd8f816689061a475353db557b16850757fb304693d2f84296b2ea162fe6a928da5c791da8b7261b56314fd616f6a841b2904793f02ac2472ea14dc28a50f03791f8631de066d0bc93a9a9cae9b781b916e14768eff401e15f82a27e6ed0ee51930a17589f74d4444c31edadd09813b1fece20f64cee908bc25e2a93575bf96363b622d2a4979bc458e11db0609492103e78e017f24b150253948e26ba62b10d37198834ab386ec5270de105c89ac4156"}, {0x40, 0x111, 0x40, "e6e734ed62136c205b7dc41b3e5ad8682670c80180f7358c209024fdc8e50a842929dece967a09ed029fa7e4d7"}, {0x80, 0x107, 0x0, "2e954d3fe918cb4fbfb4131a36e7f62d0520aa5e6ab4c4c02f4c35557c7a0e36f489ee86967f1f26bbf09b54a2b5f4cc107750c31b6b8c298c1c75b4ff355aeedf0a0c84af639f3f2b011ce00941403953cd890c2d3c021678f085e92999d24295cbb6105eee2c64d1b85c1b"}, {0xd8, 0x29, 0x4, "7135b9de59eb72cbe49c9b898145f64bdd70ed59cff46b8d1c63c9621445ff73f8736175bab7f53dd937982dc46ee5b5415b9bb397562698b94ba9f657a79ce7c6ab9a6f78ed12a3aee266d0fe6b3fe7eb47c5f57a0b2ff3384bb2b9d63e1af4bef1bb1a7c3df5a1d25b3b8a0f49cc2cd0bb20595e8426fcded1d11e70d7899a6a574978c724d45d993e9d1082aa7e0c8b8ac1779a1653a08b3ee9ca6200f58e5b5cf15f8848561310044ffcdebf139d2e9f9ebbed55bf64dfa75fd492191822e405ad"}, {0xb0, 0x10f, 0xffffffff, "94d7a0a3994f10d18c0274742dc22e99a548a27fd83d47d96423f4408aa42172bd93164d615c5ee23f0262a43a40ec4e1346decd222edbceb857dcb8bd2631851e256fa04b6cffb303a56f0ffc3ee559f3ac4cdb7175f9f8e4cd1f10eed5fe59db9c9d8365eed93d261cdfa4a4f6fe098263dcd4b644066b9c26b88cc70b50d2c3cdb4b97f89a98e872ca62fab14c2891ac4f5c9011567ed3f58"}, {0xb0, 0x103, 0xf66a, "23cb1cd5f8d09e5aa833d904425c4512287c02832143aa206c061183594b39bc57a84cc58a62f2898e69143702cd7305e6beb27a47e73684adbc4143264cea5bc3336b8213171d1aeb06550f66bd6d4df4f1ff3883d25aff23a60d2e8cb24b44ee30bec551205caee2e7359d0730d51d3bf93109c16cab4764f4075792f3742fd0922914eae90ed5367ec36283b6d9d9f076f7eb93c1d76b6e3902cf6876d091"}, {0xa0, 0x10b, 0xff, "15006c340df285791b81ee48f833d84df8527e3a381e20ed9afa023a5bf1148e094f17730f69b2ab5bb554ec35e7349530d1f8f50a255fb5521e881343f88693136bfb747224c82fb1f00a0d678bb14e99f580f50aa2226a4900756f19388ba86b0945f5795a64499966b6539c03ce8c9c9983ddcc7425f9dac9df91e617a080fc465ddd6b390f1dc4f5a2d9"}, {0x60, 0x10c, 0x3a7, "85022b429e785bbf63418b2e1e6ff6915ce449eaa727ae6debe36a2cc6c21ea95a5cf4697bf085f5b086a9de2dcecf47fb9f693a6da8ac381d8475a97ae3fb6cc2623aa3c0e666dfda4a873fd4e125f2"}, {0x90, 0x198, 0x9, "acd9f94f73e7e584325b134ce82fa4d8fe1bd675b3ea4bdb25d1f9368166b23b4a1a93909bb2b18b3f2ce35e2c5eab91bb6cc0ce723f75ea67325775720dedec4704683314b456c30c9fb14ce6dd1ddc83a4a738b399d2ff121eff1ae233c56e9649febab46623c392ed65c22ab3103f485a510bb7bbf09744466c1259"}], 0x568}}, {{&(0x7f0000000b80)=@llc={0x1a, 0x104, 0x40, 0x3, 0x1, 0x20, @multicast}, 0x80, &(0x7f0000002e40)=[{&(0x7f0000000c00)="7fbc9d699f301f19fb3cbf46682be24ca7c654764fcaac770364574af367c72fb78c7dc3ac690bb2fe0ce62f49e461537bc8fa7bfe49d12f6cdd512bf358313a852dd24ea4ab7aab226a345bf42be3a3460ff6e5040cb3ca360dbbab56f43d0fc4e8b359e5833bbd266a2fb7d05a9ed8acfda05da17397cf774a440bad80c534adfdbdaa50f1", 0x86}, {&(0x7f0000000cc0)="0df3678b281ee7927f8798f245a4ff6ffc7588414994a090a33e91d4c32cc44022ce6c5ea1aec3b272a235e31dcd949d6236b539e69e1e21b6eeea3faed26c462bf29f", 0x43}, {&(0x7f0000000d40)="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", 0x1000}, {&(0x7f0000001d40)="cb99acb062fa2a57f2c3c0678cd90c113c546f9b88f9c84409f24b7a0111868c7612dc8509c4e00cf3e80a480ba2ed6fa0e7cfeca4ec9cea2691d5215570601e9ad5fc7c34c8ea0641810785b882832f8b44e37393a08f30b14fc6f8a68b90c4ce2160590e519f005781c80685ca784fe07aca636d8e", 0x76}, {&(0x7f0000001dc0)="8f01a5ecf141222129cc8155e419f27f18c79b59bc6f56ab244aaa87438db7d33552b6cac4c983256576a0927b59e3e39c4e456be1dfa81c9a7399cf19312e362863f56583c67c3efbad6a63a7daa85065a98a", 0x53}, {&(0x7f0000001e40)="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", 0x1000}], 0x6, &(0x7f0000002ec0)=[{0x48, 0x10a, 0x6, "abdc7143db2e57d5b46b82788e3e97790b838b00e60143e0a81dc80a8568be42afd58b5b93fd890b98869f74ddd729d6a5769946d1cd05d7"}, {0xd0, 0x10a, 0x9, "ecb401bf46caaa1ed519d5caead01b3f308d850e3d43b0f8d81a7cb9a528c4cfbc074bc6b6defeefc815e47ea628fc70097b1df0ffc47166564fafce7d8d9d9eb5d2a3cde75101f56a28e7ae69952eb67b9273fc9c93c0e241b42789b05c46d86fc55d2a55ef93c4cc5dbd0d787c9604b7e0069af9cf664649bfce9908fc3aabe13366bcb3f1cbca2b04552da5f7e5b7ae95b975625f84c6e4eeff9be82cbe1cc0a6edc5119f54dce35202f69cd1c9476bb9d6ea9d56e3b5e111ef0891"}], 0x118}}, {{&(0x7f0000003000)=@isdn={0x22, 0x0, 0x3, 0x40, 0x53}, 0x80, &(0x7f00000043c0)=[{&(0x7f0000003080)="eb2fbae3806dcf974e1114ffd3acbf4de45f20e0de935be8a92f13fa703edaa8e87f2e73ffa9d61df14d3952f48aba1368bcd2267decb1e9be72c36ae1b725821654674aa716760f48048bbfd0c4cce16a144e41db4bc424fb2e4dfaa121af686ec2819623fb57efbb06a085050781a5f55b2db7fcf1c1e0fa083c7679ccc3230e17cb84cb7fbf7fa4d50b1c43b4b470fb33257b7d28f9e757ab974432a76396ec8a39797cac4895f7f19ebdf31692d972a527e520d4a1afe3d6ad547d75", 0xbe}, {&(0x7f0000003140)="daaa224c3ff92d09acefcec793b7cb9b79c660fcfb31904be27543abf9ddcdca42de4931793716aca05a58eada9886115ef5d295a4e8cbde4de058040680a9a2397784cd2331", 0x46}, {&(0x7f00000031c0)="5ff2832898e947172ca8acc8538cced54c18aab51165f32542e2cf897ddf47ddb6eaf90a5f82dc8259c90cfc56a1493d40ea7639275dd59bf57e02ef308d17154778d5642fb4c0aecd72cd33165c108ce533dd99cf52492957fd1767a657218539e58140968d3f9898260cbd4129bdc0ddcab4d4e5a625f30c1474e9a5c3a0", 0x7f}, {&(0x7f0000003240)="954fe698eef9e8e7c3fb0c458de219bb151cce3129a05cea4b3a2f45ad0d899534fabd481592b235ea86286586f7b50f24496641a7ef33c584d5a6447ccb27ae4ae79e0457af70d9d9c7d16c2aa640b0b00947df554bd50d386cc18fbaa0d1080777569bda43bf744de8593eb0a66fc19f3499661f195b307d76d84f88923eab22300ad5d747315d3c7bb8ea25b7dee4b8681798853043eac46c6e4151df75a0f48e08135b8ff70b2a3a4253cae533999fdb1b4f8b6e3d7383321f444b3379b3bb490a73829e16fb5faf134d901dfaf0d7f0221ae47b914de09dca656e248cb8df9ce6b4b1690a", 0xe7}, {&(0x7f0000003340)="4f50863480aa245ce87e0c6e0b97cfe2da3276f613d1546ee74d63f8198a0126d2633664aab39ebbd1fcec55438ffd3a0a554918a1e980e2fd394577e137350f5f2b73fb082ab7e3622c0a9628d6304276e46c267dba17a5ef5c9dd4a62fb645b6a04db941a17b0d0bac1c23333b58994676", 0x72}, {&(0x7f00000033c0)="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", 0x1000}], 0x6, &(0x7f0000004440)=[{0x60, 0x3a, 0x7453800, "b4e429f65babd1f99021012e9d5b9744d98a13f94e07c0f4bbd1235086fc40706c87c1137658f6fafb189b3479f7d5c80b6efcbd5eca7d4b819143c581458df90abd20771f6d0e54fa83bb08ad5f"}, {0xc0, 0x10b, 0x3, "0c34df3ad262f5544e50598885aade481d46b033eb0befa81fa0abda871c5e77b40b0e614d0aeb257c7e7d31dd4a296c0484aa28322ac734cbd134806951194148b5bb924ba380575a7276404175dc65f482ef5d38405370dd48a09777cbae534fd5e7e1c106f0d80f6660ae363d1b8d91ac271e9f716ef7c998bdf59f680707c8d7acffbd716e988ed25330750be8e6b9670b0e74765ed551434b1d1525d1ca59c8fc6684ecdb07155161e9b011fd"}, {0x78, 0x29, 0x5, "9f645d30d5f3c78a6c6cff1692221a0b8d07cf2600714757a891080413c6bb1d1a5fc8ed486b31d5a0e5f1be4bbd380c299b9e56893c4dab7e17f461dfe89e4ecbe566e7f93aa68aa743e4e67356243fde7e46db080bc03c62ced4497115ec1d01ba49"}, {0x80, 0x116, 0x9, "0c9d83469712f3daf759babec1d6bb4bf7f2df292c6524a40cc413facc3da5e0b44e32162095b933bb7192e0057e1ec5abc7375b65628ab866ac601172703c0fd5fe1bfa375ef2cbc73e1e2dcc202605e4347c3c1291e4fd630e5b1a2f4f7ac5b8e95773c8e7625bfc284db7cc5462"}, {0xf0, 0x11, 0x800, "16ecdcbc15369199827982a1526b0b844943dbcc91faf1f3dabbba499c365c29a218c5cc016714e5c0412cf20ecbc08f56254a367c692c6e206b6275b8a356472c858cdde9d8e7665fc142c561343deb61b68ca8f041d8d38b6f45973bda5a9bbb8bd8a0862d9c8277c24011b8f3cbc88cd5e13f7db82fae52d7cc4d9cfcc7925fb255d18ae18174df1530a2e98eb8a35fe344cae038180b8003f5dd702579ebfe84421b484502afffa14cd233f90748cf037a9dd470287a26704d8334e3c8a6711ad7e01319f91790e4eb0d680083f310455e7c2cb8f49fc7d4bf7b5143"}], 0x308}}], 0x3, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000004840), 0x202001, 0x0) sendto$inet6(r5, &(0x7f0000004880)="44dd094a18f7e23efdd04191fa25311921c9cd73241d108614da3a19f04e50a5bbe16c2a04e2bc6a09585489f2f86529c70950c0b8363af831ada3b6e195f91594983b56e3bba415f8fec250e06e5d9f5dbd523bfa033bbf292ab17dd768972c8d05e7c73b7883f856293575205795a22757a72b350b319f913be7d4f31605807d37348cec746297c4bdb521fdccbee4546f2367b7689745fe9bd4a7", 0x9c, 0x8, &(0x7f0000004940)={0xa, 0x4e23, 0x401, @empty, 0x1000}, 0x1c) sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x406f408, 0x0) [ 1751.285739][T11461] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:06 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0xb, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:15:06 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x1a1beb, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:06 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x8402], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:06 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r3 = socket$nl_rdma(0x10, 0x3, 0x14) bind(r3, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f40a, 0x0) clone3(&(0x7f0000000440)={0x4000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x35}, &(0x7f0000000300)=""/228, 0xe4, &(0x7f0000000200)=""/136, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x8, {r0}}, 0x58) pipe2(&(0x7f0000000b40)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000b40)={0xffffffffffffffff}, 0x0) fcntl$setsig(r6, 0xa, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x2, 0x8, 0x2, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8, 0x10000}, 0x3490, 0x17c8ec0a, 0x7, 0xc, 0x10000, 0x0, 0x8, 0x0, 0x8, 0x0, 0x4}, 0x0, 0x4, r6, 0xa) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x40800) ioctl$TIOCMBIS(r7, 0x5416, &(0x7f0000000540)=0x8000) fcntl$setsig(r5, 0xa, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r5, 0xc0044d1c, &(0x7f0000000500)=0x60) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f00000004c0)) 02:15:06 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x9702], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:06 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x8501], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) [ 1751.471607][T11508] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1751.557665][T11508] 8021q: adding VLAN 0 to HW filter on device bond412 02:15:06 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000480)=0x6, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0xf7, 0x9, 0x81, 0x0, 0x0, 0x401, 0x64080, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xab0, 0x1, @perf_bp={&(0x7f0000000340), 0x8}, 0x5000, 0x1, 0x401, 0x7, 0x100000001, 0xc1bc, 0x8, 0x0, 0x5ae, 0x0, 0x39}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000400), 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) execveat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000180)='\x00'], &(0x7f0000000300)=[&(0x7f0000000200)='\x00', &(0x7f0000000240)='\x02', &(0x7f0000000280)='\x00'], 0x400) pipe(&(0x7f0000000440)={0xffffffffffffffff}) bind(r3, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000004c0)=""/4096, 0x1000, 0x2022, &(0x7f00000014c0)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x18}, 0x1f}, 0x1c) ioctl$RTC_VL_CLR(r1, 0x7014) [ 1751.620749][T11508] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:06 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x200000, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:06 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x8601], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:06 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="fc00000018000700ab092500090007000a060000000000060000369321000100ff0100000005d00000000000000398996c92773411419da79bb94b46fe000000bc00020000036c6c256f1a272f2e117c22ebc205214000000000008934d07302ad031720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0xf, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:15:06 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x9800], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:06 executing program 0: write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) close(r1) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cb1550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd7, 0x1, 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x406f408, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="98a382af83d7d23128f2b67188272884bbfecdc7d682b16d1c2e400cf6a2d0f55cb5253b4b4479035b5b75", 0x2b, 0x181, &(0x7f0000000180)={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1ff}, 0x1c) r2 = pidfd_open(0x0, 0x0) splice(r2, &(0x7f00000001c0)=0x9, r0, &(0x7f0000000200)=0x6, 0x20, 0xa) listen(r2, 0xc5) 02:15:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x2fe, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:06 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x400000, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1751.831848][T11592] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:06 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)="16d7969183899e97cf", 0x9, 0x40010, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 02:15:06 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x8702], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:06 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x500000, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1751.922240][T11592] 8021q: adding VLAN 0 to HW filter on device bond413 [ 1751.949357][T11592] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:06 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x9802], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 1752.034190][T11649] bond414 (uninitialized): Released all slaves 02:15:06 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x600000, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:06 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x10, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:15:06 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x8903], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x300, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:06 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) sendto$inet6(r2, &(0x7f0000000300)="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", 0xfa, 0x20040060, &(0x7f0000000240)={0xa, 0x4e22, 0xfffffffd, @mcast2, 0x80}, 0x1c) [ 1752.159259][T11671] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:07 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x8a01], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:07 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x20601, 0x0) write$binfmt_misc(r1, 0x0, 0x131) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0x406f408, 0x0) [ 1752.274180][T11671] 8021q: adding VLAN 0 to HW filter on device bond414 02:15:07 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x800000, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1752.320497][T11671] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.3'. 02:15:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x500, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1752.375764][T11671] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:07 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x9902], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:07 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x8c00], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:07 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x11, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:15:07 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xa00000, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:07 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xc000, 0x0) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) pipe2(&(0x7f0000000b40)={0xffffffffffffffff}, 0x0) fcntl$setsig(r3, 0xa, 0x0) accept4$tipc(r3, &(0x7f0000000200), &(0x7f0000000240)=0x10, 0x0) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) [ 1752.582679][T11778] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:07 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x9c01], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:07 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x9101], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:07 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000180)={'syz1', "e47e6be37f78553a6d82472b8aa5eb5a4b9bdd904be487163812e264be93d044bb40f60ab01ae80128302509d3f12829d85b08c86ca120f36cc21a48cfcb660f8b0f3fe5e986332d8035a636cac3e5d1c07c1d36b1a6ef7fb29c754eee1b72e6f252312cd32b52568d729def3818e9c31488f092ca92c236e7e8845fe6a5aefe1abf6085f78f18c709b5c708721e15e56f19708a615a65eec6f24a27a2b3517ff2864caeb34f9fa284b5ff3bea5f834e0e"}, 0xb5) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x400400, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/diskstats\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000300)={0x98, 0x2, 0x4, 0x2000, 0x2, {}, {0x3, 0x1, 0x9, 0x0, 0xfa, 0x7f, "fbe5aa45"}, 0x5, 0x3, @planes=&(0x7f0000000240)={0x8, 0xc46, @userptr=0x6, 0x800}, 0x224, 0x0, r4}) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) 02:15:07 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xc00000, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x600, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1752.694748][T11784] 8021q: adding VLAN 0 to HW filter on device bond415 02:15:07 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 02:15:07 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x9103], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) [ 1752.848584][T11778] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:07 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x9d03], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:07 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) write(r0, &(0x7f0000000180)="ea6f4f9ff33a94fb1cc01d794360f8a51a49abdbb85270c05314caa0dfd927c7316157422a2c19c028c063a6551dbfe841af63d41eae0ff69fa0ff1102819a46b1d5192aaae71144bc5284e7b13cbc62148f", 0x52) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) [ 1752.909238][T11849] bond416 (uninitialized): Released all slaves 02:15:07 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x14, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:15:07 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x1000000, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:07 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x22004801, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffb}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0xa, 0x4fc6395b) sendmsg$inet6(r4, &(0x7f0000000440)={&(0x7f00000001c0)={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000200)="24f00393ce9e446ceb18083ca40aed21610a99d5b36db96dd1d4362674690d49400ac8e3e2840f068dd2e618d626a0c26a0400058382d3f6efd76e6241c8a2c7f646b01ecaeeeb8b8008e2b6fca9d2f6fc5b870ea205f39f", 0x58}, {&(0x7f0000000280)="d191a8bb22fa0d701c87d34a354665cfdf49535525b8b425ecb0de83f1bb629d953897d584b8e3683e15ac919535f7fbcb3a0276d342329747f9e14fbf8c", 0x3e}, {&(0x7f0000000300)="1c565086bf108ae8370c42a100ea1dd03b22a34ee89fd3ddec7ffc6020980d0e6a5ebfcd1fa69000b571e1fc942389c954a61923ae477f82354d25b796a98a32814e3604fd78c4073524908c360705c70e62d5a1a9cd", 0x56}], 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="68000000000000002900000039000000080a010300000000fe8000000000000000000000000000bbfe80000000000000000000000000003820010000000000000000000000000001fe880000000000000000000000000101fe8000000000000000000000000000bbe69f5c2493c71ec4864496283581b2346322100fec9b6a1dbf514a5cd7129353326633254377ae95a3c82e859ef5e9684869a0288d9c84dbc018a374737a9c6dd986815c7a63e9ce71e00f23c96cb1496f5823"], 0x68}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) splice(r1, &(0x7f0000000040)=0x1, r3, &(0x7f0000000180)=0xffffffffffffff8b, 0x9, 0xa) sendmmsg(r0, &(0x7f0000002c00)=[{{&(0x7f00000003c0)=@can, 0x80, &(0x7f0000002b80)=[{&(0x7f0000000540)="aecdb7421e84381983569f8848f941129981d9464329afff65b0a0ab8e983de911cb440e2a3858b889884d63c7974687c9eb24927ee3ea0d050d0dcd47e2f07b571d6f7fde6c132a0f7fc46aaca880ea61379bed9b1d9ab2ad9cf58645d572cd56640a427924a773d2f981e3b004554e7ce769860176df445bec179ba77ce4ffcd22a40344ac80aa899d5db35a28990e68400efd9c40cfb59ffb01e4c2b6a36ea0364342e436d4ae3cd5faa70bba6fc49960f0965d4480b9d5ee7602fcb25ce31a06541808efd9eec7b931196c932dd53382a96432a672fd22233c4a26e756dbab5bb783eecdf718b2ebd706", 0xec}, {&(0x7f0000000640)="50fc2a091ad57d2c3eaaa727f7a96294550d01af9fb3581348d2abe7cc7a532d326db6af6e3fc7562f15dfdeae2a4eede0af19c0aad8ece4d2f97320bd3361e37330779a23587e8e7e713eae3a13a51a38432b88bacb15b86ec6e8754ce2f47486b04f193bbae0e2e76d42170c638ef840764097f109f16e2171be27ddbe511713cd4181db7d9cc8f65b71cd5ed03001b66f14f577f15f35ad63027c1750195de094f0ab6d58eac6a358d01ddfe8a84d51a512ca407feb77d4b218c00819e647", 0xc0}, {&(0x7f0000000700)="3c0a50460c755809892f52ecc8e55d063e0234cbed9258c14314d04de5fba7e0fe3fc32ec3feb6eedc356348d11448a2890a172e6d5ad2215223ea830ce9a2c91f3dc885f52d9a64203b29bc00aca9bb69a484f33d7e89077e3a8afd94fa883345274d49fbdc775749dcb5e39b97d395434cf21a876fd28a52584b972874610c942394a65dc5e11c3c8d6e7dd03b963277f1b0d4bd30a563648efb72c44579809e182b4cf11da474", 0xa8}, {&(0x7f0000000b40)="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", 0x1000}, {&(0x7f00000007c0)="9318f315", 0x4}, {&(0x7f0000001b40)="da42214267a33e07be34c1c60bec28f232a92e1d795d0efebcd59c324dc20b42626273c9d4ff46f158fb63f9831936927e0cb30b2f25d48b9e9553165510f16df5b1b2ff93a97bde140f16034ce7ce04821a22b4d2e621b7fb5be1c79cfc74e358d01b101745f917504055ec95adbd5e878785c5238685ea159c8a69a3caaa1c6c2c0e9583ad69d88a1e406d97aa9724b6a42748afeeaf02468edeb4147d583188f4eaa108ab11b351927df12cf9ec53d0aacb8a9efe5f715cf638a49e90b71e361d00de46a3e55af61e50517b88ffb0d72765c0b97d774010981e73a59f139074ef08a4f9899f330220cabd30c4338db2bc8fa38ac9e9aed915952af861b38d47e5f9d070e0aa7ea7fbf31397b2e1796ec264d1fc61efac4a130c49a723124827ef9a9367401428359708390a5f6bf0f4d02bd06ef1354bfbe002f6f611ebddf8c7d5016b3101539fbeef1786e91c72b7d461c8de62bc41e2bd2027efebbf9359586ef08117a7e5ec5f863612f799766c0288c7a450c5b2c51ad6d9446cf1a5a649fbfe319c9ce635657c8875c010884778dcd1488095759784473b01c59992b2774d3658eb4300fe5619363c110080a3a7dd7da7e6fda5f617f72adadd4f2d3fae6a777a66d54d827f68afb9fc0bc0dc2ba7566475ad088ae03925cb7b0ad16a7a6eccd0ab34d2344e9f2d56f638de7bd5497e7226dff7365b2dc36f3096e0633776b796ebe55cb55fe92197c8781846195d9a8b899d14f7326afc4fefa43c492a4d39e179220ae78f440c5ae657daa26bcd81dfbec65198b72cc3d47de6ae983fdb6e50d454703c5ee95a8d1d50cf65fa19542319d906e6b7b205c23071f7b4d916c96c1c697a76a4842c1418ddf23c8876e74d901663bb8891d3f91d3afbd9e0cb5cc7ea421eae281459f27bfe6fb25a542a2306283a7c897bd299662e063afa786f7bc35fa985ae889423d0ca1cacd42b1f1d79a33e5ce01db532b0f45851bfb7f5c3a0fd4ee64c038cd7973bd6b4c5748dfe0050ebe90de90c79641978edebc02b04ce4e3827cb4ed0d0629fc07692c31dbb7fad7a601302b4aaaf28c1d26676512984da318ab44c59bd5b83668a2fc115b5f65c4153ee0488b14ee6ae3646f8a43d70e394324784e5854e9f7c64afeb06b658ba33a20602e9ac6e77cccaab0fc70a7ef1c97162755c87070b996b27e2663839832e85d189e1bc41aa98b45eca8935cd988002dacb49b7a3a9e0b919aa122b5bc8b48d83ed2c4f266105e1d61bde2861b84cfac3c29c33640e2fcc04b03a4efc363efeb01e0b6bde58f736885cc05b255ac7f96ba002bbb5d9e5da9bc356d137054267a6d5787fe36324741bc4ad37c45f8f9ee21630accb27605bd9865c468853c268bc2548f9c93de21fafc3a62a9ae7865066965ecd8aec61f1c9bc09ac9943e6bd6e074f9669f45238c3c81b09ff80acd07a493ec5aa2fcc68b0e31d37262ad14881de27360c89c215f5a63c7b8b43dfc1bb9ebd85bd0ec3d9dd9d5c1aeb786e756c6d4f6190200af7d27bbbb1ea2aee81423359e0e44cf2a1132982eee97628249e26e48c1ee76fd0e1df79511d96398d6ff320a93459f0b212f95613d3e28fb26cd61a385ce0f30b06528c8c4d66b043d2904812a7010370af58fb9deeb250032687961a1913a66fa873010fa26d729de70bab29bbadbef250dc80da342c407fab7162332dad8ebff0642f733bb27ce6ecd2ea905dd5a0aceb02113d4e271b1830b60f4ee7c7004126364d4688a701eb7d1617c3f839ef3d73dae7ad52d4630fcc382fc5fb90265b693938cc0b43c99445032b1f6186a12663e3e595ac3edd8cee2f7befb903818b20a5a6bd3575101d4c0eb6bf72e23e888983a43dcc762decabc817229f36fcae9a09a12a68249f39c33d3db20151969cbaef373b5f658b0184f6de0909a51f5917655307c81b00dc71f7e3400f84729e92f6946fae5fea2891f8a56f90e29037aab637c6f66715d637515c69d8d944a2f60d09e4468008b746bc3cb68a73ccae8076627a8fb824b379830f9e26b27ecd510eab3a92d1f24426c8c7edd354611dbcda124d72b52e1b4af42906dc0e66a769038f8b3bef4000d3182210f263b776c8c92a73f59a22dedacde9745c169305f161844a7cc6a5b2098981f61cf070779934360d071acdcfb0cff4e59ee16ac21ec00a6fd24eab6f6abe830e8285fbbceb101ba9f53bdcbfa31edc47171a5e5a117ceb2f11f8ddcc4295077ffd5501ed4c2fad3f2452c793820a95a20e0027c56ba3b53b6e4fe10e4013d3a7a753895a64d6f836bc0b35054ac2bb8939d50ecf3c359d7a31996482ba982eefcad29a6845cf721fb28d20a5c64f7d637e54bc6ed506d0223f65dc824387b3ec89e3d0161eb2bff40f35024beba09d21037d15e0d803644cf0b7ddc2d95e0f2d86958360adcb60c8d1cb5f62384672fb47c406731612ede53002689af2652d85e7d0196dfaf58fddf1ec3213901c2bca12f5d466cfc3661926469e496571e8028802853b78f27027b7ef638dbdb5b23da3dae2c054190e6b39479a7940130221922da05b274e3345224e349742544fe1e42232e6bffd4e69d010530d75b36cc30e175b84915fc374d612e35be25a5800b9ec9275c833dc0013876294cbb2cf9032355c91ffa370c07f37e327126b32342d487aec3e496ca47499982335c6b2758cba602e74e3f3d2ef42b7b1907058a1d1085a23ebea0c3e95df79cb6ddd711c997a02567776313946df9fa0bf8139b43d207f8b0655ee1e599a368641caa9a6c722d62d452b0b2d68f1944ebabd9e1eb2f9331557413a0f27bbf3f05adeb603ded7fcb02a4dd9e44c46d89fec4ece055f2b72107a03dad65ef9a479cfccd2b53edea454dd313df5d24afa17cc750f0eb506d0d74a242d03f8aa348a5684a3869105f79f9a666780206863e46d691adf30f9d50a5eb6d96f35624e08af656541449b99fab0ea714404f2ef2eda5f27c8d9a21c4de616aa403a7cc4ede4635075f029642ba9fe41e31ae1571363bf976e729df77b510a13420f2aa74de5957ab5ba280566fd5af361e051593b42110dc98fea1572aa5f1304cacd0ef94698f055f6d3f6a653982930915d72fcd5037f801dc0406efa2cb29f8828eee0b39228e107c67be461fe8cab2a8ea08149fd53e27cd5f21362e2a53dc7cc734fe7e8ac69f04c6178e5c961ed9c4861b940d84134579b45d1b7fa70194929c81c279f3a58e9304191c339f7e90b60458f196dedd63253bf7c58417e2dadaf0dd475dba296a339667da2abecffce570d6cd1c980ea4a97790db2874b98838803554a9aef01af4966cf00ee94ca5c6875de24da2f7737180269bd1603978ba23b559fc361afca5fdd9540563e612f9e0a82a397a0f44fd2eab945b7697a2bb55a982665e1299b12f91ec9844f369043c2eaa234765fd8ec0fc4634cc4c372335fceeeaed41ce1eb6fa7d26dd3ea17ae28f0549f98a9428848beda30983db8f3f13eaea593b2b679523f126aed31d66b4f004ce5c7562a82b3ba2ecea30044c2b2d648fb72df9ddd0366f656b5957f7e7d04c03f897d714b704c62f107f7cd1614cf97b2f5daae5af2bc48e834b7f8e8c9889e6154787968bc47e6b158508441e68759c313b4f8088104a8646fe61e41fdc79114f9548fd64fbebeddba14bbc248674b87cc5fc14748a35b8c6b98de5b28efa318a04f2c225ae1d3dac4f2c400e145abf7906d56db6ddf9afa0cd6e285b907caafd117b69a3628b96e5a360c64296106461d32f94772841fac388ae28e9ac80141441123701d57d5a2f48598df4c714f0776bafa72e6bfaed590c8b56162392e1676aebefd3855bd7cae0e67dc9b0d54a51489d3a6b4f2bc1b13b31f0f0754fd46130550adf4a34925acfc5b7eb93596c69b817f2fe8b115212f83529dfef4e756c502cab24faec60a5a7f628d78c49cb094805067f1c3e48b2299544013ead21733129befc8ece9fa87bcdfe7c97c1ac6425c3ef54c1d46725d82df25c33084ada69089eb1be3e74ea136b39290e5b03d7deaa0f04f34871fca565d1c7c89408cbb24fa0718009ecca5b5c1a7784f8fde71897f6eb31d1acac4cf53098ffbb298cdc2c11658c5211928ba85f05a2fe26c4574501d17d8d3a66d298e19d1fa2a873067ca7355240c6b45bb12e5e3e463f142f35b89401d456a6d50ed0ebe714c7f7fadd2fddba3d6b26c1b6af1b602fd8fc5410d9c9378acfbdedead715e3ea4f59a645cbd60f9a926953f687aa82dbadf70af1849ccbe28995b3d401d685c6a0c26736d8ef34cfdd9e4a2b7b16ceda2bc72a6ed3959211c99f4712d8b7ecc63355ad7089926ccf37dc9da8d457ec18f66cae98ced2eda57d62b5e282ee81562e21d6cdef2af7bebe973a14592fb0b2bf78c436d8d51123a9ce320b5319651243abbef35113db2268f17976d71ec143c35666a7eedc460e8d2839e9e8b2f16b1e456eaf23bb69acf731b49113a90e9bec64cc6cb421a0029910046fb83b7eb44dcc1d54b9fdbd6b68dba28ebd7811c82f7e6f2af1216b0b0780323173bd587fc04406f16b56a13f8095d3150cf546968ddedd6883fdc759de3884fa024f980b1cea77cdb44c44ce60632ea42d6d36484c12794abce417fa6e2b078cd0242a96ffef0931f35a1a2601c1ef41d8d8fb863e0c720e5534da2218da19a0319eb9a03196b31a3268f179ecaa85b4dc898d37278be2d7ebd8be3e70731e8ea949a7c08a36b1a978191780003d386dce2637edcfe639c9bc6a3c49c1b6cc53f4486e362f0f957f5bd3b171d941c45ad2df53301b9ba0c5727d4223e48296bd7805bbe2b6f48025946d9ad5a708f628567084addf34095df3f59fc0c2cf6fb6ed46a15966457d6b1e726024ecbc7b3d98c686829c1c762c69bd463f680e317456861c1a83d1be1f9c712b47c562dc5cb908b65666e8ec0ddc9d285ddbdd9b03be0ca0701369faeece005fe8fc59d0d3ffa54dbedf743f899f31c97f2542fc10314d1fdebb429f10700f24eebeb9ec35eb1e7a69bb1f24b1c6053e70cce6d0c03dbfedc37e38d9a1ec0f724548ea80c8bb91be82ac85a78ce379f3c127ca856cdab073dc80cdc1aeadeb635097d469a6292c2555b78528464633fb9115c4114a4453ecd8b0272d12a8f13a09e80bd2377ac3129a0d596e7904fdf57b1110649d12cfa59685b91c2a57df3c89f0723b6b15642eb24f559d4ef8821318485ceb7916d7c6b2cfb601e878fba45e67fce3b8d6ae0960c23a7c46303fa609e31eb7ce46fdd8da2e5b1fd73034dfaf30d185189317c9df70fa899cebd28fb8700f4cb51fba73c49bc5880fc9463a2f8f906eaebccc989cd4efd6bf007e12f8f8f0c9991f7e698b8aecd8f9774cad324ad7d1b99843053f5d2a6d8041db1a3c6ef0fb6ff3438e3aadc20090187734cf06a00bddb584467b925b916dafb369507dddd4931843acdb7d24536bd928386424566ea2ca0108bfef0a088e82c5e5d17baf6149da43c31534c0b72ba0506a0d630515ea134fda2ae522357247831342e3f1bc13d634734420b063a0d20667d215a6d541269ff6cd127890f7f3161dbcfd1ef0e4a4cd24a8e9010f05580012134570cab9af5ec59699097fce52a54566152450e80134d4287057a9d829e1a17f4ba7799aadaa2df475cf2082448258c421c78f0d1e5f0a80d3f1202e0a86a826b17627a3359458530895238c0569070ceeff474bf55e15fed2424af5216092ffa5743e526f95f10598011932a6bd8", 