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"}) [ 702.947203][T32635] __nla_validate_parse: 2 callbacks suppressed [ 702.947213][T32635] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 703.041542][T32645] bond29 (unregistering): Released all slaves 13:02:38 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x7) 13:02:38 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400c0fe00000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 703.297560][T32718] sp0: Synchronizing with TNC 13:02:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:02:38 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000840000ff00000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:02:39 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 703.497809][T32733] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 703.592436][T32733] device bond29 entered promiscuous mode [ 703.609506][T32743] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 13:02:39 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="676ce2db5c091023edddf978550100003d", @ANYRESHEX=r0, @ANYBLOB=',roobmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=r0, @ANYRESDEC=0x0, @ANYBLOB]) lchown(&(0x7f0000000840)='./file0/file0\x00', 0x0, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') utimes(&(0x7f0000000440)='./file0\x00', 0x0) close(r0) 13:02:39 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400ffff1f000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:02:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000012c0)="0a07e857c58e5b0689160ced5c1f00b7", 0x10) accept$alg(r3, 0x0, 0x0) r4 = pidfd_getfd(r2, r3, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in6=@local}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@private0}}, &(0x7f0000000040)=0xe8) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000140), 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000180)=ANY=[@ANYRES64], 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000000000), 0x4) sendto$inet6(r5, 0x0, 0x0, 0x20000014, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) [ 703.696111][T32733] bond29 (unregistering): Released all slaves [ 703.846333][ T350] fuse: Unknown parameter 'glâÛ\ #íÝùxU' [ 703.896704][ T353] fuse: Unknown parameter 'glâÛ\ #íÝùxU' 13:02:39 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000180)={0x2, 0x2, 'client0\x00', 0x4, "3cc15d60e569aa35", "1b65c28beaf351ba6cac2e2f7373dff14d0f800a900a665d7fb673f11f54c1a7", 0x1, 0xfffffffe}) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020025000507d25a80648c63940d0624fc6000810a400c000000051a82c137153e670902018003001700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 13:02:39 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000010000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:02:39 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) clock_gettime(0x0, &(0x7f0000003100)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000002f40)=[{{&(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/96, 0x60}, {&(0x7f00000001c0)=""/107, 0x6b}, {&(0x7f0000000240)=""/23, 0x17}, {&(0x7f0000000280)=""/37, 0x25}, {&(0x7f00000002c0)=""/231, 0xe7}, {&(0x7f00000003c0)=""/182, 0xb6}, {&(0x7f0000000480)=""/55, 0x37}], 0x7, &(0x7f0000000540)=""/238, 0xee}, 0x2}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/114, 0x72}], 0x1, &(0x7f0000000700)=""/202, 0xca}, 0x9}, {{&(0x7f0000000800)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/203, 0xcb}, {&(0x7f00000009c0)=""/189, 0xbd}, {&(0x7f0000000a80)=""/249, 0xf9}, {&(0x7f0000000b80)=""/136, 0x88}, {&(0x7f0000000c40)=""/37, 0x25}, {&(0x7f0000000c80)=""/78, 0x4e}], 0x7, &(0x7f0000000d80)=""/254, 0xfe}, 0x5}, {{&(0x7f0000000e80)=@pppol2tp, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000f00)=""/120, 0x78}, {&(0x7f0000000f80)=""/176, 0xb0}, {&(0x7f0000001040)=""/108, 0x6c}, {&(0x7f00000010c0)=""/141, 0x8d}, {&(0x7f0000001180)=""/152, 0x98}, {&(0x7f0000001240)=""/160, 0xa0}, {&(0x7f0000001300)=""/142, 0x8e}], 0x7, &(0x7f0000001440)=""/224, 0xe0}, 0xff}, {{&(0x7f0000001540)=@xdp, 0x80, &(0x7f0000001840)=[{&(0x7f00000015c0)=""/49, 0x31}, {&(0x7f0000001600)=""/145, 0x91}, {&(0x7f00000016c0)=""/178, 0xb2}, {&(0x7f0000001780)=""/190, 0xbe}], 0x4, &(0x7f0000001880)=""/16, 0x10}, 0x7fffffff}, {{&(0x7f00000018c0)=@isdn, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001940)=""/139, 0x8b}], 0x1, &(0x7f0000001a40)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000002a40)=@hci, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002ac0)=""/134, 0x86}, {&(0x7f0000002b80)=""/20, 0x14}, {&(0x7f0000002bc0)=""/49, 