0x1000}, {&(0x7f0000002b40)="c5c383fa46d99110", 0x8}], 0x7}}], 0x1, 0x80) 02:15:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x700, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:07 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x9201], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) [ 1753.124640][T11873] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:08 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2000000, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:08 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x9e01], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 1753.229077][T11873] 8021q: adding VLAN 0 to HW filter on device bond416 [ 1753.257737][T11936] xt_ct_set_timeout: 103 callbacks suppressed 02:15:08 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) read$dsp(r0, &(0x7f0000000300)=""/4096, 0x1000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) close(r3) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) 02:15:08 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x3000000, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1753.257757][T11936] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1753.321500][T11943] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1753.346766][T11920] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:08 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x9203], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x900, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:08 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x18, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) [ 1753.448949][T11948] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1753.485580][T11959] xt_CT: You must specify a L4 protocol and not use inversions on it 02:15:08 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x4000000, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1753.511485][T11963] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1753.553407][T11965] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1753.559303][T11963] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1753.569123][T11968] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1753.614484][T11975] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1753.625303][T11974] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:08 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) splice(r2, &(0x7f00000001c0)=0x8, r3, &(0x7f0000000200)=0x8000, 0x7ff, 0x7) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f0000000240)={'nat\x00', 0x0, [0x2, 0x20, 0xfff, 0x7, 0x1]}, &(0x7f0000000300)=0x54) r5 = creat(&(0x7f0000000380)='./file0\x00', 0x30) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x4) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340), 0x4) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040), &(0x7f0000000180)=0x4) 02:15:08 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x5000000, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1753.710761][T11979] validate_nla: 20 callbacks suppressed [ 1753.710779][T11979] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:15:08 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x9702], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:08 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xa201], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0xa00, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:08 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x260480c0, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) [ 1753.782068][T11981] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1753.845256][T11979] 8021q: adding VLAN 0 to HW filter on device bond417 [ 1753.876309][T11974] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 1753.942372][T11974] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1753.964045][T11974] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:08 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x9800], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) [ 1753.991553][T12037] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:15:08 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x6000000, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:08 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x34, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:15:08 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x464000, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@delnexthop={0x40, 0x69, 0x100, 0x70bd29, 0x25dfdbfd, {}, [{0x8}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x2404c000}, 0x80) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@gettfilter={0x3c, 0x2e, 0x20, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xfff1}, {0xb, 0x3}, {0xb}}, [{0x8, 0xb, 0x220}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0xe18d}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8002}, 0x20040000) r4 = fcntl$dupfd(r1, 0x0, r0) sendto$inet6(r4, &(0x7f00000003c0)="305ee8ac635adea8fa9de8575855b304c787350d15d7e41a244087a73fd66514ff660de08ca686ddec3ec3862c8d0559f8c4ad64453e82b218538891011c33116d73ce3aafd725236b9ab8fc8b0d06b216f22cabcd6fbfd80872786e86ee53b67c7ffa985f97fa22c76c94c248bf3d2f234a75f0d45bd4e26011153af1c71b00f173ff3fb22e6df4784653150175a70cd108ef8801b712f07732b77aab7af827f5fb18b8f340d5a4fdaa264215d37e36818e61f2954071263ebf3ecb39", 0xbd, 0x0, &(0x7f0000000480)={0xa, 0x4e24, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendto$inet6(r5, &(0x7f0000000500)="d9c7dd7b9bc5a5589c5b6488b9eae92908c8bddf1a2581029a0ab25f9cdd4a3a6421e33e68ae31ae874aedd9ed56c0c1f89c37b350a36d17059fd03cb73fd0b9b7eca96de4853dba6add9174c7d945a500a6b8263e5fbf5c6f0494ca027a263681ee6a39c77658d113b0eecdff679b632a3de630c9bde4e7a3d7d0aa93a86a23afd3", 0x82, 0x48081, &(0x7f00000005c0)={0xa, 0x4e24, 0xbff, @empty, 0x7ff}, 0x1c) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000004c0)=0x9, 0x4) 02:15:08 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xa601], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:09 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x7000000, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1754.171441][T12057] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x1d00, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:09 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x9802], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) [ 1754.212075][T12057] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:15:09 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 02:15:09 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x8000000, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:09 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x9902], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) [ 1754.374818][T12057] 8021q: adding VLAN 0 to HW filter on device bond418 02:15:09 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xaa01], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:09 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x9000000, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1754.480094][T12065] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 02:15:09 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) close(r1) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x2, 0x2, 0x40000000000, 0xf38a}) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0x406f408, 0x0) [ 1754.520698][T12057] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1754.552858][T12057] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1754.591151][T12136] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:15:09 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x39, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:15:09 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x9d03], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x3300, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:09 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xa000000, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:09 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x401, 0x0) 02:15:09 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xab02], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:09 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xab02], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) [ 1754.766510][T12159] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x4, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:09 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x3, @loopback, 0x8001}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 02:15:09 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xe000000, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1754.848142][T12175] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:15:09 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xac02], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:09 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) r2 = accept$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000180)=0x1c) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000300)=@dstopts={0x21, 0x215, '\x00', [@generic={0x3, 0x7f, "4914c68cba6ce0eb88c25c76c7952253f1156cb1c1bd01b018699ae3814b4f68f8d0993184c64113dcef55bad63a9d735dc61f0c9b03daad0bf57b6b323b45f828b0e80f6f07c71b371d3b34553fb0e0191d82d18ebc2976834deb27d887ba594f31203e11b56a1c2da9b611502d18d26a6b79cf1025f12141e80cf77b9fbe"}, @enc_lim={0x4, 0x1, 0x20}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @enc_lim={0x4, 0x1, 0xa5}, @enc_lim={0x4, 0x1, 0x20}, @generic={0x7b, 0x1000, "816871fdc299954a98d83a8ab4bdfb2ad30d4a1f845a8f585c69868e26e317184c109ae324d0b583485e3c872dcca868968f33f30ab121efc9df76c1e10a589aaf2b496bb30211d94f08f82e6d13409620a7bf9b7d35b7c6b6a11d5a67878216c9ab99384a3abe38ac41b45a09a735554dd4942d6286c6894a4d7ba42db9f2e74d86625a4d73cd229d6b357971c18e784baa4744ade7a1b457b484d8d87faa5e744935893555e3555889fb07f0c4e89c601375de20d6ed77eb950f699706c6f0b513fae4e161de60eeb1cd6059f6e9467d7074c78b323e8113ca534f5458d6b296877dc334f2d7daf7e23a21d94fae005a48d3a2a921dfdf8e8f7e27927641b14b0abc1ebc571c4c4d329c396c2c7ef4cbcffb76c5719c97ec6d796f2b4123f3d8f70315fa9f76be83557ccec164c60c2ea6889233930ccbc0ff07a3d9bce03b232ebcec7b3c7ec6cd3ed33540d72132827d1eb956c120a9312189e1da664684cda37ea7c07b4366133438d32f32d3ae7502155463b5278d0f29e18338d1a76f1e155c931fdbba15fe959b4da60080ba1281205fe3c4c9240cf367c36cbc3be85b6ff5745d5dbe29dd6d0de0667e4815ff851de2b181a6d5a6e808451bb651a20841fefda17d4db50d0de9017e03b887adb7c4124d7b445fab3e1ac631f2276e0dbf8351b6e0ed14bcb13eb015736471b6713588b9b05d0a153dda62d2c25f1d0721640ac0e455351f3e6f97441547d06e7581406ba87ff4d4088cec6b8d6b8fa936ec281f7b83edc4053fe3daa4103418ca1845fe0797f15d41058e9691f551fce9abd2a1698df4dfc5e2aa98ffa58f0a1b22716fb234efc6c900f60b061da39af47ae053ec0bb9826bac3e9fd591199118c302014fd49fd09ac35eb7474b1fbe0fe63924183970eb4cb10f50e03a3dfe5109664440ca83f475577d57fe9b2fe55becd361f49d182c0421d4d7ac525b901a0a73aa142374cafbc87468e99512c099bd681c70ba52175b4312ec500c9e769d6e61846706970288b216bb70eb050e101211861b9de2cbe0b78b88bf6b731855033138589544c841891730c0d2d9baebfa6bde9c06b6931144cb27ba5ebf307d0084e1ad5c41cb2fa7079e0b06fde4685962a14a096da6a168e6e255d4e9001efe775b5dfd97b81854933bb057a6bc968d4d38d5e28fd49863dede44924f9acf8c54f380491b835dec7520dab1f19ac73adfc88bff822263026d2389fbe972966a3f51ef83f726fbdbd77fc2c96910952dbea2770e57f54c6884c27d5479c646a11acc30e4fa6ff2ef8acb301c5e6cbb3e84a2c20798c2c8aa985479301dac04154394829ece3ab6e6fb3b1d301fff0ec2cbefed7b37a902cff8a73c970a14d6ed201e44fdc97bf8df7ce494c02ab4d2308e3c3e7c052c9dd558173b2bfd862e70f5d54f3faad633a42447c3a8c6e20ec9618ef78273b2d622f09578d6d25ed8ceabec8471ad9f9c565f82785d67002f7ba2012e62694fb431250a5693b3b4a87ba6dde6aab4acc06899d90ac3e1a98370b5574872b949f6c96a07a0220e18f11e46fd95dff7ccaffb35a13d619a71feda4c3949b6685af3f5308b68aa20661b07a6874780d48aae4f6efb8e19a5205ebf89bbd5dd48fc65dfb67b8ff6e23329db2bc63a696c99fadaff16b7ce5062711942835a24c3bf529d888a70c0267a8f2cae37d7b2cd62c3beb69e721ccb1126e4682fa03b203ae6f485d1cc37c237c211c31bc38d4bd16c61863ff25c5519fa0f113957b5e8152c072f5c1ed2bf7cbd3975cf07c1717a841b2d56b26a11597302d1ea72676caff7077bd1991f38e1ed827375b26c4c6f7a4b8ad92b8b976c1c40eb1ca7d78808e2af43b08e17d4046f91ff0908c565f202caec96f55ba1c3c6b901c27bc97595634cf058447ddc36adb5a90ded8d3bfad20ef92ad979dcf9125dfde2034b7308117a23f000fd92177282bbf9958b819701fa933c91658e89bf7ea9f090b52675f29432c3cf7819c31ed61ae7b86d956051f81a66d336b378c1761301a8ca3d04fcd9b843a8076820eec60dc3cc76a821abc7be623b625beeb46ef4393659d4316530e13f995b8f617c663658b397611c15bd74489a3547586580b43b2a1b82973af02303946b229cbb15dc421d5224db05b6d260797c3f7aba42dc38d6a08439251c6fa787d017156eb697548841a22396f3429902b91e47a3b87161f0e9154f3e73f2c670359f6d593c5f2f19705281e85e93d870b9cca735fecd3d860df203c85ae128c1f3e2d034bc8e5001259fa93a8793b3000b60eb000e43a08f603f121cc2a37200acd8b5c8be4a8154b1eb105f70fd9c4d68fdc2921484ea5cffda35c92705eacf441a3604665b909a4561e7de8c6e3c87b1219d34d32e635972b68b29bb00bb89e14ea4960774a8e1a097ed00327bf6a5427867fa3b00577935d09c17dc53260d5cc877f65af63cba0ae38380d32c70593e7cee2006220b35fb94c7fbcb39033f7c6971339047eea596b47d723907dbd2e5ce94b6fe983767e11176798e414321a0f6cea66879b3eaa40247f7dcbbe1c352e23ef9d6e63790a97c88181cc40fd0c4f1e15867d435ee3bba82b0c4b3e423c64f9a7d6b76b6e402867f8817bbb1aa2f3689e0aacdd5fff788761ef5b19493d24c55d205a701b86ed597b0b6582dd239ed4e6d7484f50ddccfba5da79bcffd9818f4f6b3daf158dcb9cdbfa3208cb3216c6d53921d8cafc1f2dd00b5befb457108e0ef0529d75910dbc433cee4b2ba63e8cf52dde11bf0956c899922e5d93466db610293e978f454a8a86723227bf3385aeae9b53496e2fbcdd297aa18e48b9be588f59f4a87f2e180d618b296fbe872029ac53beddb79ca5ce5c016320c3af2f52ae74691efb8e29bb0572a7dafe23b05bd5bc3c265ad1003bc3e37f07da67c8eab3d9ba2af0dbfd56778d91c553d53b35ea42f2f99cff2c591468c645f45181c56620ca3fe5071d3f473d4c8475045620baf5aae940809de8c365b78352ee9aaf1cbbce3a4768331ae938e9c3864aae7ba0b6a5a2f425a916b8af34f5ae7f1809107ded674de232b0e2d506d0c049d05723155e3f462ab5ea12c527b914680c8a26b21d0a39aa1c5ba38e2de80ee27413c9d7e562afcf9b9164cc782e5be1a4ee9dd957e707c2fa7884c3d95e6850d1ba31f4c153d29df64081865bf70e4f0faedfe6e9f9196bd3096fa9c94e829a6d2e9ef5130e5cd53c85e6286ee1dad0a0f366ef39e474d2f5685a0c0d1bbed88978b325bef728f4fcf9be2d22122f25ba2fff85b1a3c9a7eac1a99915dfdd96ef3840534d85dbaf142563ba4497593b942d464c73b649563b9c15d7f8fa3dcaf8950e7a9fb489404ee452e7aaf9a2c1fda190a489115751a80571a779f99d525b850594570cd4979cb298a4e6f608b46e8e191f2a1ead9bfe3a9874f03201fd8d2d9f8db13c4b099a5dcd2e13591d2543883dda70cc8f7e82ae6b9e80425c17c09a94d39f7cf9b2218e3b0e97771523a7c1442447f0e99d1906acca5f4541fab68bb5d628b8b4c4bea0430e70c927e9e011156fa3d6e1ae2ad24ab39f17392505e4e7f1cfb4f52889a314cb897da593287c2ef18288af5a918fc2d4739a98195da61144f0e8edcb9b8f0a8869a0621c9e9991f1cd4e4c738f737be054e145a4c468cb52df1fc37675143c5b175e999bef7e82450bcca3e3bc85b09d1a032e79653070f52a2b42ef14979d7908cc996d1d971967998b32a2fb54570ab2992d532dd35dcccad3f2578d7be8e0bf4451564d0f5ecfcf57e8c1fe14302a6a3adb43fa58d10c08c70dc9f512935ebae48393c2f34e59bd96435848e18b09b2986d6355fe7dd8b3b14d1d5756142311d330f6b6dd56630dd6d53ccd1ac714d22db1c3af5887e9d74c2682b3d1b5e1cffdc45a03d6f9a33d66aaf785918559ef4112f8410326639ee9f197884da7626cb37f35bf3c96f4fc095f11843d2142a3985029b6f244045432483afbf64c3af2df7c3d07fb8f792bf8abe8442042e3d6c1f133d6c09e53559fdc42c40109d7d763205553944fa55be88ba68fe4ce05a9a9f8f6ba8e6395436891d079a2ae1f8ef4d3df7cdc2faae9af0e38577ea3aa84c7a522d5d0bcd86ec2803facb981791cd1ced7731d691f70948bed293704fec09ceb409e8d62ac459af6fcf751ce74c1b3766f6130a544b2421d49660aea8c58f8bf7c38c16dee0e46e6923c9bc935f3556a5b14e69306fa1b12f512c90d8e2cbf358c7bcc71ad6fe27e61ff55bfbe1adae22041b877b20884d814bd4c46a613c1fb41879354baef8870354542cf98a2fc7656707edda7201e688445f3ec37b4c8cb4fd044002661f5bb80afbf3bc8b9b8bc07fafb269bf53dcf614198c0ab8044da32c8cdd1a821e0cd6a88973ec3bd0ebbe144ec20322a374e07250ec4a8ef1088363a3b861f5a41110549a4a057834f3d1172d97ff61de2b333603c7721aa170e31759e111093c77aa9c752070d4ae6e433cc67d28a16ab360fb32899e66a528683304e70383f440b00f165822c5d6a28dacf20c27e68e98eb382a7fed887e03cebafe235cf70053131e0f373f358f265cd134238f77940f9e1e693a68bdf10b8883e62b36deafc62a0610bb9bcd28e15729bda8c410558b46c762f8029e8e62edc7922c47079164ecd2750ab018aa755be44d5ed124122d0b926d04c8221006fcc54fe5791687d3bbfda5a26fe1ae5cf821d26a71e0d4732889b66d40de66b7c6b6072d4fdd82bc07342f78a809944aede09c2611f1eccd8530c0de11e14cff6fce47b5fbf2c2bded644cc71315c6e464762c1308218a96295326ae743efd378e413b6ddd428661dbf29bc677a012644062d05074d194fafbeda0a35eddf4c1abaf45acb2819e2ee0a10ccf071498aa7ea178fe3cc20baea9ae5bf6b2bc65660d35932c615d70ac9f85620c77dcd6bcfb9c7cf9d1f7e7e3d88b0949df8bafe153b9dd02a97b9f980969b781cc36d9df83ba5977223f266d98bd7660a8a49bddea4000e76c1ec0c55abce44a441ed6f45900d1e7786c2965fb4d811ed040a4a238e8fa2b3fb6937c51d54f0164fd78b6b74b2e80551ac7b624e88d7e843bd40724b4e9ed416f07bb921ee4b14fee8c89bce23d834dd72b0308dcf899dae42849626616e7d50978f022d95db96840a8b26777bc2128fdd84a024da210425fa17ae168b72e7a277d42a02546e23910c9beb63ef3a52d301f7d75f57ea57f7bedb691cd40ead392dd6aa384608dde2ec9b2d6fa7149cf56f67fa0318d565ef81d1b0e215adaf4e1d41b0243f9616ee7b0377d3bcd928d3f89a3e2a24dd527184db9d4547d8d020e6e927f4eab7a1d8ef9f21d1a3705a4132fff943cf355e7715e411387a15dfb167fd77dae1698267e472989dd4d28cefbb6abfd853bd1d3c322a5af57242ede78c03d840a84c1535f6600736d0b8aa2d4c5319bbb10b7be550801399d76645e05e1f1bc35a4294cac1c2b31e25cadfe96fa4e83f517e750dd507a504e0f858ade3c18d67de7a9b2845a842db0c5e80ce837848290de25dc7946a477b65d3538b0d09448a8ef12f1f0bc9a9cb4d3280f4e9ba6cc579387c1a0c89074be6b4382afec27b1a56d26af13c6da972df351dbbf60639a6362716e2b2e38801eb06d3b9114e3e3edf8a06b25dd81923a3562fb7f77fe6f29f16d9f6c1f3f78b8a9aad514a165967d69c475397c8e1ca4a5f25e9608697f20f109581250a5a263c6e98743410fa1a00cfa6a7f1cdce28b85"}]}, 0x10b8) [ 1755.013793][T12175] 8021q: adding VLAN 0 to HW filter on device bond419 [ 1755.112416][T12159] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1755.157640][T12159] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1755.178815][T12159] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1755.188396][T12243] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:15:10 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x301, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:15:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x8, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:10 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x10000000, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:10 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xae02], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:10 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xb000], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:10 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x200681, 0x13) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="32020000001d0800c91000000700800000000000ffffac141439000100000000"], 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f00000001c0)={0xffff7fff, 0x3f}) bind$inet6(r5, &(0x7f0000000f80)={0xa, 0x4e24, 0xfff, @local, 0x5}, 0x1c) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 02:15:10 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xb001], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) [ 1755.320544][T12263] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:10 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0xb) 02:15:10 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x1d000000, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1755.361913][T12263] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:15:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0xf0, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:10 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xb000], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 1755.466174][T12263] 8021q: adding VLAN 0 to HW filter on device bond420 02:15:10 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000b63fe4)={0xa, 0x2, 0x8, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) [ 1755.543944][T12273] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1755.593913][T12263] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1755.623350][T12263] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1755.653066][T12333] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:15:10 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x3, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:15:10 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xb002], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:10 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) accept4(r1, &(0x7f0000000300)=@ethernet={0x0, @broadcast}, &(0x7f0000000040)=0x80, 0x80000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) write$binfmt_misc(r2, &(0x7f0000000180)={'syz0', "79d2a96b79a962df37ebea162712fab45f8b81e5281c254e7a6b7cd20fc4727b49ff5e96f61f95c9d200e1ba1c17aea6f61de2ce59ab66272fe94ce7a60bc866345b0b12815b7a96721438383a263fd36a9b73c47d098111cb1d837a4b5cb7f1c71b6393a7d9fc1e52946932affe21882e710c52fb0eb6e33c29fdcbc2785476c02efea99b623e84a8caba64bf1a4bdc61c5fe62493e563ab9f4020381f44ab0842b571a577b653b37198bcd4863a15a66333e5b6013bf73a4c949d690169f680da2a198b7f8140c10c0dc00af844271038677a2e5cc4c8e878f6df015cf411eef9d8aa4"}, 0xe8) 02:15:10 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x1f000000, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:10 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xb101], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:10 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) splice(r2, &(0x7f00000001c0)=0xbb5a, r3, &(0x7f0000000240)=0x6, 0x100000000, 0xc) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x244103, 0x0) write$P9_RAUTH(r4, &(0x7f0000000180)={0x14, 0x67, 0x1, {0x4, 0x1, 0x7}}, 0x14) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 02:15:10 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xb003], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x1ef, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1755.867453][T12359] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1755.894472][T12359] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:15:10 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2d000000, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:10 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xb101], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:10 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0xffff0044}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) [ 1756.055736][T12359] 8021q: adding VLAN 0 to HW filter on device bond421 02:15:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x202, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1756.124021][T12379] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1756.184628][T12439] bond422 (uninitialized): Released all slaves 02:15:11 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x5, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:15:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xb103], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:11 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x40000000, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:11 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xb103], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:11 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$I2C_SLAVE(r0, 0x703, 0x17c) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) r2 = socket(0x11, 0x3, 0xfffffff7) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000001c0)=0x8, 0x4) bind$packet(r2, &(0x7f0000000480)={0x11, 0x16, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@delchain={0x4c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xb, 0xffff}, {0xfff3, 0x10}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x10015}]}}, @TCA_CHAIN={0x8, 0xb, 0x2817}, @TCA_CHAIN={0x8, 0xb, 0x40}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x1) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 02:15:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x203, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:11 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x48000000, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1756.430624][T12469] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:11 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xb200], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:11 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd7, 0x400c0d1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 02:15:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xb200], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 1756.559361][T12469] 8021q: adding VLAN 0 to HW filter on device bond422 02:15:11 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x4c000000, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:11 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xb202], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) [ 1756.613800][T12485] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1756.709113][T12485] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:11 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="fc00000018000700ab092500090007000a060000000000060000369321000100ff0100000005d00000000000000398996c92773411419da79bb94b46fe000000bc00020000036c6c256f1a272f2e117c22ebc205214000000000008934d07302ad031720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x6, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:15:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xb402], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x204, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:11 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x60000000, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:11 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="44f9b108b1cdc8037485c9c533d21f471e578dc6b91d006e75436914ab717528004b7a9beaf908d15237c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d0000000000f2ffffff0000000100"/203, 0xcb, 0x4044055, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 02:15:11 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xb402], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) [ 1756.876051][T12565] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:11 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x68000000, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xba00], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:11 executing program 0: pipe(&(0x7f00000002c0)) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) splice(r0, 0x0, r2, 0x0, 0x7, 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000180)=@ccm_128={{0x303}, "7f73c4d66d3a3cb3", "554a6927612739228cd34022bdbc533f", "06afd6bd", "4670293c9b36691b"}, 0x28) [ 1756.991877][T12565] 8021q: adding VLAN 0 to HW filter on device bond423 [ 1757.026543][T12610] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.3'. 