0x31}, {&(0x7f0000002c00)=""/98, 0x62}, {&(0x7f0000002c80)=""/95, 0x5f}, {&(0x7f0000002d00)=""/81, 0x51}, {&(0x7f0000002d80)=""/101, 0x65}], 0x7, &(0x7f0000002e80)=""/159, 0x9f}, 0x80f8}], 0x7, 0x20, &(0x7f0000003140)={r1, r2+10000000}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000000)) 13:02:39 executing program 1: exit(0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000012c0)="0a07e857c58e5b0689160ced5c1f00b7", 0x10) accept$alg(r1, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000b000000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x6, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000240)=ANY=[@ANYRESOCT], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x78) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1d, 0x7, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x51}, @call={0x85, 0x0, 0x0, 0x41}, @jmp={0x5, 0x0, 0x4, 0x0, 0x6, 0x18, 0xfffffffffffffff0}, @exit, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @generic={0x3, 0x5, 0xd, 0x7a, 0x101}], &(0x7f00000000c0)='GPL\x00', 0x4, 0x17, &(0x7f0000000100)=""/23, 0x41000, 0xd, [], 0x0, 0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0xf, 0x8, 0x5}, 0x10, r4, r6}, 0x78) r7 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendfile(r7, r0, 0x0, 0x3ee) 13:02:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:02:39 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000020000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:02:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = open(0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r1, 0x0, 0x20000810) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000000)={0x4}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x0}) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 704.315708][ T374] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:02:40 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 704.517753][ T374] device bond29 entered promiscuous mode 13:02:40 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = msgget(0x0, 0x40c) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000040)=""/1) 13:02:40 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000030000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 704.563846][ T378] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 704.582487][ T400] bond29 (unregistering): Released all slaves 13:02:40 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000040000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:02:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000058740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="2400000024000b0f0000000000000000000009005364ef5dd520dea57a0fe81ba4f43fcaa71af4973ed0010596e0e4db10ec809614bdcea6498586c9e63bf2cdd7e837", @ANYRES32=r4, @ANYBLOB='\x00'/12], 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg1\x00', r4}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000250001002bbd7000fcdbdf2500000000", @ANYRES32=r5, @ANYBLOB="0700f1fff1ffe0ff0700012f"], 0x24}, 0x1, 0x0, 0x0, 0x400}, 0x4) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000014000119000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000200ff"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000014000104000000000000000002000000", @ANYRES32=r7, @ANYBLOB="4ec2bfd2eb990e54"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000011002b0a000000002280000000000000", @ANYRES32=r7], 0x20}}, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$TCSETX(r9, 0x5433, &(0x7f0000000140)={0xfff8, 0x6e, [0x5, 0x9, 0x6, 0x5, 0x400], 0xf800}) 13:02:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 704.969447][ T472] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 13:02:40 executing program 1: exit(0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap$dsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) r4 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r4) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000000)={0x8, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x0, 0x3, [{{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x26}}}, {{0x2, 0x4e20, @rand_addr=0x64010100}}]}, 0x210) sendfile(r3, r2, 0x0, 0x800000080004103) [ 705.061555][ T472] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 13:02:40 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xcb, 0x400202) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000080)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0], 0x2}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000240)={0xa20000, 0x1, 0x2, r3, 0x0, &(0x7f0000000200)={0x9b090f, 0x54d8, [], @string=&(0x7f00000001c0)=0x9}}) ioctl$SNDRV_PCM_IOCTL_DROP(r4, 0x4143, 0x0) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r5) accept$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x10) [ 705.118449][ T489] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:02:40 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000050000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 705.241009][ T489] device bond29 entered promiscuous mode [ 705.247661][ T476] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 13:02:40 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 705.425013][ T491] bond29 (unregistering): Released all slaves 13:02:41 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000060000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 705.558767][ T472] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 705.591636][ T513] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 13:02:41 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffe2, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$nfc_llcp(r2, 0x118, 0x3, &(0x7f0000000400)=""/4096, 0x1000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 13:02:41 executing program 4: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)=0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@private2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000280)=0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x64adc2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffffb5}], 0xaaaac44, 0x0, 0x0, 0xfffffe41) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x8002, 0x0, 0x0, 0x0, 0x1}, 0x9c) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000140)={[0x150, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0xc5e, 0x0, 0x2, 0x0, 0x0, 0xffffffffffff84d3, 0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x10100}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f00000000c0)=0x6b) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) openat$mice(0xffffffffffffff9c, &(0x7f0000000300)='/dev/input/mice\x00', 0x40) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20021, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x6, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13:02:41 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000070000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:02:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:02:41 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000080000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 705.963858][ T603] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 706.024899][ T603] device bond29 entered promiscuous mode [ 706.098748][ T627] bond29 (unregistering): Released all slaves 13:02:41 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@mangle={'mangle\x00', 0x44, 0x6, 0x468, 0x1e0, 0x98, 0x1e0, 0x98, 0x130, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={[], [], @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x3ff, 0x70, 0x4, 0x4, 0xfff, 0x810, 0x5}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c8) 13:02:41 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r1, r0, 0x0, 0x800000080004103) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400001, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="94020000", @ANYRES16=r3, @ANYBLOB="20002abd7000fedbdf2511000000280001800d00010069623a6361696630000000000c00028008000200000000000800030000000000240007800c000400010000800000000008000200000000000c0003000700000000000000b80002804c00038008000200d802ffff08000100060000000800020006000000080001000700000008000100010000000800010001000000080002000900000008000200050000000800020008000000040003801c000380080001000300000008000100e05ed203080001000700000024000380080002000800000008000200d800000008000100537b00000800020001000000040004000400040008000100b697547908000100000000800400040008000200080000000800068004000200140001801000010069623a6d6163766c616e30009c0001800d0001007564703a73797a300000000038000400200001000a004e240000000400000000000000000000ffff7f000001060000001400020002004e21e0000001000000000000000008000300ef0700000d0001007564703a73797a30000000002400028008000400000000000800010015000000080003000008000008000400000000001400028008000200000000f00800040003000000b00001800d0001007564703a73797a3100000000140002800800030008000000080001000b000000340002800800030000800000080004000800000008000300070000000800040003000000080001000800000008000200008000000d0001007564703a73797a300000000038000400200001000a004e2300000000fe80000000000000000000000000003c0600000026df3e9b8a60b5588c331400020002004e21ac1414aa00000000000000000b00010069623a776732000014000980080001000900"], 