02:15:11 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xb602], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x205, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1757.059237][T12610] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1757.079296][T12627] bond424 (uninitialized): Released all slaves 02:15:11 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x9, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:15:11 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ftruncate(r2, 0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) pipe2(&(0x7f0000000b40)={0xffffffffffffffff}, 0x0) fcntl$setsig(r4, 0xa, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@gettfilter={0x74, 0x2e, 0x100, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0x7}, {0xffff, 0xfff2}, {0x5, 0x6}}, [{0x8, 0xb, 0x1}, {0x8}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x20}, {0x8, 0xb, 0xd364}, {0x8, 0xb, 0x400}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x7fffffff}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xfff}]}, 0x74}}, 0x400c080) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) fcntl$setflags(r5, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 02:15:12 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x6c000000, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:12 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xb803], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xba01], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 1757.246072][T12646] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:12 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000300)) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000040)=0x3, 0x4) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) bind(r4, &(0x7f0000000180)=@l2={0x1f, 0x7ff, @any, 0x2, 0x1}, 0x80) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000280)=0x78bd, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 02:15:12 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x6d030000, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1757.378134][T12646] 8021q: adding VLAN 0 to HW filter on device bond424 02:15:12 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xba00], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:12 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x70000000, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x206, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1757.519200][T12662] bond425 (uninitialized): Released all slaves [ 1757.539968][T12646] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.3'. 02:15:12 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xc001], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) [ 1757.573847][T12646] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:12 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) sendto$inet6(r0, &(0x7f0000000180)="346e2dd681aa7f3d0d068ccae0bc640766012de21c44cb04dc8110bd53924efc0c7978274341b3048c776b4a7e1f4f207df1c3f32c898ac5ce35fe2b321fe50fcaaa533c19b6059bd304b685eee562e2337e42a685b59d6beacc12fdd36d1ceb0a393e6c11d6cc449f33831dd5725d1ae30cebc973c252b3bbe09c29ad3ac6c98d771ba779c470d5992eb8e55dcbbaf8d123e4043da4b14c", 0x98, 0x8000, 0x0, 0x0) 02:15:12 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0xa, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:15:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xbe02], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:12 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x74000000, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:12 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xc002], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x207, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:12 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000040), &(0x7f0000000180)={'U+', 0x5}, 0x16, 0x2) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x3) [ 1757.783569][T12748] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:12 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x7a000000, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:12 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xc400], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) [ 1757.898180][T12748] 8021q: adding VLAN 0 to HW filter on device bond425 02:15:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xc001], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 1757.946591][T12748] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:12 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0xb, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:15:12 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = accept4(r2, 0x0, &(0x7f0000000040), 0x800) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="44f9b108b1cdc885c9c533d2ffff4bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb220c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00000000000000000000000000c04aeb37357e5f00295406eb4589753e412bb2c8", 0xeb, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1a, &(0x7f0000000080)=""/240, &(0x7f0000000280)=0xf0) 02:15:12 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xc502], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x208, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:12 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x80ffffff, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xc002], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 1758.160792][T12834] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:13 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x8ffd0000, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:13 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) r3 = socket(0x200000100000011, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000001c0)=0x8, 0x4) bind$packet(r3, &(0x7f0000000480)={0x11, 0x16, r5, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000040)={@private0, r5}, 0x14) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 02:15:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x210, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:13 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xc801], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) [ 1758.312902][T12834] 8021q: adding VLAN 0 to HW filter on device bond426 [ 1758.329296][T12834] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1758.330102][T12896] xt_ct_set_timeout: 108 callbacks suppressed [ 1758.330117][T12896] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1758.342954][T12894] xt_CT: You must specify a L4 protocol and not use inversions on it 02:15:13 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x90ffffff, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1758.359037][T12896] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1758.441008][T12901] xt_CT: You must specify a L4 protocol and not use inversions on it 02:15:13 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="fc00000018000700ab092500090007000a060000000000060000369321000100ff0100000005d00000000000000398996c92773411419da79bb94b46fe000000bc00020000036c6c256f1a272f2e117c22ebc205214000000000008934d07302ad031720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0xf, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:15:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x21a, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:13 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xc502], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:13 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000000300)={0x65, 0x1f, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) [ 1758.445427][T12909] xt_CT: You must specify a L4 protocol and not use inversions on it 02:15:13 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xa0030000, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1758.523313][T12916] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1758.592881][T12921] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:13 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xca02], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) [ 1758.615568][T12922] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1758.633242][T12922] xt_CT: You must specify a L4 protocol and not use inversions on it 02:15:13 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) accept4(r2, &(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000040)=0x80, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) accept4(r0, 0x0, &(0x7f0000000200), 0x800) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) [ 1758.655316][T12933] xt_CT: You must specify a L4 protocol and not use inversions on it 02:15:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x224, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:13 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xb9020000, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:13 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xcd00], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) [ 1758.676207][T12939] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1758.725976][T12929] validate_nla: 13 callbacks suppressed [ 1758.725992][T12929] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:15:13 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000001400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000013c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="90000000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fedbdf240cb96400004c000180a30009134e000011080005000000005942000900320d56eea72a3b76666f00140003007f00000100ad6cf600080000000000003edd0e6f00042000038014001400fe8000"/107], 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, &(0x7f0000000300)="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", 0x1000, 0x20008001, &(0x7f0000000040)={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6fe}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r2 = dup(r1) ioctl$SOUND_MIXER_WRITE_RECSRC(r2, 0xc0044dff, &(0x7f0000001380)=0x7fffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) listen(r3, 0xfff) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000001440), 0x40000, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r4, 0x80044dff, &(0x7f0000001480)) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) recvfrom$inet6(r5, &(0x7f0000000180)=""/161, 0xa1, 0x40000060, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) 02:15:13 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xc0000000, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1758.933495][T12929] 8021q: adding VLAN 0 to HW filter on device bond427 [ 1759.029289][T12942] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 1759.062296][T12921] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1759.100976][T12921] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1759.115335][T12942] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:15:13 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x10, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:15:13 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xca02], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:13 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xcd01], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x22a, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:13 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xeb1b1a00, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000b40)={{r1}, "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"}) pipe(&(0x7f00000002c0)) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, &(0x7f0000000240)=0x8000, r0, &(0x7f0000000280)=0x7, 0x4, 0xb) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0x2, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180), 0x4) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x26004008, &(0x7f0000b63fe4)={0xa, 0x2, 0x2, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x100) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0xc23, 0xa) 02:15:14 executing program 0: r0 = syz_open_dev$I2C(&(0x7f00000004c0), 0x2, 0x100) fstat(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getegid() fchown(0xffffffffffffffff, r1, r2) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) fsetxattr$security_evm(r4, &(0x7f0000000240), &(0x7f0000000300)=@v2={0x3, 0x0, 0x3, 0x3, 0xf9, "8c6bc2e833d8f4eb0e4787c90cf43dca56a4c4f24aacface761b2994342de3d13b3a229e4817a94e9e4b92d84a44134bb644bb9ebf1244141fc0645f7ac28f589015abba12c02525e577e821bb4e5ac2bec693ae7e2cf625518769aebda858404c253f90146c39b191e1e5b15221cfea765cff072b9a0cdd9a0c4d39197caaf7d4ee56ba653c53d2e6f13b868274713af0f4fbbce6ffc2f658f6b68cee15290d51c7272e0327bc8c3552ea7f47b9931fa707f3192e7f79d0fd6a0badc9b97657859e5bdbc032b998e5515545a6b86455559708bd1b00d602d8f5296c87b55d606a20f66b7b0dd93c61e4a9128f957f5d28b2ffc1cd9b868924"}, 0x102, 0x2) sendmsg$nl_route(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000110001002cbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000020004000100050011a30f000000"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x20004110) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x8000002, 0x1, @loopback, 0x4}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) openat(r3, &(0x7f0000000280)='./file0\x00', 0x2000, 0x100) sendto$inet6(r5, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r5, 0x0, r3, 0x0, 0x406f408, 0x0) 02:15:14 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xfefffdff, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:14 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xcd03], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xcd00], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 1759.332562][T13038] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x22c, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:14 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) [ 1759.397201][T13050] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1759.524597][T13050] 8021q: adding VLAN 0 to HW filter on device bond428 [ 1759.631548][T13038] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 02:15:14 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x11, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:15:14 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xff000000, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:14 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xce00], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:14 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000080)=""/113, 0x71}, {&(0x7f0000000300)=""/149, 0x95}, {&(0x7f00000003c0)=""/131, 0x83}, {&(0x7f0000000480)=""/162, 0xa2}, {&(0x7f0000000540)=""/140, 0x8c}, {&(0x7f0000000600)=""/142, 0x8e}], 0x6, 0x1ab330eb, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendto$inet6(r3, &(0x7f0000000180)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0x119, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 02:15:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xcd01], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x22f, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1759.689102][T13050] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1759.701485][T13050] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1759.709057][T13116] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1759.724191][T13116] bond429 (uninitialized): Released all slaves 02:15:14 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 02:15:14 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xcf02], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:14 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xff2f0000, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1759.915665][T13143] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1759.935750][T13143] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:15:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xcd03], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x230, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:14 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xd201], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) [ 1760.114134][T13143] 8021q: adding VLAN 0 to HW filter on device bond429 [ 1760.125562][T13156] netlink: 'syz-executor.3': attribute type 17 has an invalid length. [ 1760.165500][T13143] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1760.215855][T13143] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1760.240573][T13213] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:15:15 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x14, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:15:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xce00], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:15 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xfffdfffe, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:15 executing program 0: ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000040)) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_PPC_GET_PVINFO(r0, 0x4080aea1, &(0x7f0000000180)=""/231) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000280)) 02:15:15 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xd401], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x248, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1760.384670][T13236] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:15 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @private2}, 0x1c) pipe2(&(0x7f0000000b40)={0xffffffffffffffff}, 0x0) fcntl$setsig(r2, 0xa, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r3, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8914}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88e5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x809b}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 02:15:15 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xd600], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:15 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xffffff80, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1760.426540][T13236] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:15:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xcf02], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 1760.533395][T13236] 8021q: adding VLAN 0 to HW filter on device bond430 02:15:15 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xffffff90, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:15 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xd801], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) [ 1760.718055][T13247] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1760.756617][T13310] bond431 (uninitialized): Released all slaves 02:15:15 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x18, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:15:15 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="eed615bdada828b6036d969f8b2cb7fd23a818b57d2af95ba35c9f50fbeaadb6c0bc70fbce831bb7f91327c7a22d08920dc96823f58988df859fea908dfc24f720b819aefd2c9442f69e1fab8b7048faef9794d7f8bf1b370a8b7d4a5849a0a47689b529450bb3e10c6908910f7eb388c11c0efa1c2ed0ee77d3b9d198770d6b11f2adf97675ab4720b3c0f6b9d62d38a1f3a9db2fe169b237f21b2c86bff69c35c97e81935e40bfbc74ebdc55ea9efcec50db7bbff66e07f2d2fd22fd4fbc5ad45d400b7495282cc23b2c31acaed13b7fb237110c8076455a311836a2feabb890b300ed754e1ef005", 0xe9, 0x4081, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1ff}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) 02:15:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x24a, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xd002], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:15 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xffffffff, 0x71, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:15 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xdb02], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:15 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f00000014c0)=0x5, 0x8) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) bind$inet6(r2, &(0x7f0000004cc0)={0xa, 0x4e24, 0x174, @remote, 0xff8}, 0x1c) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) sendmmsg$inet6(r1, &(0x7f0000004b00)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000180)="50c4a8d3aea72aa057ea73977d06b405811011324a9010ed8baabe948f46ceb5ea04b4fe3cd1f49d3c7b37f560027ed6a51f556338b1873775b9f3d2aaca", 0x3e}, {&(0x7f00000001c0)="3d43e94dc60942732a07ab6ca8fc98fc6fc7019247f44424af9d21d60e53459b6c5e892fc7cc869e45b391ca429b8b79ba98b9ef9786d143e5399e58d52a50078a0956cf9e8b757fde544deaf2f5b6869bc260f36f8a85a5848fa98cc40f0bf119d9bf428ff2833eac7b02a1357da2f5c5e68762e3ab7701d60b400059f08070e0099c8dd68b53b3925813a4d6822baef2ed232c15c08a07b41cde9fbfc51c310fd71c5adfe9ac16c13e94c635cabdc7ead743e5302b724d3fe176c2b50c87c5d009e57caacf3f0dab956033d78e28c6fb054b987cab784297b3a7bfd0f0a2db96cebfdb7246135a224949c146", 0xed}, {&(0x7f0000000300)="02b93128362c97fadccb33e00eb93f93151b23e65368804a9c809500b25c744e55603973d5a58ee15dbb95a8909f1d50151dc42e2689eae2445a29921f0943dc2f4456494affd7111b900cda6ae611142fe4dec5a379933a4b77491d0c", 0x5d}, {&(0x7f0000000380)="158426849f8c024938b0ecc5f85d07a9339438d69eb6ab39667a4880b9fdb0fe9bf509a1ab412a7659d802c297d2b26c74477ae6a2a268ebecb2612b9e56ddd14b5bc993fcdd7d26b0b5556361315788effe62b8554283c634e6c98d71fb44cf6820e39cd02543de2ff7e193", 0x6c}, {&(0x7f0000000400)="70c8d84d910321307d9c71bae6dedf4ea60bd53d017f72033eb16a492157f1e4816d4625ae0a0035babe62541343038bf81ddd8a5d476096e8b8b4a92aea6a43f6fb4d8a2da3d85e02bbf4224ba96311bb9a88cfc3e2eaef4a9ae2", 0x5b}, {&(0x7f0000000480)="f0ad38f7290fe09d76fc7955f5399c5d96202d624768553e14", 0x19}, {&(0x7f00000004c0)="d9ea7060d4f347912e81283de83b524910f10f59418b316a921d8f4ddaee4d2d1e211384914b29b0ffd1ec8ee1002c51e41c94c1905a7770352780cae3da5ad7875057d3fe991d5c2524d06e31df6f2aeaa3445d224c6d042e36126d73e64e248b0a3656ef5e68dba22b671e725d5b7afea0485917b7f24a50f1d143dae80755dd728d9c7ced5ea82863728f5463ef593298161015e32057503a303d7a220789dd7114d75e4f2fafa763138cd2259596c40e20a482a0d76e90733b6e9407ead69d0113d95f349acf39376946f47757274d7bdff4a7322dcd3f32bb5815269ee332b6d8573128e2c48005799322f89adffa15d4b741b7a83e42c18b8c16b9942cfcb5098c0071b7fc2123da9b516e37deeb9a31b45231f601c357b754d5e2171e7df0ffc898d4a14c8d7970f8ce248bcdc21ed46ff9e0a08ae972a7911dc35ee7e68dac34dee16f9535634d09b5c61fb50019706016dbc862b36e6ed04643fa0037c50e2a6f377b52e2f4da8b01ae31c56da81694425c74ed0127caf421bb950b66c398a560c0eb8783269088ee144e829e5d2b8a4d7b8853b1ca0eb4b9cbbdc85bf42fe8c3815867d136ddd2a5650fb9ea08106ab5309b8a793b60f109f9d64bec276f51fb0a90d5d149c87ef15a3bd09f2a730e1e2e9dbbb3d6088f8ad2a64f08e0eecd5017fa051ad136dd8993c20f9e1994b8a6d734b8018184ec9660a904291c6cc69bc224ee64f1cc8cc1d078f68110f80d17f88f94867f6a3b323a27eb8815849bf8482d438cf0fa90b3d89e0b41c89962da536f291c515b5be718bf6ec9eb38c51c31d7ca9aca101e8e9618532082ea42550c44b7fd8aa1611f4a67f8a0707a44545e6cf7e3dbac570b998c0af1461e4fb6a1a10d6f7241b47a4edb4fe7812da8df6c0c73bfeeb5acf44e0c7a27fb8529ffd73020ae03f0736349ebd6d3f5312a236ad8ad788238409328f5a76c9f5252353186879ee3a450b8f38a9ac4205f00c91d0b3db5e15ad24e6473d5eb34808709ee55e0c7a38ca366f9b019432dc6f0fb7cd6c51e26655cf37a2bd8e71ff104b1706e4b404b0eb000911c9f81b2f0f307d587db1b150d57122cf76d1349c1ef677331b561a05f6093aba715f894e95741b2c8c9ccf0c55eb28a627467680a2bcd26166c76474910b651bcd0c21920cb8bbc18ef2e96e47d5482f8ba849ea3797cc5701a8b265626d723c315082a0febb40c0865dad826f3d056295292d124cc764a60304e9a30813a23b70afbf00eb72357ed2f86e06b0fd9051b9e6ebbf1268880f6f6e66680d2705236f207d42f630b6f6d6584fc0da53982ffebf043564805eccc8b1ce7527f838e282d6d7acac289b083697b786fa5feeab9f743dbb5a15c3d0b0d6480d57b8de470da9883dae147f476d907582b7bb7b57c4f776fb8146c84d0888f2dda1e27b04287cd1708b5850ad840811d1db3160f4b07a8921da623a26000177c071650e977e395839bbcf9f74902fe2a1e51bbcf7c463f6ca30786df6e7b9fd480503159d96a5555365a43c82c313dac24d3a379605ae956d2c6a2bf751a71b3827adefd8722d7f1653f3ca1b4d40b58b217f74f1a4425003726e344a08fe54513582ef842b267176d1d14a38dec20492be35ad82ff8d29553e90a92810a80e23c52289873e58aa6800d585f4a90c0f6850f6889a65775f21784704f266af0255d2cefa17a9f5b6a88aaa772e4b066c83e5d1810991a738bc981632bbdf3dcbc2ceaf3da3aa0797083940d69b1cafc192dcac9995e98d51eadd9b9781524dcf7cc8fc5a38c4f44a899dc7f4432480ac86d6e471d58ae27206a3de60c917723256ed6a7a0aa0f270792e7c42fe015e1714e567bc4be6218160aa5ab4fd810a58bce844b6ce8bf74065d9f835da48da2043073ca5c31c1894759e8cbb2136c7c4b5c2464bf18e10dda4ad99b2a9b91307f0a95a6d56b9a6b98e0ccb26e5615746bb845c39e6413d80e5879d9ab0d6d80aaa3c5e3906ca91a71433b432a1003346a59e23416a8f112f260dea62382b0a0646090d42153f7842d20fdd3c87ad6b6161d5c322c9eae8184ddcc9079b5014217192e8219f40d708036fef407a2324b974a7881cf1a940a8242edd9515a44d347cc06f00e79a85b6a960c14045f97307ceb9d1c008c666d0481b84926de9920ea9d0611c48e7c939af19ec84bcf4e2f5c47f1fc704ac529f2e2f4ed69750cef93cb6cc16098edebdca8ee25cf3c4496b7eddb3bec9f57e6f2f7519a2128df69d106853ac7bb5f2e2c1ac92354e534ba7c2358230de4ffd992fcdff3a4f2958a9aff7334b0c6c1732b806d7cfb2ab20d37965b7f1eb9011d0755d9c4fb71544092bc74143fe5a47f7c16de584727ad4100fad41ebdfbc2ff51cc8603705b4eb0593efc5b94719248e4b9039e1b3ef46323df3e8e5c432ae8e96d5d9e879d852e682e14ac4c70c4afb9abc11131099a4655704826c4cb5b25de9e4ba281f4c27b767aa450b0c8ed295e6b4d805b5bdb27109af59f63f4034fdc77ef6b5f941f8eb58b5427c25702588489f2076f90cebf7e178da78c63eae71b459810acfb36166eba5f02958abe51f373451fab5c51c91c7dbe47fb00115d6f71b657d699395dc481b7759984747594ccb1c9af4505d63560cb29c616ff08c808990d559cf0fc28ea6a767cbc0b1f43cfe2eb841b16bbf870a613dec0eec80612449d5c110c245b8e11203d81d21727ac00289c0c17df0e1707e0fdff59aadd1b9a3cfdd4c9b27274c531507e840a5939973817ddd89a0d7ea2bc74767f6c92be552d39ac6e736eb88614f9f6afc2c8b61fcbf49d11f0e7aef2b2116049d30733846d1e9e8945ea1a53d8936ee5cd6819e175b285292dd559aebbf9a1dbe08a3d1171030bfb4087a06f17f25b783170d94bb7e6354b36ab12be80c571d9873551196bbd70d3e5d9ac9aa69b9ad46a1d1939a0b2df47cd60e63b2f1d29954093e14c967af0309896226dcdc0a45c7bf47b86bab76ecab549619eb702fff179f74c15d7a74966ef743b7290b743a99af966d1e5dda3cc4d441ae6dac141e5fe0137bd4c61910aa986653207abccabcb71f53813d9a1a8c31137c9febf9568c40f794721517b75e8e69452cf9b5c2e86c5a63eee21318f46d5cb98d2164f581706382c3b2bad67729980b3538336eaaaec003b5058ecb9a609ca37a5cdfa14b717a27a1b3d48dda4ad5bc23297b5e0c5e9e68ccc94cce08a3fbe3910d3566d3799ef1d52d10035826bd2b5432c8beac0998ddb2caff76f1f1fc62ecb5a1c44619ecd77d2546b64b465bfbe0bf18a209332f6624b7457b7285521d35f71f7bfb20868bbbb94755bbd470537ecf70a53f3ace161a7f2551740328cc1d1c1c4f438f3e3e7e54fd6fd7f419e88610e04587602ea5485687608e50601e3fff3a12ac5df91777ee113b93a07a31d7c647f92d871475668a9b25b262745ac2d07bc291a3c284c0eac13ff6c45c8ac6382330bfc91c043f6675652ab49b2bd18e59b65f68e5eb3938b112eb8304041148e226f9be6e924b15641685fe34093911371fef0bd319d9862651114341bea75269f123b6418cb16275428ecbcb53bc031f15fbde1832289a05e7f52ff05f0898f5860c7713128342fa99a43010e8e2abaabf87c7eeebb15d91d6aded7a6da28c10adf0d18be996c6f665c4b625772cf6b3b5d28c6b76481e9fe9ca143a9f966cd57c428cceade6e41bea33017f6c0318dd3eade30bd5265b3ee959fe1a1a3b42d3af664113e9bcd1b9b0ca892ff1f4ed2e78b8dc81c5511f63c5ce292a1a87f9ac80c48de19322a5e28e11a2143d23aa6fac026b9beddd059d94bf24995126cd263371e95c2e3037d76c849cee380ae6374ad0348a798eb40cd46c6e7bc42755b8f365e5d60449037575e72d3171b0255732071d3a336854361ebefc415473e5ebe3d70e5f54577390b28224bfe19a90b8e6421b5ab391c929d3d0e800e84d71d607724631f7244bb30a4551e97d706d9e86f67009e6d53e1961b34c3b4611160a456e57db93f140292c374a80f4ba823d5c1f7b092d9d6b44d0b0aa6258909854b01470f5283f84dca89dc607cbacdbc3b8e5e18e93cb06e77400e02cc39ecbd7893846c0bea015c230db5650f6dfdd1729c94328910ef387f4f7268510b11d9f37abe842a67ca69ad65b20365001a765a7b15b09ad4c6a0b9e6281f592fca45f9ed6c071b66d026701a7e7e0b67d431c69b2a027ca832da7af60ae757458eb3bbeaafed9d2d016148b34dc8cabc3617865415f0d4df26a4f1916615f0948082e84c92b82a0cdf389e88123471424ffb88d979983204f28a38776eebf8619bdd178af6e2f8a1a073e44986c03e276a728256068317b3fd56e9e8d5955fab652849835651244fc3944af6fe75564674835f9514161a52a17913a7f88f928571483511250f7ba9012add39c7c0e2e5bbfae408e2ca32dc2357cd1c88e150064a261d02ff90401e6c5909ba421c91f6f398b5f411722721c31fc701e55b3f382e08b07fb453cbf5805695cab1c9db21764c361c4175e8ab51c8064fa85bfdcbcd713b8247008f08158543eafd1fe08abd9d2fd71d2a5a811abebc0ffb2021bf940f272aad699d4ac3cee723890906a618763e49b3cc43af233dbe2b45ee704a56fe23ce332f22ff3d4e850cb3aae82a3a7a420e065096fb65b88491d1a747de14b232a66f3c7b368269538145526ba6c4108a1bd39e7ae3e16eb9ab304303b383faa8e1b366c8a8eb54b55bbbedb06200d949ba57f987aa93257f39ba14bc94a433c0cf7b0a5b928baca236f2f6a93c9100ad56c7d048983b9f67ecbad645b9021b72096c023d779754fb223a1fb957e0329584029dfd94ff02753e7df67ea25698ef9a71cbb23b2356e23ca9f5a7e85b04c9a830472da1aace61a071d753e5a6c24e7e2b94f8e1f91b52e3af2516ca8809ff9a9b303c3f778cc552edc958cc473531b44329155bde3dcb71750b8d1f9006abbc5c377a8d82431d598cda14177f0bf0fdcddd330d18d1a2702eaaee8ac1b079387fce03e9a0f735ae2c0cdab3703367ae1622b76621d5d2020fdd0f1c0fdb4e5da8ebe5ae11fd5f5d699d97fa5a7ffb3a0971cb7b452a210673fbff39ca094ebed18845ee4cdce61c71ac8130e4e826db72810566e232ad926d2b570c8f2c0c3a68ae0f4d1cc4241022ea574519a98ba339bf72e90c20e8eeadf8feaf2c8572788d83b63acd813cd1b79aca1e8029b5ebd527edc1294af874b3d33cf226b62e03b18c1d54b436fddacc3c7b18309016efb7abf02fcc8707296053bc0edf8aca31485d701c38c638dac5002c60f0a50cff2adb4fa9998146086f7fc04c65fd2a42266b4bd97aa63eb1cdb543bc2741865f0f282cfbe3180dcf2367fb8b64b6283172b68984d61f204bcc2b76bcfcfd33c1380ed7186ee3e232cd0c9698519f0b85d970a3d124dde5ce23319da32b3605fcc74635a87cf820e9677043af7099c8ae064c20eeb9035567f5e4455538edd782edf488833cd2e899c659d6bbaa27f72c2b087c6a1e67c37f3ab4096bbec2d37b77e4e591b770466a628d911c55a4c45f41b3a35458c5cb1831b0ab82a9d56625de552ba18e83dcf8bf68fdcbf8cae30de55cd180e6a883b3887068e125e685aa0e0d1ea901566df0d175790c19dde7ddbf00442cce3474c100a50dbf2a5294373385d4087034e873fa7e580c9286290e9d27704eab0ebfc3feed2116e454989c0ed9a66e2f5de2e8a6749d9ec0f1e9b6", 0x1000}, {&(0x7f00000014c0)}, {&(0x7f0000001500)="b87fa6764ca14db33453c66a9883a02902d071e2f6fec5fc97cef2754e4fa53436d0fc26d8dece82544faeeecb810ef04e5bd9b1502eaad6f3623341d3b8eb9a52adc37b88", 0x45}, {&(0x7f0000001580)="96968b3a5a39c05c738411e36f0606b2265651f1de287a728014a5a10d46ef12d60d4ee36f9d40f169d25c49d019460d207c675c93f68e16cdaf07f988ec9c50dfcdd00c2fe87f79cc3f1331ea758bf89337ae2444787e749f4da44099e1b41ea5", 0x61}], 0xa, &(0x7f00000016c0)=[@dstopts={{0xd8, 0x29, 0x37, {0x62, 0x18, '\x00', [@enc_lim, @generic={0x9, 0x66, "8fdb29ba93b5a481209d32e9504cb72221bafe5539449cca22bae9c0a289ad06a00dc49cd8364872ff368ae89998a48372973be048cc135849282c2d5ba52d38ae25218dcd2fd7e0a162976c965fd16f19d263852c2c18e47db13687d04ad803c7d09e42e7a4"}, @pad1, @ra={0x5, 0x2, 0x7}, @enc_lim={0x4, 0x1, 0x7}, @enc_lim={0x4, 0x1, 0x2}, @generic={0x6, 0x46, "274da11c101c6d786f3136028b603cb7d1f96a7515bf07ec78e392084d15bf3159e0a83faf879f6b0339735f65280a4d0c5da44e213c395ee6fb97af7df1b4937b26bf8d03fa"}]}}}, @rthdrdstopts={{0x68, 0x29, 0x37, {0x5c, 0xa, '\x00', [@calipso={0x7, 0x20, {0x3, 0x6, 0x9, 0x7, [0xa8, 0x8001, 0x200]}}, @hao={0xc9, 0x10, @empty}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast2}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x62, 0x2, 0x0, 0x20, 0x0, [@private0]}}}], 0x168}}, {{&(0x7f0000001840)={0xa, 0x4e20, 0xffffffff, @local}, 0x1c, &(0x7f0000002a40)=[{&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000002880)="6638158814eee2d796e38b9fab13a380eed565838a75d3ffb11274e9f54cf1962896a797092f616c6839b13aae55b18f2a0f5f99f8326cf0a94864a131513294bc9c77942be5877617c091f37d268ae3a138e02653d0abd2bc06cb58161f389ac6f8ec5aa6466a5cbe4950bd7320911be5393a3bb06cc960e5f274fe13d75d360ae1b73860fdeed7b175dee0384a40930f44c93e9912ec4a76e65cd8d03ac026937f3650b38888e3b817b9e3291e73e64ebe3ae950d6ef1c8dde592cffe3e803e2b6229ef96a00b4097ee775e5ab4dc8816a2a25372d1902e0f3fe49173ae6da7fa048e9ca45af7f2bf18027f8b11ee678d349ae8aaa7e494faca6", 0xfb}, {&(0x7f0000002980)="51dd1fc6979254412fdbf93dd681e413e61dfebdb0fe0554e0037bd29a4ecff41e2706c406ba9edd05338f27c85e5254bf0362e0ed5192a8475fdd4d4c9219fe77f7c9a6037c44248705db458bb43368b40ceaa5bdb1b4dfcfe1b12336944555f73fdfd8b610ba9b5e971ceecfa1c4fae5bcbaf84ded3c018b57ebfab4e5dc32830e1e140a50c88f9a6739a65dda7aec67b473aeade40f07a5b7f8bcd5f8a214c75dfa9a83ef029733d55b723591cbf6c833ba51f7df", 0xb6}], 0x3, &(0x7f0000002a80)=[@rthdr_2292={{0x88, 0x29, 0x39, {0x3c, 0xe, 0x2, 0x4e, 0x0, [@loopback, @mcast1, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}], 0x88}}, {{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000002b40)="08d7401069b54cfa8e3a226cf5d11545a4ab4b5724134a925803a079293e878cdd765b77f9a10b1c559a850e653a8148e3e20fb597d18b1f540082958cfab87c8679752535ddf1403f208c65f1b80c709883499e18831497195a169ecbe51a", 0x5f}, {&(0x7f0000002bc0)="e7ea22a7ed01639ec0bc29f4641b45ff2dd1", 0x12}, {&(0x7f0000002c00)="66c53cc3e1a8e8d5e515445b41858e9b10a990d7c4edb6910e53618f561d9e6ef4909d35623b8ec2ae1e7dae0282347f43b09d488e2cad802350eb43d8ca977dbd788aaf531e2cf76895dbc0d7c0ae69f0dc27ca4cb003908f2ca6ac9d2578d241f4943b51fda9f6841bbdbbd7c0713a8412c6cf4d944322e8735ef9607c3a15541c2e02cb4217400360226c78a816c31668e92772f21e531edf3e28f399f1990412471d4c8a68b86304df949b2d142fd870b2309f5c", 0xb6}], 0x3}}, {{&(0x7f0000002d00)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x42}, 0x18bd06d3}, 0x1c, &(0x7f0000003e40)=[{&(0x7f0000002d40)="371dce633f6be55c1d32bf4884160f9f8444e231d34997cd6444c0d376541dc2394b61a53b2b5283e73e3a1fa4d0101263d9f6fe3326809b32395f8a93d5c60fdcaa1cfffa1f8ac12a3872ee2a19adb9f3ee40b321ff64fd4b41dd304e61b2858b5522faf2270a3a5b893b527cf7e1ba6ac80e9df7b79a792fe1ae1ef4a8166bd7404ceb7a721f4586deabc88f4696c04a877994e89fb0cfbd3ca87a188381b81498250d84675bd9742b6fa14a39fcf896962043096822f20d10f226a4df09753a9de3126f0fdbec1e889e7bf369ba510d6fd61d35", 0xd5}, {&(0x7f0000002e40)="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", 0x1000}], 0x2, &(0x7f0000003e80)=ANY=[@ANYBLOB="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"], 0x118}}, {{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000003fc0)="a1c8579edb81e806dca592f0d58e018e860963f5dfdcfb7b9361ad23b72a2f79d46dc3b27f3c689ea8def17a23c6ed02e22f2523d0446517480aa83d7ec0a393bda8aef84f42ade78550cd048213a2d05687dac0833df45f13d95cb491a83ab032d462504fac83f226782842fc9f43f02e85d5a571fa376ac244cea44228e774fd6c973c", 0x84}, {&(0x7f0000004080)="78d2c8f950cc92b66e834ce8bef9eb222385f694a47950ddf1c96724a2489ad00bd92cadf0d1e843cfc9213701fccb09061e3c687fcd1479a2b0462ddaea0a6f9ce542b05c11b5629f4dd8c417f8a1a6f32f807eeb4fa99b51ea41661c0675a7c65cbca46ce3a9be5e09dbed71945b6c85a4c16d9bbfa0b43e3964b0c17d4750b3", 0x81}], 0x2, &(0x7f0000004180)=[@hopopts={{0xe8, 0x29, 0x36, {0x2f, 0x1a, '\x00', [@generic={0x4, 0x7b, "8660d4c405a723f1fef2b62c69f53827f534be647f01c8caa2ad4c298f7376dc8d341a4cd16ad98d028441f7a51f334044b05bc46fffae2f64ad275c7fb140eb8e177dcbf5d7548c483a721cbaa9e2dbb62550579d481484438d6671b3239a63d3b6ea5ef28e894c15bb2800cf44e3e2435d38b9a32ec741fb9315"}, @ra={0x5, 0x2, 0x300}, @jumbo={0xc2, 0x4, 0x5}, @calipso={0x7, 0x40, {0x0, 0xe, 0x20, 0x1000, [0x2, 0x7fffffff, 0x1, 0x80000001, 0x6, 0x5, 0x8]}}, @ra={0x5, 0x2, 0xffff}, @pad1]}}}, @rthdrdstopts={{0xb8, 0x29, 0x37, {0x5c, 0x13, '\x00', [@generic={0x0, 0x80, "1e585fd3cfb82526ae895b90ce83f67d462c572d549be96ca5e9b1a93293e137415752ea2da9d661e2f02bbfaa2c82660eea53e20c07f31ec70e4b7af75a4dd723793d4813e66770b6334f0e1b3d27ff51a3645862dca7d14c7f341203a4f937a61cf02069bd4e485e2914c4471986a902accd28f3a076870389a845868ee67d"}, @hao={0xc9, 0x10, @mcast1}, @jumbo={0xc2, 0x4, 0x100}, @enc_lim={0x4, 0x1, 0x6}]}}}, @dstopts={{0x58, 0x29, 0x37, {0x3a, 0x7, '\x00', [@calipso={0x7, 0x28, {0x0, 0x8, 0x8, 0x8, [0x100000001, 0x3, 0x100000000, 0x2]}}, @hao={0xc9, 0x10, @mcast2}]}}}, @tclass={{0x14, 0x29, 0x43, 0x9}}, @hoplimit={{0x14, 0x29, 0x34, 0x7ff}}, @dstopts_2292={{0x38, 0x29, 0x4, {0x5e, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x80}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x10}}, @jumbo={0xc2, 0x4, 0x3}]}}}, @dstopts_2292={{0xb0, 0x29, 0x4, {0x87, 0x12, '\x00', [@pad1, @generic={0x3, 0x15, "781590024afd5ba4c2fac51d02843b855a76c40060"}, @jumbo={0xc2, 0x4, 0x3ff}, @jumbo={0xc2, 0x4, 0x9}, @generic={0x0, 0x6d, "17149afd1dbd216da2b4bab050d049b70f6bcb8ddef0043cccfb9a5b906f32c220a0b58159e0b736bfb0f16d26daccc27323d99afd27cd8cbca9f6d477facc6b344c23b66bb79442e0daa197a86566d365bda45ea322ff0adb706477b55cb449e28c6fdd9b990e47564af41701"}]}}}, @dstopts={{0x40, 0x29, 0x37, {0x62, 0x4, '\x00', [@calipso={0x7, 0x20, {0x2, 0x6, 0x2, 0x40, [0xfffffffffffffffb, 0x0, 0x3]}}]}}}, @rthdr_2292={{0x78, 0x29, 0x39, {0xff, 0xc, 0x0, 0x9, 0x0, [@rand_addr=' \x01\x00', @mcast2, @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @remote]}}}], 0x3c8}}, {{0x0, 0x0, &(0x7f0000004600)=[{&(0x7f0000004580)="35af96bd2bb9ad48faa53f61897a6351a976e0ed8e79a88d1926b41de2c76d4e41c86624729c103d76fb56eced111d6b821f8e2ccb5d493c3ddef9bbea3d700d5e068b0747722221b4df287cfb9c60d2f5e7ec746db7746706528376253a68bd0e36", 0x62}], 0x1, &(0x7f0000004640)=[@dstopts={{0x118, 0x29, 0x37, {0x16, 0x20, '\x00', [@calipso={0x7, 0x20, {0x1, 0x6, 0x1, 0x9, [0x9b, 0x9, 0x5]}}, @jumbo={0xc2, 0x4, 0x1000}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic={0x2, 0xc4, "9877d0b9611d93d0414e65d839bf908c059956e51284f5789e82785d841bac97be58f7b20baec932a0bb4a6500ca60b915d873cbd266c6f478a71fd0d34ab36e3f9880ed54a7c095e898d8e644273a08c5d49b5026fe895700061bfbfa6738f13a452d05526071617d8d0b931d981380a408759df139b6608ccc4e14fb3f4a06adcd5d7e6e8be5caa3eb419437b8ee2a9b06cd3abe1f5c6b92bf515b23a44a1a57a6f03372c1da35b8f6c462142c1592e530fa666bf91c32865f81148d33841b346a89e5"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}, @tclass={{0x14, 0x29, 0x43, 0x5}}], 0x148}}, {{&(0x7f00000047c0)={0xa, 0x4e21, 0x1, @remote, 0x9}, 0x1c, &(0x7f0000004900)=[{&(0x7f0000004800)="cb7913e81f2a6e62590d5e5fbe7cc145fe32af3a5e05c397b729f1dcc93f3942d1ebd1f6ac002cde8a405246f25788f021cd853e6829319bace2692602c02472cf2dec4c167d44c8b967cf4e2a0f8cf5ec896ac94921b13865870418b8fa72d6add72b6b2e03d41ab6d6234bda328f35abf1b5ade9ad1e398819edf83a31ecf69081cea75e39944339c4b5411b045d9a72fd87b2abe7b802b7432fa5267cb250216b43f9b39decfb408b4310131e7b96beedefbc0cb07cc373f96468fceeb174fce9264304e0db198dc872c613024302faed9cc8f6c683c54adbab5011e9a8af669f5b9310dae56637a96509", 0xec}], 0x1, &(0x7f0000004940)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xffff}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x5c, 0x2, 0x0, 0x2, 0x0, [@remote]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x40}}, @rthdr={{0x28, 0x29, 0x39, {0x2, 0x2, 0x1, 0x6, 0x0, [@mcast1]}}}, @hopopts={{0x48, 0x29, 0x36, {0x4, 0x5, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @pad1, @ra={0x5, 0x2, 0x4}, @enc_lim={0x4, 0x1, 0x3a}, @pad1, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x1ff}]}}}, @dstopts_2292={{0x78, 0x29, 0x4, {0x0, 0xb, '\x00', [@calipso={0x7, 0x40, {0x1, 0xe, 0x3f, 0x66f, [0x1, 0x401, 0x7, 0x80000001, 0x2, 0xfff, 0x4]}}, @jumbo={0xc2, 0x4, 0x6}, @hao={0xc9, 0x10, @private2}]}}}, @dstopts={{0x50, 0x29, 0x37, {0x96, 0x6, '\x00', [@ra={0x5, 0x2, 0x1}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @loopback}}, @ra={0x5, 0x2, 0x5}, @hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @dstopts={{0x30, 0x29, 0x37, {0x21, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0xff}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0xd}}]}}}], 0x1c0}}], 0x7, 0x810) 02:15:15 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xdb03], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:15 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x10, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x250, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1760.943145][T13340] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:15 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x18, 0x10, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:15 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xdc02], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) [ 1761.133343][T13340] 8021q: adding VLAN 0 to HW filter on device bond431 [ 1761.164877][T13351] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1761.234587][T13411] bond432 (uninitialized): Released all slaves 02:15:16 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x34, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:15:16 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) fcntl$setpipe(r2, 0x407, 0x7ff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001340)=@nat={'nat\x00', 0x1b, 0x5, 0x538, 0x0, 0x238, 0xffffffff, 0x238, 0x378, 0x468, 0x468, 0xffffffff, 0x468, 0x468, 0x5, &(0x7f0000000180), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d3], 0x9a60, 0x0, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ipv6={@mcast1, @mcast1, [0xffffff00, 0xff000000, 0xffffff00], [0xff000000, 0x0, 0xffffffff, 0xff000000], 'vlan0\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0x2c, 0xfb, 0x2, 0x1c}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x3, 0x0, [0x6, 0x7, 0x2, 0xc6cd, 0x4, 0x7, 0x5, 0x3, 0x5, 0x1ff, 0x3ff, 0x6, 0x2, 0x40, 0x7, 0xffe1], 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xfff, 'syz1\x00', {0x6}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@mh={{0x28}, {"64da"}}, @common=@mh={{0x28}, {"1f34"}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x10, @ipv4=@rand_addr=0x64010101, @ipv4=@local, @icmp_id=0x68, @port=0x4e21}}}, {{@ipv6={@empty, @empty, [0x0, 0xff, 0xff000000, 0xff0000ff], [0xff000000, 0xff000000, 0xffffff00, 0xff000000], 'bridge0\x00', 'netdevsim0\x00', {}, {0xff}, 0xedac8bd12f3bf4b, 0x6, 0x5, 0x10}, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x1, @ipv4=@broadcast, @ipv4=@multicast2, @port=0x4e21, @gre_key=0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f0000000300)={{0x1, 0x200, 0x101, 0x6, 0x2, 0x101}, 0x3b3, [0x1, 0x3, 0x1, 0x1, 0x8, 0x0, 0x0, 0xbe59, 0xfffffb45, 0x9, 0xf63d, 0x1, 0x6, 0x0, 0x5, 0x6, 0x0, 0x4, 0x8, 0x4, 0x80000001, 0x6, 0xffffff81, 0x8, 0x0, 0x2, 0x9, 0x0, 0x5, 0x4, 0x80, 0x59a9799, 0x81, 0x100, 0xfffffffc, 0x6, 0x7, 0x4f, 0xffff, 0x6, 0x4, 0x2, 0x100, 0x0, 0x1f, 0xfffffffb, 0x8, 0x5, 0x9, 0x5, 0x6e5, 0x7, 0x9, 0x100, 0x4, 0x40, 0xfff, 0xfffff8f9, 0x4, 0x0, 0x8, 0x80000000, 0x80a, 0x2, 0x0, 0x1f, 0x7f, 0x6, 0x40, 0x55, 0x5, 0xd3, 0x7, 0x2, 0x6, 0x4, 0x8, 0x10001, 0x2, 0x7fff, 0x9, 0x6, 0x800, 0xbe2d, 0x1, 0x61, 0x2, 0x80000000, 0x101, 0x1000, 0x143, 0x2, 0x8000, 0x80000000, 0x1ff, 0x400, 0xca23, 0x80000001, 0x9, 0x5, 0x3, 0x7, 0x81, 0xbfac, 0x9, 0x7ff, 0x8, 0x7, 0x0, 0x5, 0x4, 0x5, 0x8, 0x0, 0xe9b, 0x4, 0x2, 0xffffff60, 0x100, 0x4, 0xbc, 0x9, 0x7, 0x5, 0x2, 0x8, 0xffffffff, 0x4, 0x3, 0x6, 0x9, 0x1a4b534a, 0x2, 0x8, 0x2, 0x10001, 0x1, 0x0, 0x80000001, 0x0, 0x1, 0x5, 0x4, 0xb0, 0x8, 0xc2, 0x1, 0x0, 0x3, 0xaaa, 0x2, 0x6, 0xf5, 0x81, 0x87e, 0x3, 0x5, 0x70000000, 0xfb, 0x10000, 0x800, 0x1, 0x2, 0xffff, 0x3, 0xffffff00, 0xa8f, 0x0, 0x973, 0x8000, 0x10000, 0xf8, 0x0, 0x3, 0x2, 0x0, 0x1, 0x9393f7f, 0x8, 0x1, 0x9, 0xff, 0x8001, 0x37b, 0x200, 0x9d8, 0x8, 0x4, 0x1, 0x5, 0x9, 0x6, 0x3, 0xfffffffa, 0xb62, 0x7fff, 0x0, 0x8001, 0x0, 0x1, 0x6, 0x1, 0x6, 0xda9, 0x1, 0x269, 0x2, 0x7, 0x3, 0x5, 0x8001, 0x1, 0x8, 0x50001, 0xffffffc0, 0x34, 0x7fff, 0x8e, 0x3, 0x401, 0x3, 0x72f11b6a, 0x0, 0x6, 0x50, 0x200, 0x400, 0x4, 0xff, 0xffff0629, 0x101, 0x2400000, 0x3, 0x9, 0x4a, 0x7ff, 0xffffff00, 0x0, 0x5, 0x200, 0xfffff000, 0x3, 0x3, 0x3, 0x2, 0x6638, 0x1ff, 0x0, 0x4, 0x3f, 0x6, 0xffc00000, 0x9, 0x8001, 0x315, 0x2, 0x8, 0x0, 0x1fc000, 0xb29, 0x7fffffff, 0x20, 0x0, 0x9, 0x80000001, 0x0, 0x32, 0x2, 0x20, 0x7, 0x7f, 0x400, 0x2, 0x1000, 0x5, 0x8000, 0x8, 0xfffffff8, 0x3, 0x6, 0xfffffff9, 0x8001, 0x3, 0x3, 0xfffffffe, 0x10001, 0x40, 0xf0000000, 0xb5c, 0x2, 0x8001, 0x4, 0x8, 0x10000, 0x5, 0x8000, 0x7fffffff, 0xd789, 0x0, 0x6, 0x9, 0x6, 0x9a1f, 0xff, 0x2, 0x4, 0x400, 0x3f, 0xffffffff, 0x800, 0x3, 0x51b5, 0x47, 0x1000, 0xfffffff7, 0x9, 0x8, 0x3, 0x808000, 0x7fffffff, 0x10001, 0x8, 0xffff, 0xf9f5, 0x6, 0x0, 0xffffffff, 0x4, 0xf6c1, 0x0, 0x9, 0x20, 0x2, 0x7c7e5d6c, 0x0, 0x6, 0x8b, 0x3f, 0x10000, 0x8001, 0x1, 0x4b, 0x1f, 0x765e, 0x4, 0x6c7, 0x5, 0x80, 0x800, 0xfffffffb, 0xfffffffa, 0x2, 0x6, 0x3f, 0x200, 0x7f, 0x1, 0xbe, 0x0, 0x40, 0x0, 0x1, 0x3, 0x56, 0x1f, 0x9, 0x6, 0x8001, 0xe9f, 0x1f, 0x7, 0x2, 0xa6af, 0x1, 0x39, 0x8, 0x1ff, 0xffff4322, 0xffffffe0, 0x1, 0x9, 0x455, 0x3, 0x6, 0x401, 0xfffffffc, 0x0, 0x3ff, 0x9, 0x20, 0x40, 0x16, 0x20, 0xff, 0x0, 0x10000, 0x1, 0xe7, 0x8, 0x8a, 0x80000000, 0x7, 0x6, 0x3b2, 0x635, 0xa283, 0x2, 0xff, 0x3, 0x4, 0x6, 0x2, 0xffffffff, 0x334, 0x59, 0xd6af, 0xec2d, 0x4e1, 0x5, 0xffff, 0xffffffe1, 0x4, 0x400, 0x0, 0x1000, 0x3f, 0x8, 0x1, 0x8, 0x4, 0x101, 0x1, 0x80000000, 0x8000, 0x6, 0xfffffffc, 0x7, 0xad1e, 0xffff8462, 0xff, 0x81, 0x7f, 0x1, 0x6, 0xfff, 0x8, 0xffffffff, 0x1, 0xa0c, 0xff, 0x800, 0x6, 0x8, 0x3f, 0xc3, 0x32, 0x3ff, 0xc8, 0x7, 0x5, 0x7fffffff, 0x3ff, 0xffffffe0, 0x2, 0x8, 0x6, 0x4, 0x9, 0x9, 0x455, 0x82, 0x8, 0x5, 0x7ff, 0x5, 0x8000, 0x7, 0x86, 0x6, 0x371c, 0x0, 0x6, 0x6, 0xff, 0x7, 0x2, 0x101, 0x1, 0xfffffffb, 0x1, 0x8, 0x7, 0x7ff, 0x7, 0x800, 0x9, 0x200, 0x8be, 0xa04, 0x7fff, 0x3, 0x80000001, 0x9, 0x1000, 0x1ff, 0x3, 0x6, 0x5, 0x4, 0x1, 0x0, 0x0, 0x4, 0x2, 0x1ff, 0x1, 0x400, 0x3ff, 0x4, 0x2, 0x7, 0x9, 0x3, 0xf60741e5, 0x8001, 0x9, 0x1200000, 0x0, 0x9, 0x7, 0x10001, 0x3, 0xffff, 0x1, 0x7ff, 0x0, 0x7fff, 0xffff0000, 0x800, 0x9e4c, 0x2, 0x9, 0x7f, 0x0, 0x8, 0x20, 0x7fff, 0x3, 0x3373, 0x4, 0x6, 0x7, 0x4, 0xfffffffd, 0xffffffff, 0x8001, 0x9, 0x8, 0x73e9, 0x60d39395, 0x64, 0x40, 0x4, 0x242, 0x7fff, 0x53644877, 0x9e, 0x7fff, 0x1, 0x3, 0x7b3, 0xf2, 0x4, 0x401, 0x3, 0x1, 0x5, 0x8000, 0x7fff, 0x7, 0x2, 0xfff, 0x400, 0x0, 0x0, 0x7, 0x1, 0x8001, 0x7, 0x3, 0x5, 0x1, 0xfffffff8, 0x7, 0x43, 0x2, 0x6, 0x101, 0x2, 0xffffffff, 0xb0000000, 0x80000001, 0x81, 0xd61b, 0x4, 0x3, 0x5, 0x8, 0x9, 0x2, 0x401, 0x8000, 0x0, 0x7, 0x2, 0x4, 0x800, 0x1, 0x0, 0x9, 0x8, 0x0, 0x800, 0x9, 0x2, 0x7, 0x1, 0x0, 0x9, 0x8, 0x8000, 0x0, 0x4, 0xaf1, 0x20, 0xffffffff, 0x0, 0xf7e1, 0x7, 0x5, 0xff, 0x2, 0x7, 0x7ad, 0x7d, 0x8000, 0x1, 0xdec, 0x0, 0x3, 0xffff8000, 0x7b, 0x1, 0x5, 0x2, 0xff, 0xfc2, 0x7, 0x0, 0x3, 0xfffffffe, 0x40, 0x3, 0x9, 0x2, 0x1fb, 0x5, 0x44ab, 0x6, 0x6, 0x200, 0x5, 0x401, 0x80000001, 0x2, 0x10000, 0x800, 0x3, 0x6, 0x4, 0x9, 0x7, 0x401, 0x5, 0x200, 0x6, 0x4, 0x0, 0x2, 0x9d36, 0x0, 0x1, 0x6bf658cf, 0x2, 0x8, 0x5, 0x7, 0x6c, 0x9, 0x0, 0x1, 0x3, 0x4, 0x8, 0x1, 0x800, 0x3, 0xfffffff9, 0x6, 0x10000, 0x5470fd33, 0x9, 0x7fffffff, 0x400, 0x81, 0x7f, 0x1000, 0xe5b, 0xa8, 0x8, 0x4, 0x7fff, 0x81, 0xa9a, 0x1, 0xfff, 0x0, 0x4, 0x8, 0x4, 0x1, 0x4, 0xc3, 0xfffffffe, 0xe0d, 0xfff, 0x9, 0x0, 0x3, 0x7, 0x5, 0xfffffff8, 0x7, 0x80000001, 0x8, 0x7, 0x8a4e, 0x4, 0x8, 0x81, 0x7, 0x93e, 0x401, 0x2, 0x7, 0xb40, 0x7, 0x0, 0x4, 0x8000, 0x6, 0xc8ce, 0x7ff, 0x7fff, 0x13216b8c, 0x2c, 0x7, 0x9, 0x5, 0x2, 0x8, 0x7, 0x3, 0x2, 0x3b40599b, 0x100, 0xd849, 0x3, 0x401, 0x40, 0x4289, 0x24, 0x1, 0x6, 0x33f4f4aa, 0xfffffe00, 0x1, 0xf3f, 0x2, 0x4b6, 0x9, 0x3f, 0x7, 0x9, 0x92, 0x4, 0x6f8, 0xd5, 0x2, 0x1f, 0x2, 0x7, 0x0, 0x80, 0x9, 0x2, 0x400, 0x40, 0x3f, 0x4, 0x5, 0x401, 0x3, 0x3, 0x2, 0x1, 0x80, 0x80000000, 0x401, 0x2, 0xffff, 0x90c, 0x5, 0x0, 0x4, 0x5, 0xab47, 0x9, 0x5, 0x0, 0x3, 0x7, 0x4, 0x4, 0x10001, 0xfff, 0x0, 0x3, 0x400, 0x9b5c, 0x4, 0x5, 0x8001, 0x0, 0x400, 0x100, 0xfffffffd, 0x1, 0x1, 0x80000001, 0x6, 0xfe000000, 0xfffffffb, 0x1, 0x6b, 0x92, 0x100, 0x4, 0x8, 0x7f, 0x4, 0x1ff, 0x1, 0xffffffff, 0x3f, 0x10001, 0x4, 0x8, 0xfff, 0x0, 0xb7, 0x1, 0x5, 0x4, 0x5, 0x3, 0x101, 0x5, 0xfff, 0x7, 0x1, 0x10000, 0x379d, 0x7, 0x7f, 0x1, 0x6e, 0x9, 0x1, 0x3, 0xfffffff8, 0x5, 0x7fff, 0x1, 0x71f, 0x9, 0x10001, 0x1, 0x9, 0x10001, 0xfffffffe, 0x1, 0x4, 0x1, 0x6, 0x61, 0x6, 0x6, 0x908, 0x3f, 0x3, 0x200, 0x9, 0xfff, 0xffffffff, 0x5b, 0x1, 0x3, 0x40, 0x2, 0x9, 0x0, 0x80e, 0x0, 0xfffffbc8, 0x1, 0x7ff, 0x5e8d, 0xfff, 0x3c1, 0x0, 0x6f86c33f, 0x3, 0x80, 0x7, 0x1, 0x2, 0xffff, 0x4, 0x7, 0x3ff, 0xffffffff, 0x2, 0x9, 0x86db, 0x800, 0x8, 0x4, 0x7, 0x1f, 0x4, 0x7, 0x225a, 0x6, 0xc, 0x400, 0xc5, 0x0, 0x400, 0x1f, 0xdf3, 0xad7f0, 0x0, 0x1, 0xffff, 0xffffffff, 0x0, 0xdbb, 0x5, 0xfffffffd, 0x8, 0x100, 0x5, 0x1, 0xc72, 0x2, 0x8, 0xaf, 0xff, 0x3, 0x10001, 0x1, 0x10001, 0xffffffff, 0x2, 0x3, 0xc5854390, 0x58, 0x8, 0x5, 0x2, 0x4, 0x41, 0x3, 0x8001, 0x3, 0xff, 0xaa, 0x8, 0x2, 0x38, 0x9, 0x80, 0x401, 0xfff, 0x3, 0x800, 0x5, 0x2, 0x1, 0x5, 0x1, 0x6, 0x7, 0x2, 0xfffffff9, 0x7, 0x2, 0x7, 0x0, 0x1, 0x4, 0x40, 0x4]}) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 02:15:16 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xd201], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:16 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x2, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x256, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:16 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xde03], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) [ 1761.343144][T13433] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1761.385478][T13434] x_tables: duplicate underflow at hook 1 [ 1761.403755][T13433] 8021q: adding VLAN 0 to HW filter on device bond432 02:15:16 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x3, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:16 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xe001], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:16 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xd801], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:16 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0xc1600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r2 = fcntl$dupfd(r1, 0x0, r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) fchown(r2, 0x0, r3) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32, @ANYBLOB="043455d1bb299d49590206", @ANYRES32=0x0, @ANYBLOB="08000408999899e60d7e35f129767ca97ecf0977e7e2013cba2c57919334a3e4be5f32216fe161dbdb612271", @ANYRES32=r3, @ANYBLOB="bd288fa1", @ANYRES32, @ANYBLOB="10000200000000002000000000000000"], 0x4c, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfd, 0x80}, 0xc, &(0x7f0000000740)=[{&(0x7f0000000b00)=ANY=[@ANYBLOB="380200002100000125bd7000fbdbdf2508006200", @ANYRES32=0x0, @ANYBLOB="49173519c14077d23e9a6a128d5b0b2094cf27a84cdc77a1d6b4e96cdea5d3a2ec1d580eda1a0ac5729ff26f0ccc01dd67c3988478a6eb4f516a693f55624c9765d14a40ff75958c73533bbb60082d8f631e7ba9fa57fa20579e00178964f45761f1093a84aa3bf16452279f1ae87cef007d34372a3aa8d837e047601f44a7971e5f4c4437610421d3c6c3ad1d62a2fc023a2931936c6f3254b46d36e290a9039ce3814c9febf74fa2b44252cfc96b08006a00", @ANYRES32, @ANYBLOB="a30988bff11c8f9d869987f32317d3497fd2f913c1333331fb604dbebd08ece20aa00a024eab73432a328745ac5567280eff355540bca3d089f34e99e07d21616ff793c711d1182c66f6ad29027bf21c1c09386dc1f4cb40f54bf1a139486216b4f9a17a5c8c3f6f8e4f9be598fe8ab853db1943fe4942b5a0254accedd5c07dae38d16ea34cbba7c4d26c7b5f66ba5fb6581aa847ef49f33b38fce34614a58e66544246bd93a0d30208005f00", @ANYRES32, @ANYBLOB="ae00658008003c00", @ANYRES32, @ANYBLOB="3387bd5ce71377370794fcf4559c027bfd7d9c1e183ccfc309a4d4bff85a17e4b12cd5dea52a6f0a71c69a4b0c873843fc7968445fb568f50797cf7e7b5bb9bd701d8e8edcbcbe0e7e78691c7c24e1b44b41882a2d7908006400", @ANYRES32, @ANYBLOB='\b\x00$\x00', @ANYRES32=0x0, @ANYBLOB="9953a3d226319559731e9b2957d92b42819b803380ba49226b7a95590396ed3358c5d051e819721514003400fe80000000000000000000000000003d000008002500", @ANYRES32, @ANYBLOB="abecf9c8f29cfbb02cf3d2ffac29ec5c97689cb384f80951098ae7db3a85be64"], 0x238}, {&(0x7f0000000640)={0xe4, 0x27, 0x800, 0x70bd2c, 0x25dfdbfb, "", [@nested={0xd1, 0x20, 0x0, 0x1, [@generic="9f83eb47ad17896da4ff1510c560c191169eb7be121af3897299b8581878d360bd720ae7a6d7a4241f1e1e44e88f5e721c50add4c3af58e5c63e3af0355ecfd1fed2ffbbfe0ca310465fc2b03065256ceaf41d76ba6e82e874baec0d1c57164a86bacd6998a20934af228f0bc15eb38cd7147c2d4c90f1e2b99548085ebde6fe5ec044cc16227da2c7547bddc9d223b4d7b5bf571527681ab5e24058bfb9897d8bf2e4a929d23f04b4cfb22fe10707e073677763a4a1f0810438137b1aa1b8c272eda130bab951656a806871e5"]}]}, 0xe4}], 0x2, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r3}}}], 0x40, 0x90}, 0x91feccce36815a46) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0x0, 0xf0, 0xf0, 0xf0, 0x0, 0x1b8, 0x200, 0x200, 0x1b8, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r4, 0x0, r0, 0x0, 0x406f408, 0x0) sendto$inet6(r5, &(0x7f0000000180)="62b8faacd88b0df6118eb4660bb9101534363cb87a186013af348701be128ac079208839ff82c930cf065ed1394e604b4524f863640801e43220d102bf3b46411e1dfa2356024db614a5a6645e0dce823eddffd50de8df9c649f0db97186b331f3702be437d7ea44c27f566bd965652549c03b8dab8f91f46a6f063106645778450fc75f9781", 0x86, 0x4090, 0x0, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240), 0x48000, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e23, 0x7, @private2, 0xda3e}}, 0x0, 0x0, 0x6, 0x0, "2718832e97220f5194e5eb035b81e3182ab76e648ecb96a8ad3d2e4391c7bb87ea2b050ea551f7552ff79599a76e348408e3b0ae3d3939c0d9b752429bbebdd915575735483d22dd7984258dc6e5dcb6"}, 0xd8) [ 1761.532828][T13433] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:16 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x4, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x258, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1761.579140][T13480] bond433 (uninitialized): Released all slaves [ 1761.580063][T13500] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables 02:15:16 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x39, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:15:16 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x6004881, &(0x7f0000000040)={0xa, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe344}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) r3 = socket(0x200000100000011, 0x3, 0x3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000001c0)=0x8, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x16, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000300)={@loopback, @rand_addr=0x64010002}, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000001c0)=0x8, 0x4) bind$packet(r3, &(0x7f0000000480)={0x11, 0x16, r5, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@private1, r5}, 0x14) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) sendto$inet6(r1, &(0x7f0000000180)="68a2ebfa9aa90a827ef096a58b26b63b48d84dfdbddb468fd85f123f5bcf3307e023eea4ee88901ca16627497b4bad30b5d6302b2964672e5ff448408af9ed372a86a04912e048fdcf66b8e79af088bb0ba7f89df905f9ed4a9a2f81bf2d90e8b125151563629e488dfa5dd52d9f76bab366192f36eb1f6f32d7f821b933fd4cd57408b141083548cf06e33fa054ab333cc259e118c54c65c233561caebbb8bf0d7d89967c1ba84affe793af5830bbec497c9f7aa193779ef34249fcc9a6e56948429f0ec01861e618521be2283f9dfdeaf6ab3c39635b257242e55bce", 0xdd, 0x8084, 0x0, 0x0) 02:15:16 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xe103], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:16 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 02:15:16 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x5, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:16 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xe400], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) [ 1761.786309][T13521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:16 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xdb02], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x266, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:16 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x6, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:16 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x6, @rand_addr, 0x6}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 02:15:16 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xe702], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) [ 1761.973107][T13528] 8021q: adding VLAN 0 to HW filter on device bond433 [ 1761.989519][T13521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1762.046758][T13586] bond434 (uninitialized): Released all slaves 02:15:16 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="fc00000018000700ab092500090007000a060000000000060000369321000100ff0100000005d00000000000000398996c92773411419da79bb94b46fe000000bc00020000036c6c256f1a272f2e117c22ebc205214000000000008934d07302ad031720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x301, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:15:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x26e, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:16 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xdb03], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:17 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xe802], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:17 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x7, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:17 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) [ 1762.211287][T13613] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:17 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x8, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x270, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1762.316183][T13613] 8021q: adding VLAN 0 to HW filter on device bond434 02:15:17 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x8, 0x1) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) socket$inet6(0xa, 0x3, 0x9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) preadv(r3, &(0x7f0000000200), 0x0, 0x4, 0x0) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) 02:15:17 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xe903], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) [ 1762.464843][T13654] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.3'. 