0x294}, 0x1, 0x0, 0x0, 0x10}, 0x20040081) 13:02:41 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000090000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:02:41 executing program 4: syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x77, &(0x7f0000000040)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x41, 0x29, 0x0, @initdev={0xfe, 0x88, [], 0x5, 0x0}, @local, {[], {{0x0, 0x0, 0x41424344, r0, 0x0, 0x0, 0x5}, {"b14dae1fd16050040000000000000329884a2a3c353dba48abce9d4b711de7ece20f2bf8f07a2c7b571cd9fbf9"}}}}}}}, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvme-fabrics\x00', 0x141400, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) sendmsg$AUDIT_TTY_GET(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x3f8, 0x20, 0x70bd2b, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004801) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000100)={r5}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000280)={r5, 0x400, 0x7, 0x0, 0x8001, 0x7a9}, &(0x7f00000002c0)=0x14) 13:02:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:02:41 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 706.400496][ T682] xt_TPROXY: Can be used only with -p tcp or -p udp [ 706.423915][ T682] xt_TPROXY: Can be used only with -p tcp or -p udp 13:02:41 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000084000000000a0000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:02:42 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000084000000000e0000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 706.608934][ T696] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:02:42 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xb0, 0x240400) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="2adbe914c385b5de858b863209d1ef84eec4e50ae2d285699c482a638162525696fe5afb6f787d0443725cf10b84b3e5d39cc0d611b0341fba507624a7e94f23563842ec045c50055cfe1363cb77430d67cca0516851e0d15b2a49e0f73a9a2135fb930aee35785405549d0faccdcc0358c7e8e782ae065c18da5a68654352086879d6cf8c78ee2d8e2c2bf521ce59beb11432867093f2a51b011594e90304fd974f4d826f829690bf", 0xa9}, {&(0x7f0000000100)="0c510aee5f73955999ac2d8df3b0dbe6d6a189e078a32600acb8f352f42d953581085fad9bf3627dfc089cc528ba61b5144d875de19e1d3566975cc815cf55142fc6bcdc82cbc2ecd3e8429aa188eb49ba1cb8dcee04c7dfbfa0d340487aff9410edcf72c21d3387efa8dd97bf80ddd0d6196a1e4217723f5be56aa740ab577cb9448e9d5f2e459869cc50d23d7affdddd6a6ad75a979a564a6f9ecf93f3b1b612bd", 0xa2}, {&(0x7f00000001c0)="45a4de2c2c7cd163e8ccabecaa6c129ab7", 0x11}], 0x3) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000240)={0x7, 0xb, 0x4, 0x40000, 0x5, {}, {0x2, 0x0, 0xc1, 0x95, 0x4, 0x0, "ef67cd42"}, 0x4, 0x4, @fd, 0x7, 0x0, r0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f00000002c0)=0x5) r2 = syz_open_dev$video4linux(&(0x7f0000000300)='/dev/v4l-subdev#\x00', 0x1000, 0x109200) fgetxattr(r2, &(0x7f0000000340)=@known='trusted.overlay.redirect\x00', &(0x7f0000000380)=""/240, 0xf0) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f0000000480)={0x0, @data}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000540)='/dev/dlm_plock\x00', 0x20240, 0x0) bind$isdn_base(r3, &(0x7f0000000580)={0x22, 0x0, 0x80, 0x5, 0x3}, 0x6) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r4, 0x300, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x4000) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000700)={0x1, 0x7, 0x4, 0x40000, 0xfffffd07, {0x77359400}, {0x1, 0x2, 0x1f, 0x5, 0x3, 0x8, "75d0fa9f"}, 0x823, 0x47d5236693295ea9, @userptr=0x7, 0x7fffffff, 0x0, r3}) r6 = dup2(r2, r5) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000780)={0x3}) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f00000007c0)={0x62, 0x1, 0xb, 0xc, 0x6, 0x81}) syz_genetlink_get_family_id$tipc(&(0x7f0000000800)='TIPC\x00') getpeername$netlink(0xffffffffffffffff, &(0x7f0000000840), &(0x7f0000000880)=0xc) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f00000008c0)={{0x0, 0x2, 0x30000, 0x0, 0x80}, 0x9, 0x8, 'id1\x00', 'timer0\x00', 0x0, 0x1, 0xa90e, 0xb8, 0x2}) openat$mice(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/input/mice\x00', 0x101) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40)="a38b5c6aed6e51d70a7c0bebde69ffd5cbccdfedfb805184000169a1df2c422eb96373cb9579309bfd971bcfc1ada904c9a0957e4071685f4893407c169dbd39ff50afe438aec5610bdde12157784d7ebd3ebaf3ae431b1fb6a52ff255bedd934195a09a9730528a0584061c02235cf22ce2bdd8e64a707b32cff6b2e91486adbbed0dde71aa8338770c00e2e3a7cb228c5bf1969b0fafaa2c1d0829feabc40d4ba367296acf401f10b1ab109c16bf977ee11f1453e8e8deb61e7fd65c175b1db27269d526d641d0aabd0f148a4a3c1ed39ee49d690014dd938f1f8f1b2e9ae147435dbc14a70dfc15511b9910564bb475b0bdde065c56", 