02:15:17 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xdc02], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:17 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@hyper, 0x2}) [ 1762.513284][T13654] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:17 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x39}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:15:17 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x9, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:17 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xea01], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x274, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:17 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000040)) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) 02:15:17 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0xa, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:17 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) pipe2(&(0x7f0000000b40)={0xffffffffffffffff}, 0x0) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000040)={0xffffffffffffffff, 0x8}) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) splice(r3, &(0x7f00000001c0)=0x4, r4, &(0x7f0000000200)=0x2, 0xfffffffffffffff9, 0xa) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x320, 0x138, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x3, &(0x7f0000000180), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x25}, @loopback, [0xff000000, 0xffffff00, 0xffffff00, 0xff000000], [0xff, 0xffffffff, 0xff000000, 0xffffff00], 'veth0_to_hsr\x00', 'syzkaller1\x00', {0xff}, {}, 0x87, 0x40, 0x0, 0x8}, 0x0, 0x118, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x2, 0x0, [0x0, 0x81, 0x0, 0x1, 0x8, 0x40, 0x40, 0x2, 0xe6, 0x8, 0x8, 0x2, 0x7ff, 0x3, 0x3bd, 0x96e], 0x3}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xffffffff], 'macvtap0\x00', 'gretap0\x00', {}, {}, 0x87, 0x1, 0x3575954609568d2c}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@icmp6={{0x28}, {0x10, "7587", 0x1}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) [ 1762.747407][T13713] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:17 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xe103], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:17 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xec02], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x276, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1762.962755][T13713] 8021q: adding VLAN 0 to HW filter on device bond435 02:15:17 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0xb, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:17 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000180)="e23f5e4c19b884f5c537230a7e292f44e2fc7b95c0742599b97bd578da8e60154da637cd6e9ed019b2e6b70c537b66148f4985fda3c5baa0018aa3c6030ef8acd0e21a5159511e2e1af145e3f3d8c67d8c795d47a2f85624fa2a9e9705966e8fa46184be64997e09ab4fbf0574158ec22104b55dd3ebf3464bf2e5e2b9312f66dcb9f9b18d2026df5e17fe0ab62370d1c45b496c3af1618f71cb01b57ea994aa3fd25772d6f3fac225245a6bfa91f20de2cea07adfcea85ecbea1a8c4d645a57c02a93e4ee536dcb0d1c2b0bf083cf787e20a6fd663c3b22c74b3946", 0xdc, 0x200041d0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) [ 1763.089250][T13722] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1763.132224][T13722] bond436 (uninitialized): Released all slaves 02:15:18 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x2, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:15:18 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xec03], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:18 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xe201], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:18 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0xc, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:18 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendto$inet6(r2, &(0x7f0000000180)="eb397491ee64b7d5604e1d5969131e56f316ad8b8eac8f13c2559500fe4377e7c0f35ee996860e573276b4f233d1634627799d61242cc6f4e121da8ff91207373afed4d07d1eaba8cbf29de78515a9283066b95a8ab7795ea99b2caca5dd45ddd641b83804d9024bf4e81b866c8b49e9954cc8e3de", 0x75, 0x10000854, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private1, 0x7f}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 02:15:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x27a, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:18 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0xd, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:18 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xee00], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) [ 1763.336566][T13813] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1763.362320][T13816] xt_ct_set_timeout: 107 callbacks suppressed 02:15:18 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xe400], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:18 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0xe, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1763.362347][T13816] xt_CT: You must specify a L4 protocol and not use inversions on it 02:15:18 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x98140, 0x0) r3 = openat(r1, &(0x7f0000000280)='./file0\x00', 0x121200, 0xf6) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000300)=r3, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000080), 0x9, 0x242182) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x4e24, 0x0, @loopback, 0xd4f}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000040)={r0, 0x2, 0x3800000000000000, 0x7}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r5, 0x8983, &(0x7f0000000100)={0x1, 'syzkaller0\x00', {}, 0x7ff}) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000340)={0x0, 0xbe, 0xc9, 0x1}) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x1e3b, @private2, 0x1}, 0x1c) sendto$inet6(r6, &(0x7f0000000180)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd7, 0x1, 0x0, 0x0) splice(r4, 0x0, r1, 0x0, 0x406f408, 0x0) [ 1763.401790][T13819] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1763.444438][T13813] 8021q: adding VLAN 0 to HW filter on device bond436 [ 1763.504395][T13869] xt_CT: You must specify a L4 protocol and not use inversions on it 02:15:18 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x11, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1763.509926][T13819] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1763.593205][T13876] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1763.639150][T13820] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1763.692852][T13880] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1763.709028][T13813] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1763.758978][T13813] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1763.768858][T13885] validate_nla: 12 callbacks suppressed [ 1763.768891][T13885] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:15:18 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x3, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:15:18 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xf000], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x27e, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:18 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat(r1, &(0x7f00000004c0)='./file0\x00', 0x264400, 0x52) sendto$inet6(r3, &(0x7f0000000c40)="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", 0x1000, 0x10, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1000}, 0x1c) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000300)="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", 0x124, 0x2000, &(0x7f0000000180)={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000680)={0xa, 0x4e23, 0x7f, @loopback, 0x89}, 0x1c) accept4$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c, 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000006c0)={{{@in=@local, @in6=@empty}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000640)=0xe8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendto$inet6(r6, &(0x7f0000000440)="eaa93524fd32a022b30eaba1a097a48e762cfe8a2d1f5067439cbeb5b5b0775261a8505ae7b35cb42685df8f79233aed2cdab07d01af93190120769a8dbb0af1deb8050df7f6274199533b104bf962a237b466690a7f49c95f8700055d9ccda260a2c0b5002b1fd41380e4", 0x6b, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000b40)=ANY=[@ANYBLOB="240000002a00000425b57000fcdbdf25000000000539a469aa99f20b306d6a4fb1fe42b808cabeca5ee7c72ca418653a18ddb695a7825521aa81155894e4bfc2675257632229fbc16ccc2bead6bd53d37e1c22f817f8dbef9728f45775c117e2376b09dcb9b2686ee10afe70bebc915b7138cf5c0f64f24ad0b654802e3eeb67f20f7af44fe516f180cf21efcf8639f0040e99f2639143ff10c7f75e82e73a56d1d7a72dddd514fe2672a8b2ee34466aaf0d30c4ade5f0420c34a986fb110591f3e037", @ANYRES32=0x0, @ANYBLOB="0000e2fff3ff0e000d00b32edbdf375e1bc3e5473151109ac522bd9849aad2dfcecb00"/50], 0x24}, 0x1, 0x0, 0x0, 0x7f386c699765e13b}, 0x20000010) 02:15:18 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xe602], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:18 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x12, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1763.864108][T13896] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1763.875620][T13898] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1763.880404][T13899] xt_CT: You must specify a L4 protocol and not use inversions on it 02:15:18 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x18, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:18 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000025c0), 0x0, 0x0) bind$inet6(r2, &(0x7f0000002600)={0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7fff}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) [ 1763.895833][T13898] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1763.938198][T13916] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x28c, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:18 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xf001], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:18 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xe700], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 1764.004307][T13916] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1764.071064][T13916] 8021q: adding VLAN 0 to HW filter on device bond437 [ 1764.090109][T13921] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 02:15:18 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x2f, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1764.137139][T13916] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1764.163918][T13916] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1764.179095][T13975] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:15:19 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="fc00000018000700ab092500090007000a060000000000060000369321000100ff0100000005d00000000000000398996c92773411419da79bb94b46fe000000bc00020000036c6c256f1a272f2e117c22ebc205214000000000008934d07302ad031720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x4, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:15:19 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x60, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:19 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xf925b78343e48670, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast2}, 0x53) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000300)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x8, "6d2451e22b1996"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000001300)={r4, 0x0, "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", "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"}) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a59eb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540976c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbefbdada4662d2a12f6d0000000000000000000000000000b4fb81aa", 0x129, 0x1, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) [ 1764.190324][T13975] bond438 (uninitialized): Released all slaves 02:15:19 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xe702], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:19 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x70, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:19 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xf002], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x298, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:19 executing program 0: write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x406f408, 0x0) 02:15:19 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x71, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1764.357571][T13999] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1764.385957][T13999] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:15:19 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xf302], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:19 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xe903], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:19 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x95, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1764.505386][T13999] 8021q: adding VLAN 0 to HW filter on device bond438 [ 1764.549078][T14013] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 1764.620010][T13999] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1764.678286][T13999] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:19 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="fc00000018000700ab092500090007000a060000000000060000369321000100ff0100000005d00000000000000398996c92773411419da79bb94b46fe000000bc00020000036c6c256f1a272f2e117c22ebc205214000000000008934d07302ad031720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x5, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:15:19 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xf400], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:19 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect(r2, &(0x7f0000000180)=@l2={0x1f, 0xba, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4, 0x1}, 0x80) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 02:15:19 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0xb4, 0x2c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1764.719962][T14074] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:15:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x2ae, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1764.833711][T14097] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:19 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xea01], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:19 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0', [{0x20, ':'}, {0x20, '-%'}], 0xa, "f5b37bf572da9448c290d68f11"}, 0x1d) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x406f408, 0x0) 02:15:19 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xf600], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:19 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x4}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1764.878058][T14097] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1764.970007][T14097] 8021q: adding VLAN 0 to HW filter on device bond439 02:15:19 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xf700], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x2b0, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1765.081038][T14109] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 02:15:19 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000300)=@nat={'nat\x00', 0x1b, 0x5, 0x510, 0xf0, 0x2d0, 0xffffffff, 0xf0, 0xf0, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, &(0x7f00000001c0), {[{{@ipv6={@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xff000101, 0xff000000], [0x0, 0xff000000, 0xffffff00, 0xffffffff], 'veth0\x00', 'ip6gre0\x00', {}, {}, 0x32, 0x4, 0x3, 0x6}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@private0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @port=0x4e21, @gre_key=0x9}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x8, @ipv6=@mcast1, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @icmp_id=0x67, @icmp_id=0x67}}}, {{@ipv6={@empty, @loopback, [0xff, 0xff000000, 0xffffffff, 0xffffff00], [0x0, 0xff000000, 0xff], 'bridge0\x00', 'syzkaller1\x00', {}, {}, 0x8, 0x15, 0x1, 0x40}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8, 'syz0\x00', {0x319f}}}}, {{@uncond, 0x0, 0x100, 0x170, 0x0, {}, [@common=@mh={{0x28}, {"8b21", 0x1}}, @common=@ah={{0x30}, {[0x4d3, 0x4d5], 0x8, 0x9}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xfff, 0xb6, 0xfffa, 0x1, 0x0, "8c703a9a239a487ce56c933aa9249a572891a3d648f9f43aa7947c4b91398290721ff23a8beb8abc3be7b55d19ad2853b753b0095afa8ddac0fb7764e9fdb095"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, 0x1, 0x1, 0x2, 0x0, 0x2}, 0x20) [ 1765.124372][T14097] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1765.155828][T14097] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1765.186021][T14183] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:15:20 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x7, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:15:20 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x8}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x2b2, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:20 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xf801], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:20 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xec02], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:20 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x5c, 0x0, 0x212, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8bca}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48800}, 0x20000004) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000280)={0x2, 0xfe0ee4e1b4db1, 0x18}) 02:15:20 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1765.356276][T14204] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1765.373102][T14204] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:15:20 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ftruncate(r0, 0x9) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000b80)={'ip6_vti0\x00', &(0x7f0000000b00)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x6, 0x24, @dev={0xfe, 0x80, '\x00', 0xf}, @ipv4={'\x00', '\xff\xff', @local}, 0x8, 0x7800, 0x2, 0x3}}) sendmsg$inet6(r3, &(0x7f0000000d00)={&(0x7f0000000640)={0xa, 0x4e24, 0x0, @mcast2, 0x6}, 0x1c, &(0x7f0000000a80)=[{&(0x7f0000000680)="177a297b0077b5b49a78051dd8fe966a0bb167203d9fb79da72c829cebc372029d269577100e59aadca609115afe68291c5c", 0x32}, {&(0x7f00000006c0)="f1a916631a5387010ae7e9a2611704db3bfef507b1c2cf31635a27c67f236054741417e796e43bc6007c7e444dd75113ecf545890a45ce3bf3a73b2a50dd051042fa4acdcb5d64f63f6b149f68911a5355804e209adc153a01ed4716ce5205f1fc1913a84626191ac9347117329e03e8ebe6f8a9d65de99c26ace2aea3f691e8a8a80e6f162b78c2f629733c250ea7ee9bcab34c072a2120ea3dd6dbd29836915897ce7687a058eb294338f56319dcadc4e6df9c2f1c6f25cd5b5a4cece20b93ce77e98da0d56c21611fa264e145914992bcb73a07b69b2b15b67f41ca7e728f289fe711fa3e7646", 0xe8}, {&(0x7f00000007c0)="ae15a41d7dd17bda50cc9b1cd0cb2d4639f25dbbeee306", 0x17}, {&(0x7f0000000800)="dd5a354fa83bb1d4473a21d3dd3a7723809c93471356d4bbd67bea91a7f2bc0318beeebd0ac8635d47bf83d575481b0a3cf3d7f17e98880f0af7cc1472539bbe1fc92645528930c94e5a2ab49c32f6750b0081cbdee8e0087fcafccd73036c664a34613cb90987c2434196ba2e27fccce0b872a941e8e2a87dfdbea7", 0x7c}, {&(0x7f0000000880)}, {&(0x7f00000008c0)="4248d383d09f66ee643cd63782c9db316a54075a904bd1af8aafbebe8714f6ce8f63b901e0c5bd356ad6ea1310bae9193f7c766ede0153e609ac6d1b031d16cb8d2236f0b31fde425a283d9ab8a3f3fbc9843e2e4a188b2bf99882aef85fd6988f952fe3dd548a3bb1a710feb101883c6eed2cdf78566611501caa73615080adc614983b5c", 0x85}, {&(0x7f0000000980)="389fef5b3690f1c397736d7ce14b3cf651b4af3b4c1bb8ab10487a2ad1fd37d6f29f45426ac220f1bc84271679ca7d855f3a731d749da628b64af31cbe1e871b0526be4ef9a4d07ac88e6f6fe53da4364cd3cbff4c49fc0d0a68b58049f70c5b05fac27bb52e367b97bc647f89ab2397b5abd116bde107a7b8ef288635b9fa91eab3ed6fe469ddd878e983fdd4ada477315f86a303e02ed271d568a7c2216625050bfdde59632a30d07daacfd032caae3283ea925a36d303e373ee8da07c043cd1f0", 0xc2}], 0x7, &(0x7f0000000bc0)=ANY=[@ANYBLOB="480000000000000029000000390000006706010800000000ff010000000000000000000000000001fc000000000000000000000000000000000000000000000000000000000000001400000000000000290000000b00000000000008000000001400000000000000290000003e000000c106000000000000580000000000000029000000370000008407000000000000c910fc010000000000000000000000000000010100c91000000000000000000000000000000000c910fe88000000000000000000000000000100000000c6f065cbec0ba4f800000029000000370000003b01000000000000c20400000000040140000100000000001400000000000000290000003400000007000000000000002400000000000000290000003200000000000000000000000000ffffac1414bb", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0x138}, 0x40000) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/5, 0x5}, {&(0x7f0000000180)=""/142, 0x8e}, {&(0x7f0000000300)=""/212, 0xd4}, {&(0x7f0000000240)=""/22, 0x16}, {&(0x7f0000000280)=""/55, 0x37}, {&(0x7f0000000400)=""/136, 0x88}, {&(0x7f00000004c0)=""/65, 0x41}, {&(0x7f0000000540)=""/99, 0x63}], 0x8, 0x80000, 0x2) 02:15:20 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xf902], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x2c4, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1765.456745][T14204] 8021q: adding VLAN 0 to HW filter on device bond440 02:15:20 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xa}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:20 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open_tree(r0, &(0x7f0000000040)='./file0\x00', 0x8081) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000180)={0x7, 0x0, 0x1}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) fchdir(r3) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0x406f408, 0x0) [ 1765.504942][T14204] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:20 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:15:20 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xc}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:20 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xec03], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:20 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xfa01], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) [ 1765.737573][T14282] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:20 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x10}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1765.950211][T14282] 8021q: adding VLAN 0 to HW filter on device bond441 02:15:20 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xfc00], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) [ 1766.030183][T14282] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.3'. 02:15:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x2cd, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:20 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x14}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1766.072819][T14282] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:20 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xed03], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:20 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xfc02], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:21 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x9, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) [ 1766.342695][T14373] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1766.400400][T14373] 8021q: adding VLAN 0 to HW filter on device bond442 [ 1766.418485][T14373] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1766.431602][T14373] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1766.442024][T14426] bond443 (uninitialized): Released all slaves 02:15:21 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x9, 0x60050, r1, 0x2bd91000) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000040), 0x400001, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) splice(r3, &(0x7f0000000180)=0xf57, r4, &(0x7f00000001c0)=0x100000000, 0x67, 0x1) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0x12}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_TOS={0x5}, @IFLA_GENEVE_PORT={0x6}]}}}]}, 0x4c}}, 0x0) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xfffffffffffffe89, 0x1, 0x0, 0x0) splice(r3, 0x0, r0, 0x0, 0x1, 0x3) 02:15:21 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:21 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xfe00], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x2ce, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:21 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xee01], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:21 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0xa, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) [ 1766.630797][T14438] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:21 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x1c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:21 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xff02], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:21 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xf000], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 1766.786304][T14438] 8021q: adding VLAN 0 to HW filter on device bond443 [ 1766.831527][T14446] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 02:15:21 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x20000], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) [ 1766.879757][T14438] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1766.919673][T14438] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x2d0, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:21 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x24}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:22 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/module/snd_intel_dspcfg', 0x630842, 0x92) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x20, 0x1, 0x8, 0x7f, 0x0, 0x7f, 0x4000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000040), 0xa}, 0x0, 0x5, 0x1, 0x5, 0x9, 0x1, 0x1, 0x0, 0x8, 0x0, 0x6}, 0xffffffffffffffff, 0xf, r2, 0x1) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 02:15:22 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0xb, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:15:22 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xf001], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:22 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x28}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x2d6, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:22 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x40000], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) [ 1767.581726][T14546] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:22 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x1000000], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:22 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x30}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1767.676342][T14546] 8021q: adding VLAN 0 to HW filter on device bond444 [ 1767.703573][T14546] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:22 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xf100], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x2e4, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:22 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x2000000], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:22 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x10, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) [ 1767.914110][T14625] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1768.005132][T14625] 8021q: adding VLAN 0 to HW filter on device bond445 [ 1768.049992][T14625] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1768.077722][T14680] bond446 (uninitialized): Released all slaves 02:15:23 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) socket$inet(0x2, 0x4, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) bind(r2, 0x0, 0x5d0b87c98ca41d7f) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 02:15:23 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x3000000], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:23 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x43}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:23 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xf200], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x2ee, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:23 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="fc00000018000700ab092500090007000a060000000000060000369321000100ff0100000005d00000000000000398996c92773411419da79bb94b46fe000000bc00020000036c6c256f1a272f2e117c22ebc205214000000000008934d07302ad031720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x11, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) [ 1768.472814][T14696] xt_ct_set_timeout: 83 callbacks suppressed [ 1768.472835][T14696] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1768.497523][T14701] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1768.498747][T14700] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1768.525444][T14697] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1768.526365][T14696] xt_CT: You must specify a L4 protocol and not use inversions on it 02:15:23 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x44}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:23 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x48}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1768.563203][T14708] xt_CT: You must specify a L4 protocol and not use inversions on it 02:15:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x2f0, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:23 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x4000000], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:23 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xf302], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:23 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x4c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1768.644972][T14738] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1768.764837][T14697] 8021q: adding VLAN 0 to HW filter on device bond446 [ 1768.832750][T14715] __nla_validate_parse: 1 callbacks suppressed [ 1768.832766][T14715] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1768.836026][T14777] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1768.852713][T14780] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1768.873474][T14697] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1768.878144][T14783] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1768.894921][T14697] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1768.937907][T14780] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1768.993211][T14786] validate_nla: 18 callbacks suppressed [ 1768.993231][T14786] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:15:24 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x43}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:24 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x50}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:24 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x4010000], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:24 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xf400], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x2f4, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:24 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x14, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:15:24 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x6020000], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:24 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x53}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1769.420465][T14815] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1769.438682][T14815] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:15:24 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/module/snd_intel_dspcfg', 0x630842, 0x92) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x20, 0x1, 0x8, 0x7f, 0x0, 0x7f, 0x4000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000040), 0xa}, 0x0, 0x5, 0x1, 0x5, 0x9, 0x1, 0x1, 0x0, 0x8, 0x0, 0x6}, 0xffffffffffffffff, 0xf, r2, 0x1) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 02:15:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x2f6, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1769.532456][T14838] cgroup: fork rejected by pids controller in /system.slice/ssh.service 02:15:24 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x6030000], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:24 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xf501], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:24 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x54}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1769.589658][T14815] 8021q: adding VLAN 0 to HW filter on device bond447 02:15:24 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x7000000], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) [ 1769.669107][T14835] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1769.699651][T14815] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1769.723473][T14815] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:24 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x58}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1769.784813][T14902] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:15:24 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x8000000], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:24 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x5c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:24 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x28, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:15:24 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xf600], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x2fc, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1770.223622][T15191] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:25 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open_tree(r0, &(0x7f0000000040)='./file0\x00', 0x8081) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000180)={0x7, 0x0, 0x1}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bind(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) fchdir(r3) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0x406f408, 0x0) 02:15:25 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x60}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:25 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xf902], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x2fe, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x300, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:25 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x63}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:25 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xfa00], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 1770.794466][T15191] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1770.915116][T15191] 8021q: adding VLAN 0 to HW filter on device bond448 [ 1770.928752][T15194] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1770.972628][T15194] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1771.012684][T15194] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1771.056017][T15290] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1772.202432][ T272] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1772.221571][ T272] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1772.321528][ T272] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1772.339021][ T272] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1772.452155][ T272] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1772.462966][ T272] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1772.563874][ T272] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1772.575126][ T272] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1774.164661][ T272] device hsr_slave_0 left promiscuous mode [ 1774.170965][ T272] device hsr_slave_1 left promiscuous mode [ 1774.177781][ T272] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1774.185759][ T272] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1774.245089][ T272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1774.253026][ T272] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1774.263568][ T272] device bridge_slave_1 left promiscuous mode [ 1774.270999][ T272] bridge0: port 2(bridge_slave_1) entered disabled state [ 1774.279864][ T272] device bridge_slave_0 left promiscuous mode [ 1774.286038][ T272] bridge0: port 1(bridge_slave_0) entered disabled state [ 1774.300542][ T272] device veth1_macvtap left promiscuous mode [ 1774.306601][ T272] device veth0_macvtap left promiscuous mode [ 1774.320512][ T272] device veth1_vlan left promiscuous mode [ 1774.326294][ T272] device veth0_vlan left promiscuous mode [ 1775.333854][ T272] team0 (unregistering): Port device team_slave_1 removed [ 1775.346613][ T272] team0 (unregistering): Port device team_slave_0 removed [ 1775.360241][ T272] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1775.372646][ T272] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1775.408453][ T272] bond0 (unregistering): Released all slaves [ 1775.613042][T15370] chnl_net:caif_netlink_parms(): no params data found [ 1775.670938][T15370] bridge0: port 1(bridge_slave_0) entered blocking state [ 1775.678143][T15370] bridge0: port 1(bridge_slave_0) entered disabled state [ 1775.686325][T15370] device bridge_slave_0 entered promiscuous mode [ 1775.697312][T15370] bridge0: port 2(bridge_slave_1) entered blocking state [ 1775.704371][T15370] bridge0: port 2(bridge_slave_1) entered disabled state [ 1775.713218][T15370] device bridge_slave_1 entered promiscuous mode [ 1775.733741][T15370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1775.745320][T15370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1775.772074][T15370] team0: Port device team_slave_0 added [ 1775.780644][T15370] team0: Port device team_slave_1 added [ 1775.798420][T15370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1775.809341][T15370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1775.835586][T15370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1775.850317][T15370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1775.858088][T15370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1775.884997][T15370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1775.920755][T15370] device hsr_slave_0 entered promiscuous mode [ 1775.929120][T15370] device hsr_slave_1 entered promiscuous mode [ 1775.935808][T15370] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1775.944731][T15370] Cannot create hsr debugfs directory [ 1776.040290][T15370] bridge0: port 2(bridge_slave_1) entered blocking state [ 1776.047406][T15370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1776.054723][T15370] bridge0: port 1(bridge_slave_0) entered blocking state [ 1776.061832][T15370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1776.126327][T15370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1776.145275][ T6980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1776.155872][ T6980] bridge0: port 1(bridge_slave_0) entered disabled state [ 1776.164352][ T6980] bridge0: port 2(bridge_slave_1) entered disabled state [ 1776.179297][T15370] 8021q: adding VLAN 0 to HW filter on device team0 [ 1776.194629][ T6980] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1776.202962][ T6980] bridge0: port 1(bridge_slave_0) entered blocking state [ 1776.210014][ T6980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1776.237431][ T6980] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1776.245690][ T6980] bridge0: port 2(bridge_slave_1) entered blocking state [ 1776.252787][ T6980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1776.267309][ T6980] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1776.275771][ T6980] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1776.297834][ T6980] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1776.306125][ T6980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1776.314988][ T6980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1776.326644][T15370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1776.373750][T14629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1776.385963][T14629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1776.403217][T15370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1776.427804][T17680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1776.455249][T17680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1776.480153][T17680] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1776.488141][T17680] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1776.499124][T15370] device veth0_vlan entered promiscuous mode [ 1776.518600][T15370] device veth1_vlan entered promiscuous mode [ 1776.543673][T17680] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1776.554197][T17680] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1776.562988][T17680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1776.575043][T15370] device veth0_macvtap entered promiscuous mode [ 1776.588711][T15370] device veth1_macvtap entered promiscuous mode [ 1776.609139][T15370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1776.621990][T15370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1776.632494][T15370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1776.643899][T15370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1776.654052][T15370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1776.665088][T15370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1776.675531][T15370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1776.686259][T15370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1776.696483][T15370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1776.711615][T15370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1776.723463][T15370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1776.735972][T14629] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1776.746234][T14629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1776.758730][T15370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1776.770657][T15370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1776.782064][T15370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1776.793222][T15370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1776.803706][T15370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1776.815274][T15370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1776.831043][T15370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1776.844416][T15370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1776.859958][T15370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1776.871805][T15370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1776.885944][T15370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1776.899030][T17680] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1776.912397][T17680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1776.995556][T29562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1777.022653][T29562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1777.065659][ T306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1777.067685][ T6980] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1777.081792][ T306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1777.096390][T30320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 02:15:32 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x9020000], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:32 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x64}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1777.147812][T15646] xt_ct_set_timeout: 28 callbacks suppressed [ 1777.147840][T15646] xt_CT: You must specify a L4 protocol and not use inversions on it 02:15:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x500, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:32 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xff02], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:32 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x38, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:15:32 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x14}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1777.154701][T15647] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1777.220254][T15652] xt_CT: You must specify a L4 protocol and not use inversions on it 02:15:32 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x70}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1777.233510][T15655] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1777.266485][T15659] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1777.278998][T15652] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1777.286764][T15663] xt_CT: You must specify a L4 protocol and not use inversions on it 02:15:32 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xa020000], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x600, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1777.301360][T15661] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1777.371732][T15668] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1777.422181][T15672] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1777.430462][T15665] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:15:32 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x74}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:32 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x10}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1777.487047][ T6980] Bluetooth: hci1: command 0x0409 tx timeout 02:15:32 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xe010000], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:32 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x20000], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:32 executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x9, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:15:32 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x83}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:32 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xe020000], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) [ 1777.504150][T15678] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1777.748558][T15665] 8021q: adding VLAN 0 to HW filter on device bond449 [ 1777.809300][T15670] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1777.821949][T15728] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1777.834883][T15735] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1777.970374][T15735] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1778.017908][T15739] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 1778.030437][T15739] bond12: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 1778.049479][T15739] bond12: (slave ip6tnl1): Error -95 calling set_mac_address 02:15:32 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x39, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:15:32 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x84}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x700, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:32 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x22000], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:32 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0xf020000], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) [ 1778.091645][T15665] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1778.104581][T15665] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1778.112370][T15743] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:15:33 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x10000000], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) [ 1778.248792][T15815] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:33 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x88}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x900, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1778.318722][T15815] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:15:33 executing program 0: pread64(0xffffffffffffffff, &(0x7f00000003c0)=""/202, 0xca, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000680)={0x0, 0x80, 0x9, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x2181, 0x1, 0x0, 0x0, 0x5373, 0x0, 0x0, 0x0, @perf_bp={0x0}}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x10) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x1f, 0xde, 0xff, 0x0, 0x3b01, 0x1148c, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x80000000, 0x9}, 0x17811, 0x0, 0x3f, 0x5, 0x9, 0x5, 0xa5, 0x0, 0x208, 0x0, 0x7ff}, r2, 0x7, 0xffffffffffffffff, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) r4 = socket$packet(0x11, 0x0, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)) bind$packet(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0}, 0x0) 02:15:33 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x12010000], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:33 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x40000], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 1778.409073][T15815] 8021q: adding VLAN 0 to HW filter on device bond450 [ 1778.432878][T15823] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1778.461196][T15815] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1778.487209][T15815] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:33 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x13020000], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) [ 1778.504722][T15879] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:15:33 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x3c, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:15:33 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x8c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0xa00, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:33 executing program 0: ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_newrule={0x38, 0x20, 0x400, 0x70bd27, 0x25dfdbff, {0xa, 0x10, 0x0, 0xde, 0x0, 0x0, 0x0, 0x1, 0x8}, [@FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) r0 = syz_open_pts(0xffffffffffffffff, 0x410000) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000100)) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x3f7, 0x10, 0x70bd2a, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000050) write(r0, &(0x7f0000000280)="0e1b363e0c972e8209e90a38fced874921f9cd76e99c1a5602ae78a5c3d81b979b4ddb18e1f4d3aa2cb6a057ffe1aa815efb2194b261ac89600e1d0a0b9f9f2f395ddbdb4a7bfeacabcce5e69106e98e882a1cf865add5ae470fa6a34679733388d22d9bc0", 0x65) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300), 0x311000, 0x0) ioctl$TIOCSBRK(r2, 0x5427) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x161041, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0xfffffffffffffffd) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000380)=0xfffffffb) r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r4, 0x541c, &(0x7f00000003c0)) write$P9_RSTAT(r1, &(0x7f0000000400)={0x4a, 0x7d, 0x1, {0x0, 0x43, 0x742, 0x9, {0x8, 0x4, 0x5}, 0x10000, 0xfff, 0x6, 0xfffffffffffffff8, 0x9, '/dev/vcs\x00', 0x0, '', 0x2, '#]', 0x5, ',\\/:!'}}, 0x4a) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000480)=""/107, 0x6b}, {&(0x7f0000000500)=""/190, 0xbe}], 0x2, 0x5, 0x7) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000640)={0xfffb, 0x712, 0x3, 0x7ff, 0x1000, 0x5}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0xf503, 0x0) 02:15:33 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x200200], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:33 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x1b020000], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:33 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x8f}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 02:15:33 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x1e020000], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 02:15:33 executing program 0: perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c2, 0x0, 0xc29, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') symlink(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='./file0\x00') bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00'}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 02:15:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x1d00, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1778.889026][T15941] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 02:15:33 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x1000000], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 1778.950143][T15949] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:15:33 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x90}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1779.022172][T15949] 8021q: adding VLAN 0 to HW filter on device bond451 [ 1779.031178][T15941] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1779.075946][T15941] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1779.301915][T15941] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1779.340810][T15996] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:15:34 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x19, 0x5a, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x400}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) getitimer(0x1, &(0x7f0000000700)={{0x0}, {0x0}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)={0x8, 0x7ff, 0x6, 0x1000, 0x20, r0, 0x7, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r3, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x280c4851) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000806007000ab53f3053124847d1b17dba9d386557f0000c98c502a000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20004080) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="88da8a01c54cf28410f936916324c315d62f934ef48187c9a7b089b9f20f2cb97571aeba9bf70539a692fb5a486807a0def29c4efe441412e2e0b6b5caf86e1cd47c2f934ec0dfc26b5799008d43300800c9916d0b0d93f6624f33415b91d03e609956fe305d4d75a705fcd2dccf8799285e9e788820ba244f22526c2dcca850ac060000006705c7abd7d9381dd12a", @ANYRES32=r2, @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000140)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000002010300000000000000000300000908000940000000081c000a8008000140000000011000028000000000050001002f000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x400e0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000b6eab50a021000000401", @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006004000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x3c2, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x78, 0x10, 0xffffff1f, 0xf02, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x301, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 02:15:34 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x2000000], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:34 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x7, &(0x7f00000000c0)=""/70) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000000)="b9620a0000b851b30000ba000000000f30650f01c244837d1908df595d470fc73e8f8950014d00470f0766baf80cb8f8031087ef66bafc0cb87c64ed59efc42179f7f044df94a92296b3d6", 0x4b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="0f01c466b9800000c00f326635001000000f306536a7ea0e009100660f3880ae003066b9800000c00f326635010000000f30b807000f00d867260f9fc7360fae250f408c0b00", 0x46}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe3000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000200)="0f01c20f21460f01cb0f3564f30fc7b0f8cd0fc7b9f4e4b884008ed0ba4000ec66f30f38f6ee0f20d86635200000000f22d8", 0x32}], 0x1, 0x49, &(0x7f00000002c0)=[@flags], 0x1) fork() ioctl$KVM_RUN(r3, 0xae80, 0x0) 02:15:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x3300, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 02:15:34 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x3000000], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 02:15:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x4, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1779.638712][ T6980] Bluetooth: hci1: command 0x041b tx timeout 02:15:34 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0xf0, 0xf0, 0xf0, 0x0, 0x0, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, 0x0, {[{{@ipv6={@remote, @dev, [0x4000000], [], 'bond0\x00', 'vxcan1\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@mh={{0x28}, {"f1ad"}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @loopback, [], [], 'geneve1\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 1779.984739][T16177] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1780.007874][T16184] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1780.138801][T16184] 8021q: adding VLAN 0 to HW filter on device bond452 [ 1780.151959][T16194] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1780.221856][T16184] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1780.246065][T16184] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1780.273744][T16274] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1781.314949][ T306] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1781.439450][ T306] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1781.548840][ T306] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1781.696012][ T306] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1783.998999][ T306] device hsr_slave_0 left promiscuous mode [ 1784.005343][ T306] device hsr_slave_1 left promiscuous mode [ 1784.016532][ T306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1784.034260][ T306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1784.043153][ T306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1784.050714][ T306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1784.059418][ T306] device bridge_slave_1 left promiscuous mode [ 1784.065657][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 1784.073798][ T306] device bridge_slave_0 left promiscuous mode [ 1784.080423][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 1784.091136][ T306] device hsr_slave_0 left promiscuous mode [ 1784.098103][ T306] device hsr_slave_1 left promiscuous mode [ 1784.104409][ T306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1784.112172][ T306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1784.120446][ T306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1784.128881][ T306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1784.137258][ T306] device bridge_slave_1 left promiscuous mode [ 1784.143403][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 1784.159636][ T306] device bridge_slave_0 left promiscuous mode [ 1784.165893][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 1784.217003][ T306] device veth1_macvtap left promiscuous mode [ 1784.223034][ T306] device veth0_macvtap left promiscuous mode [ 1784.229149][ T306] device veth1_vlan left promiscuous mode [ 1784.234893][ T306] device veth0_vlan left promiscuous mode [ 1784.241310][ T306] device veth1_macvtap left promiscuous mode [ 1784.247400][ T306] device veth0_macvtap left promiscuous mode [ 1784.253714][ T306] device veth1_vlan left promiscuous mode [ 1784.260739][ T306] device veth0_vlan left promiscuous mode [ 1785.886916][T17716] Bluetooth: hci1: command 0x0409 tx timeout [ 1786.847020][T14629] Bluetooth: hci5: command 0x0409 tx timeout [ 1787.967642][T14629] Bluetooth: hci1: command 0x041b tx timeout [ 1788.926982][T17716] Bluetooth: hci5: command 0x041b tx timeout [ 1790.062764][T17716] Bluetooth: hci1: command 0x040f tx timeout [ 1791.006927][T17716] Bluetooth: hci5: command 0x040f tx timeout [ 1791.247797][ T3263] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.254138][ T3263] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.126970][T14629] Bluetooth: hci1: command 0x0419 tx timeout [ 1793.103517][T14629] Bluetooth: hci5: command 0x0419 tx timeout [ 1793.638998][ T306] bond454 (unregistering): Released all slaves [ 1793.649420][ T306] bond453 (unregistering): Released all slaves [ 1793.661656][ T306] bond452 (unregistering): Released all slaves [ 1793.674794][ T306] bond451 (unregistering): Released all slaves [ 1793.684116][ T306] bond450 (unregistering): Released all slaves [ 1793.694426][ T306] bond449 (unregistering): Released all slaves [ 1793.704151][ T306] bond448 (unregistering): Released all slaves [ 1793.714470][ T306] bond447 (unregistering): Released all slaves [ 1793.724885][ T306] bond446 (unregistering): Released all slaves [ 1793.735567][ T306] bond445 (unregistering): Released all slaves [ 1793.744917][ T306] bond444 (unregistering): Released all slaves [ 1793.754907][ T306] bond443 (unregistering): Released all slaves [ 1793.763899][ T306] bond442 (unregistering): Released all slaves [ 1793.773757][ T306] bond441 (unregistering): Released all slaves [ 1793.788853][ T306] bond440 (unregistering): Released all slaves [ 1793.798722][ T306] bond439 (unregistering): Released all slaves [ 1793.808514][ T306] bond438 (unregistering): Released all slaves [ 1793.817847][ T306] bond437 (unregistering): Released all slaves [ 1793.826710][ T306] bond436 (unregistering): Released all slaves [ 1793.836608][ T306] bond435 (unregistering): Released all slaves [ 1793.846349][ T306] bond434 (unregistering): Released all slaves [ 1793.855515][ T306] bond433 (unregistering): Released all slaves [ 1793.864675][ T306] bond432 (unregistering): Released all slaves [ 1793.874682][ T306] bond431 (unregistering): Released all slaves [ 1793.884114][ T306] bond430 (unregistering): Released all slaves [ 1793.894528][ T306] bond429 (unregistering): Released all slaves [ 1793.911379][ T306] bond428 (unregistering): Released all slaves [ 1793.921316][ T306] bond427 (unregistering): Released all slaves [ 1793.930768][ T306] bond426 (unregistering): Released all slaves [ 1793.941092][ T306] bond425 (unregistering): Released all slaves [ 1793.951163][ T306] bond424 (unregistering): Released all slaves [ 1793.960217][ T306] bond423 (unregistering): Released all slaves [ 1793.970952][ T306] bond422 (unregistering): Released all slaves [ 1793.981220][ T306] bond421 (unregistering): Released all slaves [ 1793.991163][ T306] bond420 (unregistering): Released all slaves [ 1794.000711][ T306] bond419 (unregistering): Released all slaves [ 1794.015806][ T306] bond418 (unregistering): Released all slaves [ 1794.027368][ T306] bond417 (unregistering): Released all slaves [ 1794.036240][ T306] bond416 (unregistering): Released all slaves [ 1794.046412][ T306] bond415 (unregistering): Released all slaves [ 1794.055747][ T306] bond414 (unregistering): Released all slaves [ 1794.065591][ T306] bond413 (unregistering): Released all slaves [ 1794.074936][ T306] bond412 (unregistering): Released all slaves [ 1794.084877][ T306] bond411 (unregistering): Released all slaves [ 1794.094549][ T306] bond410 (unregistering): Released all slaves [ 1794.104550][ T306] bond409 (unregistering): Released all slaves [ 1794.114987][ T306] bond408 (unregistering): Released all slaves [ 1794.129775][ T306] bond407 (unregistering): Released all slaves [ 1794.140190][ T306] bond406 (unregistering): Released all slaves [ 1794.149483][ T306] bond405 (unregistering): Released all slaves [ 1794.160180][ T306] bond404 (unregistering): Released all slaves [ 1794.169722][ T306] bond403 (unregistering): Released all slaves [ 1794.180153][ T306] bond402 (unregistering): Released all slaves [ 1794.189700][ T306] bond401 (unregistering): Released all slaves [ 1794.200556][ T306] bond400 (unregistering): Released all slaves [ 1794.210496][ T306] bond399 (unregistering): Released all slaves [ 1794.220788][ T306] bond398 (unregistering): Released all slaves [ 1794.229793][ T306] bond397 (unregistering): Released all slaves [ 1794.242482][ T306] bond396 (unregistering): Released all slaves [ 1794.252485][ T306] bond395 (unregistering): Released all slaves [ 1794.264774][ T306] bond394 (unregistering): Released all slaves [ 1794.275142][ T306] bond393 (unregistering): Released all slaves [ 1794.287132][ T306] bond392 (unregistering): Released all slaves [ 1794.296173][ T306] bond391 (unregistering): Released all slaves [ 1794.305893][ T306] bond390 (unregistering): Released all slaves [ 1794.316060][ T306] bond389 (unregistering): Released all slaves [ 1794.325571][ T306] bond388 (unregistering): Released all slaves [ 1794.335306][ T306] bond387 (unregistering): Released all slaves [ 1794.344595][ T306] bond386 (unregistering): Released all slaves [ 1794.358739][ T306] bond385 (unregistering): Released all slaves [ 1794.370390][ T306] bond384 (unregistering): Released all slaves [ 1794.380870][ T306] bond383 (unregistering): Released all slaves [ 1794.390657][ T306] bond382 (unregistering): Released all slaves [ 1794.400835][ T306] bond381 (unregistering): Released all slaves [ 1794.410240][ T306] bond380 (unregistering): Released all slaves [ 1794.421328][ T306] bond379 (unregistering): Released all slaves [ 1794.431100][ T306] bond378 (unregistering): Released all slaves [ 1794.441832][ T306] bond377 (unregistering): Released all slaves [ 1794.451311][ T306] bond376 (unregistering): Released all slaves [ 1794.464777][ T306] bond375 (unregistering): Released all slaves [ 1794.474073][ T306] bond374 (unregistering): Released all slaves [ 1794.488074][ T306] bond373 (unregistering): Released all slaves [ 1794.499665][ T306] bond372 (unregistering): Released all slaves [ 1794.509485][ T306] bond371 (unregistering): Released all slaves [ 1794.520181][ T306] bond370 (unregistering): Released all slaves [ 1794.530581][ T306] bond369 (unregistering): Released all slaves [ 1794.542127][ T306] bond368 (unregistering): Released all slaves [ 1794.551284][ T306] bond367 (unregistering): Released all slaves [ 1794.561532][ T306] bond366 (unregistering): Released all slaves [ 1794.575144][ T306] bond365 (unregistering): Released all slaves [ 1794.584689][ T306] bond364 (unregistering): Released all slaves [ 1794.594588][ T306] bond363 (unregistering): Released all slaves [ 1794.604495][ T306] bond362 (unregistering): Released all slaves [ 1794.614798][ T306] bond361 (unregistering): Released all slaves [ 1794.624289][ T306] bond360 (unregistering): Released all slaves [ 1794.634929][ T306] bond359 (unregistering): Released all slaves [ 1794.645236][ T306] bond358 (unregistering): Released all slaves [ 1794.655560][ T306] bond357 (unregistering): Released all slaves [ 1794.666199][ T306] bond356 (unregistering): Released all slaves [ 1794.676078][ T306] bond355 (unregistering): Released all slaves [ 1794.687616][ T306] bond354 (unregistering): Released all slaves [ 1794.699238][ T306] bond353 (unregistering): Released all slaves [ 1794.708907][ T306] bond352 (unregistering): Released all slaves [ 1794.719979][ T306] bond351 (unregistering): Released all slaves [ 1794.731507][ T306] bond350 (unregistering): Released all slaves [ 1794.741442][ T306] bond349 (unregistering): Released all slaves [ 1794.750748][ T306] bond348 (unregistering): Released all slaves [ 1794.761981][ T306] bond347 (unregistering): Released all slaves [ 1794.771832][ T306] bond346 (unregistering): Released all slaves [ 1794.781458][ T306] bond345 (unregistering): Released all slaves [ 1794.794415][ T306] bond344 (unregistering): Released all slaves [ 1794.804466][ T306] bond343 (unregistering): Released all slaves [ 1794.818704][ T306] bond342 (unregistering): Released all slaves [ 1794.828776][ T306] bond341 (unregistering): Released all slaves [ 1794.840447][ T306] bond340 (unregistering): Released all slaves [ 1794.850054][ T306] bond339 (unregistering): Released all slaves [ 1794.860700][ T306] bond338 (unregistering): Released all slaves [ 1794.870529][ T306] bond337 (unregistering): Released all slaves [ 1794.880717][ T306] bond336 (unregistering): Released all slaves [ 1794.890643][ T306] bond335 (unregistering): Released all slaves [ 1794.904609][ T306] bond334 (unregistering): Released all slaves [ 1794.914217][ T306] bond333 (unregistering): Released all slaves [ 1794.925456][ T306] bond332 (unregistering): Released all slaves [ 1794.935364][ T306] bond331 (unregistering): Released all slaves [ 1794.944849][ T306] bond330 (unregistering): Released all slaves [ 1794.955104][ T306] bond329 (unregistering): Released all slaves [ 1794.967598][ T306] bond328 (unregistering): Released all slaves [ 1794.978560][ T306] bond327 (unregistering): Released all slaves [ 1794.988078][ T306] bond326 (unregistering): Released all slaves [ 1794.997787][ T306] bond325 (unregistering): Released all slaves [ 1795.007676][ T306] bond324 (unregistering): Released all slaves [ 1795.017613][ T306] bond323 (unregistering): Released all slaves [ 1795.026639][ T306] bond322 (unregistering): Released all slaves [ 1795.039683][ T306] bond321 (unregistering): Released all slaves [ 1795.049826][ T306] bond320 (unregistering): Released all slaves [ 1795.059197][ T306] bond319 (unregistering): Released all slaves [ 1795.070118][ T306] bond318 (unregistering): Released all slaves [ 1795.079915][ T306] bond317 (unregistering): Released all slaves [ 1795.089763][ T306] bond316 (unregistering): Released all slaves [ 1795.101151][ T306] bond315 (unregistering): Released all slaves [ 1795.110539][ T306] bond314 (unregistering): Released all slaves [ 1795.124434][ T306] bond313 (unregistering): Released all slaves [ 1795.133709][ T306] bond312 (unregistering): Released all slaves [ 1795.143462][ T306] bond311 (unregistering): Released all slaves [ 1795.153280][ T306] bond310 (unregistering): Released all slaves [ 1795.163364][ T306] bond309 (unregistering): Released all slaves [ 1795.173901][ T306] bond308 (unregistering): Released all slaves [ 1795.184284][ T306] bond307 (unregistering): Released all slaves [ 1795.194688][ T306] bond306 (unregistering): Released all slaves [ 1795.206049][ T306] bond305 (unregistering): Released all slaves [ 1795.215848][ T306] bond304 (unregistering): Released all slaves [ 1795.225876][ T306] bond303 (unregistering): Released all slaves [ 1795.241745][ T306] bond302 (unregistering): Released all slaves [ 1795.250881][ T306] bond301 (unregistering): Released all slaves [ 1795.261787][ T306] bond300 (unregistering): Released all slaves [ 1795.271530][ T306] bond299 (unregistering): Released all slaves [ 1795.281197][ T306] bond298 (unregistering): Released all slaves [ 1795.291646][ T306] bond297 (unregistering): Released all slaves [ 1795.302059][ T306] bond296 (unregistering): Released all slaves [ 1795.312451][ T306] bond295 (unregistering): Released all slaves [ 1795.322186][ T306] bond294 (unregistering): Released all slaves [ 1795.332532][ T306] bond293 (unregistering): Released all slaves [ 1795.343531][ T306] bond292 (unregistering): Released all slaves [ 1795.355899][ T306] bond291 (unregistering): Released all slaves [ 1795.366367][ T306] bond290 (unregistering): Released all slaves [ 1795.377742][ T306] bond289 (unregistering): Released all slaves [ 1795.386591][ T306] bond288 (unregistering): Released all slaves [ 1795.396871][ T306] bond287 (unregistering): Released all slaves [ 1795.405679][ T306] bond286 (unregistering): Released all slaves [ 1795.415496][ T306] bond285 (unregistering): Released all slaves [ 1795.425016][ T306] bond284 (unregistering): Released all slaves [ 1795.434971][ T306] bond283 (unregistering): Released all slaves [ 1795.444895][ T306] bond282 (unregistering): Released all slaves [ 1795.455321][ T306] bond281 (unregistering): Released all slaves [ 1795.470392][ T306] bond280 (unregistering): Released all slaves [ 1795.481009][ T306] bond279 (unregistering): Released all slaves [ 1795.490506][ T306] bond278 (unregistering): Released all slaves [ 1795.500656][ T306] bond277 (unregistering): Released all slaves [ 1795.511744][ T306] bond276 (unregistering): Released all slaves [ 1795.521613][ T306] bond275 (unregistering): Released all slaves [ 1795.531067][ T306] bond274 (unregistering): Released all slaves [ 1795.541108][ T306] bond273 (unregistering): Released all slaves [ 1795.550912][ T306] bond272 (unregistering): Released all slaves [ 1795.560638][ T306] bond271 (unregistering): Released all slaves [ 1795.572034][ T306] bond270 (unregistering): Released all slaves [ 1795.581386][ T306] bond269 (unregistering): Released all slaves [ 1795.592041][ T306] bond268 (unregistering): Released all slaves [ 1795.601727][ T306] bond267 (unregistering): Released all slaves [ 1795.611675][ T306] bond266 (unregistering): Released all slaves [ 1795.622448][ T306] bond265 (unregistering): Released all slaves [ 1795.632386][ T306] bond264 (unregistering): Released all slaves [ 1795.642087][ T306] bond263 (unregistering): Released all slaves [ 1795.651289][ T306] bond262 (unregistering): Released all slaves [ 1795.661455][ T306] bond261 (unregistering): Released all slaves [ 1795.670950][ T306] bond260 (unregistering): Released all slaves [ 1795.680732][ T306] bond259 (unregistering): Released all slaves [ 1795.694190][ T306] bond258 (unregistering): Released all slaves [ 1795.709036][ T306] bond257 (unregistering): Released all slaves [ 1795.719848][ T306] bond256 (unregistering): Released all slaves [ 1795.730093][ T306] bond255 (unregistering): Released all slaves [ 1795.740856][ T306] bond254 (unregistering): Released all slaves [ 1795.750197][ T306] bond253 (unregistering): Released all slaves [ 1795.761352][ T306] bond252 (unregistering): Released all slaves [ 1795.770521][ T306] bond251 (unregistering): Released all slaves [ 1795.780899][ T306] bond250 (unregistering): Released all slaves [ 1795.790103][ T306] bond249 (unregistering): Released all slaves [ 1795.802903][ T306] bond248 (unregistering): Released all slaves [ 1795.817149][ T306] bond247 (unregistering): Released all slaves [ 1795.826761][ T306] bond246 (unregistering): Released all slaves [ 1795.836665][ T306] bond245 (unregistering): Released all slaves [ 1795.848523][ T306] bond244 (unregistering): Released all slaves [ 1795.858407][ T306] bond243 (unregistering): Released all slaves [ 1795.868239][ T306] bond242 (unregistering): Released all slaves [ 1795.878189][ T306] bond241 (unregistering): Released all slaves [ 1795.888040][ T306] bond240 (unregistering): Released all slaves [ 1795.898523][ T306] bond239 (unregistering): Released all slaves [ 1795.910652][ T306] bond238 (unregistering): Released all slaves [ 1795.922506][ T306] bond237 (unregistering): Released all slaves [ 1795.932170][ T306] bond236 (unregistering): Released all slaves [ 1795.942581][ T306] bond235 (unregistering): Released all slaves [ 1795.953038][ T306] bond234 (unregistering): Released all slaves [ 1795.963479][ T306] bond233 (unregistering): Released all slaves [ 1795.973938][ T306] bond232 (unregistering): Released all slaves [ 1795.984134][ T306] bond231 (unregistering): Released all slaves [ 1795.993953][ T306] bond230 (unregistering): Released all slaves [ 1796.004906][ T306] bond229 (unregistering): Released all slaves [ 1796.014421][ T306] bond228 (unregistering): Released all slaves [ 1796.025644][ T306] bond227 (unregistering): Released all slaves [ 1796.039925][ T306] bond226 (unregistering): Released all slaves [ 1796.049797][ T306] bond225 (unregistering): Released all slaves [ 1796.060392][ T306] bond224 (unregistering): Released all slaves [ 1796.069804][ T306] bond223 (unregistering): Released all slaves [ 1796.081034][ T306] bond222 (unregistering): Released all slaves [ 1796.090437][ T306] bond221 (unregistering): Released all slaves [ 1796.100861][ T306] bond220 (unregistering): Released all slaves [ 1796.110183][ T306] bond219 (unregistering): Released all slaves [ 1796.121287][ T306] bond218 (unregistering): Released all slaves [ 1796.130500][ T306] bond217 (unregistering): Released all slaves [ 1796.145381][ T306] bond216 (unregistering): Released all slaves [ 1796.155349][ T306] bond215 (unregistering): Released all slaves [ 1796.164787][ T306] bond214 (unregistering): Released all slaves [ 1796.174341][ T306] bond213 (unregistering): Released all slaves [ 1796.183704][ T306] bond212 (unregistering): Released all slaves [ 1796.193168][ T306] bond211 (unregistering): Released all slaves [ 1796.203373][ T306] bond210 (unregistering): Released all slaves [ 1796.213701][ T306] bond209 (unregistering): Released all slaves [ 1796.223628][ T306] bond208 (unregistering): Released all slaves [ 1796.233403][ T306] bond207 (unregistering): Released all slaves [ 1796.242986][ T306] bond206 (unregistering): Released all slaves [ 1796.258138][ T306] bond205 (unregistering): Released all slaves [ 1796.269066][ T306] bond204 (unregistering): Released all slaves [ 1796.278613][ T306] bond203 (unregistering): Released all slaves [ 1796.289118][ T306] bond202 (unregistering): Released all slaves [ 1796.298920][ T306] bond201 (unregistering): Released all slaves [ 1796.309547][ T306] bond200 (unregistering): Released all slaves [ 1796.319352][ T306] bond199 (unregistering): Released all slaves [ 1796.330265][ T306] bond198 (unregistering): Released all slaves [ 1796.340292][ T306] bond197 (unregistering): Released all slaves [ 1796.350765][ T306] bond196 (unregistering): Released all slaves [ 1796.364035][ T306] bond195 (unregistering): Released all slaves [ 1796.376395][ T306] bond194 (unregistering): Released all slaves [ 1796.387329][ T306] bond193 (unregistering): Released all slaves [ 1796.396339][ T306] bond192 (unregistering): Released all slaves [ 1796.405667][ T306] bond191 (unregistering): Released all slaves [ 1796.415283][ T306] bond190 (unregistering): Released all slaves [ 1796.425626][ T306] bond189 (unregistering): Released all slaves [ 1796.435539][ T306] bond188 (unregistering): Released all slaves [ 1796.445382][ T306] bond187 (unregistering): Released all slaves [ 1796.456128][ T306] bond186 (unregistering): Released all slaves [ 1796.466069][ T306] bond185 (unregistering): Released all slaves [ 1796.480955][ T306] bond184 (unregistering): Released all slaves [ 1796.490628][ T306] bond183 (unregistering): Released all slaves [ 1796.500399][ T306] bond182 (unregistering): Released all slaves [ 1796.510344][ T306] bond181 (unregistering): Released all slaves [ 1796.520777][ T306] bond180 (unregistering): Released all slaves [ 1796.531334][ T306] bond179 (unregistering): Released all slaves [ 1796.541015][ T306] bond178 (unregistering): Released all slaves [ 1796.550960][ T306] bond177 (unregistering): Released all slaves [ 1796.561401][ T306] bond176 (unregistering): Released all slaves [ 1796.571173][ T306] bond175 (unregistering): Released all slaves [ 1796.588618][ T306] bond174 (unregistering): Released all slaves [ 1796.597957][ T306] bond173 (unregistering): Released all slaves [ 1796.607642][ T306] bond172 (unregistering): Released all slaves [ 1796.616608][ T306] bond171 (unregistering): Released all slaves [ 1796.626267][ T306] bond170 (unregistering): Released all slaves [ 1796.636285][ T306] bond169 (unregistering): Released all slaves [ 1796.647715][ T306] bond168 (unregistering): Released all slaves [ 1796.656595][ T306] bond167 (unregistering): Released all slaves [ 1796.666520][ T306] bond166 (unregistering): Released all slaves [ 1796.676701][ T306] bond165 (unregistering): Released all slaves [ 1796.693536][ T306] bond164 (unregistering): Released all slaves [ 1796.704124][ T306] bond163 (unregistering): Released all slaves [ 1796.713012][ T306] bond162 (unregistering): Released all slaves [ 1796.723279][ T306] bond161 (unregistering): Released all slaves [ 1796.733019][ T306] bond160 (unregistering): Released all slaves [ 1796.743617][ T306] bond159 (unregistering): Released all slaves [ 1796.753638][ T306] bond158 (unregistering): Released all slaves [ 1796.763491][ T306] bond157 (unregistering): Released all slaves [ 1796.774576][ T306] bond156 (unregistering): Released all slaves [ 1796.784961][ T306] bond155 (unregistering): Released all slaves [ 1796.794936][ T306] bond154 (unregistering): Released all slaves [ 1796.812177][ T306] bond153 (unregistering): Released all slaves [ 1796.824111][ T306] bond152 (unregistering): Released all slaves [ 1796.834001][ T306] bond151 (unregistering): Released all slaves [ 1796.844518][ T306] bond150 (unregistering): Released all slaves [ 1796.854304][ T306] bond149 (unregistering): Released all slaves [ 1796.863525][ T306] bond148 (unregistering): Released all slaves [ 1796.872889][ T306] bond147 (unregistering): Released all slaves [ 1796.882911][ T306] bond146 (unregistering): Released all slaves [ 1796.893241][ T306] bond145 (unregistering): Released all slaves [ 1796.903082][ T306] bond144 (unregistering): Released all slaves [ 1796.920117][ T306] bond143 (unregistering): Released all slaves [ 1796.930995][ T306] bond142 (unregistering): Released all slaves [ 1796.940221][ T306] bond141 (unregistering): Released all slaves [ 1796.951089][ T306] bond140 (unregistering): Released all slaves [ 1796.960212][ T306] bond139 (unregistering): Released all slaves [ 1796.970671][ T306] bond138 (unregistering): Released all slaves [ 1796.980725][ T306] bond137 (unregistering): Released all slaves [ 1796.991116][ T306] bond136 (unregistering): Released all slaves [ 1797.000826][ T306] bond135 (unregistering): Released all slaves [ 1797.012122][ T306] bond134 (unregistering): Released all slaves [ 1797.024491][ T306] bond133 (unregistering): Released all slaves [ 1797.037174][ T306] bond132 (unregistering): Released all slaves [ 1797.046014][ T306] bond131 (unregistering): Released all slaves [ 1797.056356][ T306] bond130 (unregistering): Released all slaves [ 1797.065815][ T306] bond129 (unregistering): Released all slaves [ 1797.076356][ T306] bond128 (unregistering): Released all slaves [ 1797.086078][ T306] bond127 (unregistering): Released all slaves [ 1797.096764][ T306] bond126 (unregistering): Released all slaves [ 1797.106313][ T306] bond125 (unregistering): Released all slaves [ 1797.117061][ T306] bond124 (unregistering): Released all slaves [ 1797.126282][ T306] bond123 (unregistering): Released all slaves [ 1797.139155][ T306] bond122 (unregistering): Released all slaves [ 1797.149455][ T306] bond121 (unregistering): Released all slaves [ 1797.159643][ T306] bond120 (unregistering): Released all slaves [ 1797.170593][ T306] bond119 (unregistering): Released all slaves [ 1797.180348][ T306] bond118 (unregistering): Released all slaves [ 1797.190570][ T306] bond117 (unregistering): Released all slaves [ 1797.199884][ T306] bond116 (unregistering): Released all slaves [ 1797.211352][ T306] bond115 (unregistering): Released all slaves [ 1797.220518][ T306] bond114 (unregistering): Released all slaves [ 1797.230824][ T306] bond113 (unregistering): Released all slaves [ 1797.242639][ T306] bond112 (unregistering): Released all slaves [ 1797.255442][ T306] bond111 (unregistering): Released all slaves [ 1797.264772][ T306] bond110 (unregistering): Released all slaves [ 1797.274746][ T306] bond109 (unregistering): Released all slaves [ 1797.283993][ T306] bond108 (unregistering): Released all slaves [ 1797.293967][ T306] bond107 (unregistering): Released all slaves [ 1797.303343][ T306] bond106 (unregistering): Released all slaves [ 1797.312526][ T306] bond105 (unregistering): Released all slaves [ 1797.323153][ T306] bond104 (unregistering): Released all slaves [ 1797.334180][ T306] bond103 (unregistering): Released all slaves [ 1797.343582][ T306] bond102 (unregistering): Released all slaves [ 1797.361434][ T306] bond101 (unregistering): Released all slaves [ 1797.370611][ T306] bond100 (unregistering): Released all slaves [ 1797.380302][ T306] bond99 (unregistering): Released all slaves [ 1797.390329][ T306] bond98 (unregistering): Released all slaves [ 1797.400092][ T306] bond97 (unregistering): Released all slaves [ 1797.411202][ T306] bond96 (unregistering): Released all slaves [ 1797.420332][ T306] bond95 (unregistering): Released all slaves [ 1797.430731][ T306] bond94 (unregistering): Released all slaves [ 1797.440153][ T306] bond93 (unregistering): Released all slaves [ 1797.450206][ T306] bond92 (unregistering): Released all slaves [ 1797.464534][ T306] bond91 (unregistering): Released all slaves [ 1797.473872][ T306] bond90 (unregistering): Released all slaves [ 1797.483465][ T306] bond89 (unregistering): Released all slaves [ 1797.493482][ T306] bond88 (unregistering): Released all slaves [ 1797.504589][ T306] bond87 (unregistering): Released all slaves [ 1797.515235][ T306] bond86 (unregistering): Released all slaves [ 1797.525420][ T306] bond85 (unregistering): Released all slaves [ 1797.535790][ T306] bond84 (unregistering): Released all slaves [ 1797.545677][ T306] bond83 (unregistering): Released all slaves [ 1797.555602][ T306] bond82 (unregistering): Released all slaves [ 1797.565046][ T306] bond81 (unregistering): Released all slaves [ 1797.576714][ T306] bond80 (unregistering): Released all slaves [ 1797.588174][ T306] bond79 (unregistering): Released all slaves [ 1797.597799][ T306] bond78 (unregistering): Released all slaves [ 1797.606473][ T306] bond77 (unregistering): Released all slaves [ 1797.615548][ T306] bond76 (unregistering): Released all slaves [ 1797.625674][ T306] bond75 (unregistering): Released all slaves [ 1797.636654][ T306] bond74 (unregistering): Released all slaves [ 1797.645771][ T306] bond73 (unregistering): Released all slaves [ 1797.657684][ T306] bond72 (unregistering): Released all slaves [ 1797.666776][ T306] bond71 (unregistering): Released all slaves [ 1797.676307][ T306] bond70 (unregistering): Released all slaves [ 1797.685406][ T306] bond69 (unregistering): Released all slaves [ 1797.696222][ T306] bond68 (unregistering): Released all slaves [ 1797.705494][ T306] bond67 (unregistering): Released all slaves [ 1797.715720][ T306] bond66 (unregistering): Released all slaves [ 1797.725583][ T306] bond65 (unregistering): Released all slaves [ 1797.735868][ T306] bond64 (unregistering): Released all slaves [ 1797.745054][ T306] bond63 (unregistering): Released all slaves [ 1797.755174][ T306] bond62 (unregistering): Released all slaves [ 1797.765704][ T306] bond61 (unregistering): Released all slaves [ 1797.775493][ T306] bond60 (unregistering): Released all slaves [ 1797.784396][ T306] bond59 (unregistering): Released all slaves [ 1797.794507][ T306] bond58 (unregistering): Released all slaves [ 1797.813332][ T306] bond57 (unregistering): Released all slaves [ 1797.823047][ T306] bond56 (unregistering): Released all slaves [ 1797.833364][ T306] bond55 (unregistering): Released all slaves [ 1797.843510][ T306] bond54 (unregistering): Released all slaves [ 1797.852763][ T306] bond53 (unregistering): Released all slaves [ 1797.862193][ T306] bond52 (unregistering): Released all slaves [ 1797.872945][ T306] bond51 (unregistering): Released all slaves [ 1797.882589][ T306] bond50 (unregistering): Released all slaves [ 1797.892314][ T306] bond49 (unregistering): Released all slaves [ 1797.902789][ T306] bond48 (unregistering): Released all slaves [ 1797.914758][ T306] bond47 (unregistering): Released all slaves [ 1797.924191][ T306] bond46 (unregistering): Released all slaves [ 1797.933753][ T306] bond45 (unregistering): Released all slaves [ 1797.943691][ T306] bond44 (unregistering): Released all slaves [ 1797.954022][ T306] bond43 (unregistering): Released all slaves [ 1797.963658][ T306] bond42 (unregistering): Released all slaves [ 1797.974044][ T306] bond41 (unregistering): Released all slaves [ 1797.983861][ T306] bond40 (unregistering): Released all slaves [ 1797.993357][ T306] bond39 (unregistering): Released all slaves [ 1798.004093][ T306] bond38 (unregistering): Released all slaves [ 1798.013407][ T306] bond37 (unregistering): Released all slaves [ 1798.031888][ T306] bond36 (unregistering): Released all slaves [ 1798.041528][ T306] bond35 (unregistering): Released all slaves [ 1798.051653][ T306] bond34 (unregistering): Released all slaves [ 1798.061411][ T306] bond33 (unregistering): Released all slaves [ 1798.070840][ T306] bond32 (unregistering): Released all slaves [ 1798.081069][ T306] bond31 (unregistering): Released all slaves [ 1798.090876][ T306] bond30 (unregistering): Released all slaves [ 1798.101201][ T306] bond29 (unregistering): Released all slaves [ 1798.111744][ T306] bond28 (unregistering): Released all slaves [ 1798.121274][ T306] bond27 (unregistering): Released all slaves [ 1798.130597][ T306] bond26 (unregistering): Released all slaves [ 1798.146556][ T306] bond25 (unregistering): Released all slaves [ 1798.155629][ T306] bond24 (unregistering): Released all slaves [ 1798.165604][ T306] bond23 (unregistering): Released all slaves [ 1798.175769][ T306] bond22 (unregistering): Released all slaves [ 1798.185837][ T306] bond21 (unregistering): Released all slaves [ 1798.195254][ T306] bond20 (unregistering): Released all slaves [ 1798.204240][ T306] bond19 (unregistering): Released all slaves [ 1798.214409][ T306] bond18 (unregistering): Released all slaves [ 1798.224439][ T306] bond17 (unregistering): Released all slaves [ 1798.233709][ T306] bond16 (unregistering): Released all slaves [ 1798.244114][ T306] bond15 (unregistering): Released all slaves [ 1798.260514][ T306] bond14 (unregistering): Released all slaves [ 1798.269995][ T306] bond13 (unregistering): Released all slaves [ 1798.281543][ T306] bond12 (unregistering): Released all slaves [ 1798.291022][ T306] bond11 (unregistering): Released all slaves [ 1798.301598][ T306] bond10 (unregistering): Released all slaves [ 1798.310895][ T306] bond9 (unregistering): Released all slaves [ 1798.320624][ T306] bond8 (unregistering): Released all slaves [ 1798.330441][ T306] bond7 (unregistering): Released all slaves [ 1798.340524][ T306] bond6 (unregistering): Released all slaves [ 1798.350569][ T306] bond5 (unregistering): Released all slaves [ 1798.369067][ T306] bond4 (unregistering): Released all slaves [ 1798.378611][ T306] bond3 (unregistering): Released all slaves [ 1798.388455][ T306] bond2 (unregistering): Released all slaves [ 1798.398694][ T306] bond1 (unregistering): Released all slaves [ 1798.441960][ T306] team0 (unregistering): Port device team_slave_1 removed [ 1798.452595][ T306] team0 (unregistering): Port device team_slave_0 removed [ 1798.462082][ T306] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1798.474386][ T306] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1798.517746][ T306] bond0 (unregistering): Released all slaves [ 1798.595710][ T306] team0 (unregistering): Port device team_slave_1 removed [ 1798.610768][ T306] team0 (unregistering): Port device team_slave_0 removed [ 1798.622446][ T306] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1798.635356][ T306] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1798.666584][ T306] bond0 (unregistering): Released all slaves [ 1798.740520][T16371] chnl_net:caif_netlink_parms(): no params data found [ 1798.843634][T16371] bridge0: port 1(bridge_slave_0) entered blocking state [ 1798.852161][T16371] bridge0: port 1(bridge_slave_0) entered disabled state [ 1798.860278][T16371] device bridge_slave_0 entered promiscuous mode [ 1798.871486][T16371] bridge0: port 2(bridge_slave_1) entered blocking state [ 1798.878875][T16371] bridge0: port 2(bridge_slave_1) entered disabled state [ 1798.886520][T16371] device bridge_slave_1 entered promiscuous mode [ 1798.897110][T16463] chnl_net:caif_netlink_parms(): no params data found [ 1798.939200][T16371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1798.951988][T16371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1798.973934][T16371] team0: Port device team_slave_0 added [ 1798.991941][T16371] team0: Port device team_slave_1 added [ 1799.002299][T16463] bridge0: port 1(bridge_slave_0) entered blocking state [ 1799.010109][T16463] bridge0: port 1(bridge_slave_0) entered disabled state [ 1799.020161][T16463] device bridge_slave_0 entered promiscuous mode [ 1799.033399][T16371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1799.048444][T16371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1799.076045][T16371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1799.087466][T16463] bridge0: port 2(bridge_slave_1) entered blocking state [ 1799.094493][T16463] bridge0: port 2(bridge_slave_1) entered disabled state [ 1799.104115][T16463] device bridge_slave_1 entered promiscuous mode [ 1799.111771][T16371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1799.118782][T16371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1799.145290][T16371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1799.174485][T16463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1799.193598][T16463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1799.204570][T16371] device hsr_slave_0 entered promiscuous mode [ 1799.211781][T16371] device hsr_slave_1 entered promiscuous mode [ 1799.219306][T16371] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1799.227574][T16371] Cannot create hsr debugfs directory [ 1799.250568][T16463] team0: Port device team_slave_0 added [ 1799.269440][T16463] team0: Port device team_slave_1 added [ 1799.309026][T16463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1799.315975][T16463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1799.344797][T16463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1799.368664][T16463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1799.375742][T16463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1799.417639][T16463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1799.470277][T16463] device hsr_slave_0 entered promiscuous mode [ 1799.478394][T16463] device hsr_slave_1 entered promiscuous mode [ 1799.484728][T16463] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1799.492959][T16463] Cannot create hsr debugfs directory [ 1799.542782][T16371] bridge0: port 2(bridge_slave_1) entered blocking state [ 1799.549856][T16371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1799.557123][T16371] bridge0: port 1(bridge_slave_0) entered blocking state [ 1799.564135][T16371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1799.638675][T16463] bridge0: port 2(bridge_slave_1) entered blocking state [ 1799.645802][T16463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1799.653120][T16463] bridge0: port 1(bridge_slave_0) entered blocking state [ 1799.660185][T16463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1799.729886][T16463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1799.736888][T23814] bridge0: port 1(bridge_slave_0) entered disabled state [ 1799.746412][T23814] bridge0: port 2(bridge_slave_1) entered disabled state [ 1799.757698][T23814] bridge0: port 1(bridge_slave_0) entered disabled state [ 1799.765038][T23814] bridge0: port 2(bridge_slave_1) entered disabled state [ 1799.790885][T16371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1799.805116][T17716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1799.814277][T17716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1799.829209][T17716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1799.837777][T17716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1799.846219][T16463] 8021q: adding VLAN 0 to HW filter on device team0 [ 1799.863214][T16371] 8021q: adding VLAN 0 to HW filter on device team0 [ 1799.871800][ T8442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1799.881078][ T8442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1799.890888][ T8442] bridge0: port 1(bridge_slave_0) entered blocking state [ 1799.898002][ T8442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1799.912045][T16901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1799.921138][T16901] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1799.929457][T16901] bridge0: port 1(bridge_slave_0) entered blocking state [ 1799.936514][T16901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1799.951088][T23814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1799.960732][T23814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1799.973835][T23814] bridge0: port 2(bridge_slave_1) entered blocking state [ 1799.980998][T23814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1799.989407][T23814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1799.999153][T23814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1800.010123][T23814] bridge0: port 2(bridge_slave_1) entered blocking state [ 1800.017196][T23814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1800.029301][T16886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1800.045010][T17716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1800.054553][T17716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1800.068253][T23814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1800.082866][T23814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1800.091760][T23814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1800.100943][T23814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1800.109410][T23814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1800.118486][T23814] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1800.126320][T23814] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1800.141915][T16901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1800.150324][T16901] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1800.160058][T16901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1800.168877][T16901] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1800.187139][T16901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1800.195248][T16901] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1800.204195][T16901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1800.212967][T16901] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1800.222967][T16901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1800.233218][T16901] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1800.241647][T16901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1800.250349][T16901] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1800.259693][T16463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1800.274563][T16371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1800.290941][T16901] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1800.298411][T16901] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1800.321047][T16901] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1800.328995][T16901] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1800.344341][T16371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1800.354140][T16463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1800.389305][T16901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1800.400626][T16901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1800.432981][T16886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1800.444099][T16886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1800.471074][T16371] device veth0_vlan entered promiscuous mode [ 1800.482838][T16463] device veth0_vlan entered promiscuous mode [ 1800.490689][T16886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1800.501313][T16886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1800.509577][T16886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1800.520337][T16886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1800.534051][T16371] device veth1_vlan entered promiscuous mode [ 1800.560854][T16463] device veth1_vlan entered promiscuous mode [ 1800.570564][T16886] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1800.578403][T16886] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1800.585962][T16886] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1800.594570][T16886] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1800.602636][T16886] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1800.610437][T16886] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1800.654181][T17680] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1800.662976][T17680] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1800.671958][T17680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1800.681162][T17680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1800.693720][T16463] device veth0_macvtap entered promiscuous mode [ 1800.706591][T16371] device veth0_macvtap entered promiscuous mode [ 1800.715501][T17716] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1800.724935][T17716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1800.734176][T17716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1800.743999][T17716] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1800.754026][T16463] device veth1_macvtap entered promiscuous mode [ 1800.767904][T16371] device veth1_macvtap entered promiscuous mode [ 1800.796014][T16463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1800.807984][T16463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1800.818905][T16463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1800.829723][T16463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1800.839953][T16463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1800.850998][T16463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1800.861421][T16463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1800.872923][T16463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1800.884070][T16463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1800.893889][T16371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1800.906312][T16371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1800.917956][T16371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1800.929380][T16371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1800.940165][T16371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1800.950978][T16371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1800.961610][T16371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1800.972623][T16371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1800.984474][T16371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1800.995498][T16371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1801.007224][T16371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1801.015220][T17680] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1801.025271][T17680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1801.034480][T17680] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1801.043585][T17680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1801.054431][T16463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1801.065298][T16463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1801.075858][T16463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1801.086596][T16463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1801.103132][T16463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1801.114646][T16463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1801.125617][T16463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1801.136205][T16463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1801.148039][T16463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1801.159793][T16371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1801.174182][T16371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1801.184517][T16371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1801.195819][T16371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1801.205959][T16371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1801.223505][T16371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1801.233497][T16371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1801.245208][T16371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1801.255952][T16371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1801.267058][T16371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1801.278794][T16371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1801.286199][T16901] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1801.295393][T16901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1801.305295][T16901] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1801.314263][T16901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1801.407517][ T306] ================================================================== [ 1801.415881][ T306] BUG: KASAN: use-after-free in dec_ucount+0x54/0x130 [ 1801.422667][ T306] Write of size 8 at addr ffff888014385240 by task kworker/u4:6/306 [ 1801.430653][ T306] [ 1801.432974][ T306] CPU: 1 PID: 306 Comm: kworker/u4:6 Tainted: G W 5.13.0-syzkaller #0 [ 1801.442431][ T306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1801.452487][ T306] Workqueue: netns cleanup_net [ 1801.457249][ T306] Call Trace: [ 1801.460520][ T306] dump_stack_lvl+0xcd/0x134 [ 1801.465097][ T306] print_address_description.constprop.0.cold+0x6c/0x309 [ 1801.472143][ T306] ? dec_ucount+0x54/0x130 [ 1801.476548][ T306] ? dec_ucount+0x54/0x130 [ 1801.480948][ T306] kasan_report.cold+0x83/0xdf [ 1801.485699][ T306] ? dec_ucount+0x54/0x130 [ 1801.490106][ T306] kasan_check_range+0x13d/0x180 [ 1801.495034][ T306] dec_ucount+0x54/0x130 [ 1801.499261][ T306] cleanup_net+0x6f3/0xb10 [ 1801.503660][ T306] ? ops_free_list.part.0+0x3d0/0x3d0 [ 1801.509017][ T306] ? rwlock_bug.part.0+0x90/0x90 [ 1801.513936][ T306] ? read_word_at_a_time+0xe/0x20 [ 1801.519004][ T306] process_one_work+0x98d/0x1630 [ 1801.523931][ T306] ? pwq_dec_nr_in_flight+0x320/0x320 [ 1801.529307][ T306] ? rwlock_bug.part.0+0x90/0x90 [ 1801.534226][ T306] worker_thread+0x658/0x11f0 [ 1801.538908][ T306] ? process_one_work+0x1630/0x1630 [ 1801.544100][ T306] kthread+0x3e5/0x4d0 [ 1801.548151][ T306] ? set_kthread_struct+0x130/0x130 [ 1801.553338][ T306] ret_from_fork+0x1f/0x30 [ 1801.557766][ T306] [ 1801.560073][ T306] Allocated by task 8476: [ 1801.564383][ T306] kasan_save_stack+0x1b/0x40 [ 1801.569042][ T306] __kasan_kmalloc+0x9b/0xd0 [ 1801.573613][ T306] alloc_ucounts+0x23d/0x5b0 [ 1801.578190][ T306] set_cred_ucounts+0x171/0x3a0 [ 1801.583033][ T306] copy_creds+0x853/0xb20 [ 1801.587359][ T306] copy_process+0x1413/0x74c0 [ 1801.592027][ T306] kernel_clone+0xe7/0xab0 [ 1801.596428][ T306] __do_sys_clone+0xc8/0x110 [ 1801.601017][ T306] do_syscall_64+0x35/0xb0 [ 1801.605412][ T306] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1801.611300][ T306] [ 1801.613620][ T306] Freed by task 306: [ 1801.617489][ T306] kasan_save_stack+0x1b/0x40 [ 1801.622151][ T306] kasan_set_track+0x1c/0x30 [ 1801.626726][ T306] kasan_set_free_info+0x20/0x30 [ 1801.631652][ T306] __kasan_slab_free+0xfb/0x130 [ 1801.636492][ T306] slab_free_freelist_hook+0xdf/0x240 [ 1801.641849][ T306] kfree+0xeb/0x670 [ 1801.645640][ T306] put_ucounts+0x117/0x150 [ 1801.650039][ T306] cleanup_net+0x6f3/0xb10 [ 1801.654453][ T306] process_one_work+0x98d/0x1630 [ 1801.659375][ T306] worker_thread+0x658/0x11f0 [ 1801.664040][ T306] kthread+0x3e5/0x4d0 [ 1801.668092][ T306] ret_from_fork+0x1f/0x30 [ 1801.672495][ T306] [ 1801.674795][ T306] Last potentially related work creation: [ 1801.680483][ T306] kasan_save_stack+0x1b/0x40 [ 1801.685139][ T306] kasan_record_aux_stack+0xe5/0x110 [ 1801.690406][ T306] insert_work+0x48/0x370 [ 1801.694718][ T306] __queue_work+0x5c1/0xed0 [ 1801.699206][ T306] queue_work_on+0xee/0x110 [ 1801.703692][ T306] call_usermodehelper_exec+0x1f0/0x4c0 [ 1801.709215][ T306] kobject_uevent_env+0xf8f/0x1650 [ 1801.714325][ T306] kobject_synth_uevent+0x701/0x850 [ 1801.719518][ T306] uevent_store+0x20/0x50 [ 1801.723906][ T306] dev_attr_store+0x50/0x80 [ 1801.728391][ T306] sysfs_kf_write+0x110/0x160 [ 1801.733089][ T306] kernfs_fop_write_iter+0x342/0x500 [ 1801.738374][ T306] new_sync_write+0x426/0x650 [ 1801.743043][ T306] vfs_write+0x796/0xa30 [ 1801.747280][ T306] ksys_write+0x12d/0x250 [ 1801.751597][ T306] do_syscall_64+0x35/0xb0 [ 1801.755999][ T306] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1801.761876][ T306] [ 1801.764176][ T306] Second to last potentially related work creation: [ 1801.770736][ T306] kasan_save_stack+0x1b/0x40 [ 1801.775390][ T306] kasan_record_aux_stack+0xe5/0x110 [ 1801.780655][ T306] insert_work+0x48/0x370 [ 1801.784965][ T306] __queue_work+0x5c1/0xed0 [ 1801.789448][ T306] queue_work_on+0xee/0x110 [ 1801.794021][ T306] call_usermodehelper_exec+0x1f0/0x4c0 [ 1801.799546][ T306] kobject_uevent_env+0xf8f/0x1650 [ 1801.804647][ T306] kobject_synth_uevent+0x701/0x850 [ 1801.809843][ T306] uevent_store+0x20/0x50 [ 1801.814155][ T306] dev_attr_store+0x50/0x80 [ 1801.818663][ T306] sysfs_kf_write+0x110/0x160 [ 1801.823320][ T306] kernfs_fop_write_iter+0x342/0x500 [ 1801.828584][ T306] new_sync_write+0x426/0x650 [ 1801.833242][ T306] vfs_write+0x796/0xa30 [ 1801.837472][ T306] ksys_write+0x12d/0x250 [ 1801.841786][ T306] do_syscall_64+0x35/0xb0 [ 1801.846181][ T306] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1801.852062][ T306] [ 1801.854373][ T306] The buggy address belongs to the object at ffff888014385200 [ 1801.854373][ T306] which belongs to the cache kmalloc-192 of size 192 [ 1801.868402][ T306] The buggy address is located 64 bytes inside of [ 1801.868402][ T306] 192-byte region [ffff888014385200, ffff8880143852c0) [ 1801.881571][ T306] The buggy address belongs to the page: [ 1801.887178][ T306] page:ffffea000050e140 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x14385 [ 1801.897335][ T306] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 1801.904872][ T306] raw: 00fff00000000200 ffffea00005fdd80 0000000300000002 ffff888011041a00 [ 1801.913446][ T306] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 1801.922021][ T306] page dumped because: kasan: bad access detected [ 1801.928406][ T306] page_owner tracks the page as allocated [ 1801.934106][ T306] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 1981661195, free_ts 1927305021 [ 1801.949708][ T306] get_page_from_freelist+0xa72/0x2f80 [ 1801.955162][ T306] __alloc_pages+0x1b2/0x500 [ 1801.959743][ T306] alloc_page_interleave+0x1e/0x200 [ 1801.964934][ T306] alloc_pages+0x238/0x2a0 [ 1801.969332][ T306] allocate_slab+0x32b/0x4c0 [ 1801.973916][ T306] ___slab_alloc+0x4ba/0x820 [ 1801.978498][ T306] __slab_alloc.constprop.0+0xa7/0xf0 [ 1801.984110][ T306] __kmalloc_track_caller+0x2fe/0x320 [ 1801.989462][ T306] krealloc+0x87/0xf0 [ 1801.993430][ T306] add_sysfs_param+0xca/0x960 [ 1801.998090][ T306] param_sysfs_init+0x359/0x498 [ 1802.002984][ T306] do_one_initcall+0x103/0x650 [ 1802.007729][ T306] kernel_init_freeable+0x6b8/0x741 [ 1802.012923][ T306] kernel_init+0x1a/0x1d0 [ 1802.017241][ T306] ret_from_fork+0x1f/0x30 [ 1802.021647][ T306] page last free stack trace: [ 1802.026311][ T306] free_pcp_prepare+0x2c5/0x780 [ 1802.031150][ T306] free_unref_page_list+0x1a1/0x1050 [ 1802.036419][ T306] release_pages+0x856/0x20a0 [ 1802.041137][ T306] tlb_finish_mmu+0x165/0x8c0 [ 1802.045810][ T306] exit_mmap+0x1ea/0x620 [ 1802.050083][ T306] __mmput+0x122/0x470 [ 1802.054267][ T306] mmput+0x58/0x60 [ 1802.057993][ T306] free_bprm+0x65/0x2e0 [ 1802.062139][ T306] kernel_execve+0x380/0x460 [ 1802.066721][ T306] call_usermodehelper_exec_async+0x2e3/0x580 [ 1802.072779][ T306] ret_from_fork+0x1f/0x30 [ 1802.077206][ T306] [ 1802.079517][ T306] Memory state around the buggy address: [ 1802.085126][ T306] ffff888014385100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1802.093184][ T306] ffff888014385180: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 1802.101226][ T306] >ffff888014385200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1802.109263][ T306] ^ [ 1802.115402][ T306] ffff888014385280: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1802.123440][ T306] ffff888014385300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1802.131477][ T306] ================================================================== [ 1802.157333][T11597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1802.165174][T11597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1802.200464][ T165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1802.227848][ T165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1802.271633][ T272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1802.295019][ T272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1802.307501][ T272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1802.322710][T16901] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1802.332135][ T272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1802.340851][T16901] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1802.351080][T16901] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1802.360224][T16901] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1802.413764][ T306] Kernel panic - not syncing: panic_on_warn set ... [ 1802.420419][ T306] CPU: 0 PID: 306 Comm: kworker/u4:6 Tainted: G B W 5.13.0-syzkaller #0 [ 1802.429882][ T306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1802.439958][ T306] Workqueue: netns cleanup_net [ 1802.444721][ T306] Call Trace: [ 1802.448238][ T306] dump_stack_lvl+0xcd/0x134 [ 1802.452866][ T306] panic+0x306/0x73d [ 1802.456822][ T306] ? __warn_printk+0xf3/0xf3 [ 1802.461398][ T306] ? preempt_schedule_common+0x59/0xc0 [ 1802.466832][ T306] ? dec_ucount+0x54/0x130 [ 1802.471244][ T306] ? preempt_schedule_thunk+0x16/0x18 [ 1802.476644][ T306] ? trace_hardirqs_on+0x38/0x1c0 [ 1802.481654][ T306] ? trace_hardirqs_on+0x51/0x1c0 [ 1802.486751][ T306] ? dec_ucount+0x54/0x130 [ 1802.491151][ T306] ? dec_ucount+0x54/0x130 [ 1802.495552][ T306] end_report.cold+0x5a/0x5a [ 1802.500123][ T306] kasan_report.cold+0x71/0xdf [ 1802.504868][ T306] ? dec_ucount+0x54/0x130 [ 1802.509269][ T306] kasan_check_range+0x13d/0x180 [ 1802.514189][ T306] dec_ucount+0x54/0x130 [ 1802.518415][ T306] cleanup_net+0x6f3/0xb10 [ 1802.522814][ T306] ? ops_free_list.part.0+0x3d0/0x3d0 [ 1802.528167][ T306] ? rwlock_bug.part.0+0x90/0x90 [ 1802.533089][ T306] ? read_word_at_a_time+0xe/0x20 [ 1802.538100][ T306] process_one_work+0x98d/0x1630 [ 1802.543022][ T306] ? pwq_dec_nr_in_flight+0x320/0x320 [ 1802.548384][ T306] ? rwlock_bug.part.0+0x90/0x90 [ 1802.553302][ T306] worker_thread+0x658/0x11f0 [ 1802.557974][ T306] ? process_one_work+0x1630/0x1630 [ 1802.563154][ T306] kthread+0x3e5/0x4d0 [ 1802.567214][ T306] ? set_kthread_struct+0x130/0x130 [ 1802.572394][ T306] ret_from_fork+0x1f/0x30 [ 1802.576862][ T306] Kernel Offset: disabled [ 1802.581174][ T306] Rebooting in 86400 seconds..