0xf7, 0x20044080, &(0x7f0000000b40)={0xa, 0x4e24, 0x670, @loopback, 0xdd98}, 0x1c) [ 706.656782][ T696] device bond29 entered promiscuous mode [ 706.752747][ T696] bond29 (unregistering): Released all slaves [ 706.795479][ T744] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 13:02:42 executing program 1: exit(0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) read$FUSE(r1, &(0x7f00000002c0), 0x1000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r3, r2, 0x0, 0x800000080004103) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x60602, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_G_PARM(r5, 0xc0cc5615, &(0x7f00000012c0)={0x4, @output={0x0, 0x1, {0x101, 0x4d12}, 0xffff, 0x80}}) r6 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r10, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r10, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x800) 13:02:42 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000110000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:02:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13:02:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x1, 0x1000) socket$inet_udplite(0x2, 0x2, 0x88) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32=r7, @ANYRES32, @ANYRESOCT, @ANYRES64, @ANYRES32, @ANYRES32=r1, @ANYBLOB="9c7877df73bfddab589390df9ccf8429e394f72ebd76b703d622f1e521cbe4e5aba5111ffc457314498d0765499fac25ef02785bf5a912ad4e00ccb54eeaa6543c7058eaf5e54ec048e0f20e6df2002f07fcb7a643b33e3b130fde21a8347fe19decba323f07dec673b64c1123bdc255003d6eac33d66551d1c41801bc5dae0070193359ac98ef26ba4d023a68417c7730d8b6e1000b3c310b", @ANYRES64=r3], 0x48}}, 0x48000) r8 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="72b4482fe41f080000ff0000000096d4ab9a00e3a2622a62515789054a722c00"]) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@ipv4_newaddr={0x28, 0x14, 0x121, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @broadcast}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}}, 0x18}}, 0x0) 13:02:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000002c0)="fe", 0x1}], 0x1, 0x0, 0x0, 0x4040000}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = pidfd_getfd(r6, r4, 0x0) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/qat_adf_ctl\x00', 0x2c2080, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000), 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r4}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r7}, {0x8, 0x1, r4}, {0x8, 0x1, r4}, {0x8, 0x1, r8}]}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x40000) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) 13:02:42 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000200000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:02:42 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0xb6, 0x0, 0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4008, 0x9cb9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0xffffffffffffffff) 13:02:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:02:42 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000012c0)="0a07e857c58e5b0689160ced5c1f00b7", 0x10) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000006080)=[{0x0, 0x0, &(0x7f0000000180), 0x1}], 0x4924c05, 0x4004040) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/4098, 0x1002}], 0x1}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000012c0)="0a07e857c58e5b0689160ced5c1f00b7", 0x10) r5 = accept$alg(r4, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000006080)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001300)="ceb5049657fd28621a14e006a2bfd7b0", 0x10}], 0x1}], 0x1, 0x0) recvmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/4098, 0x1002}], 0x1}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) poll(&(0x7f0000000000)=[{r1, 0x40}, {r3, 0x440}, {r5, 0x403}, {0xffffffffffffffff, 0x10}, {r0, 0x8}, {r7, 0x6001}, {r0, 0x1038}], 0x7, 0x7f) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000001480)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x7, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f0000001380)=['#lo%,user[eth0]#vmnet0em0{\x00'], 0x1b, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c]}) 13:02:42 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000084000000012c0000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 707.361069][ T807] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:02:42 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$unix(r1, &(0x7f0000000400)={&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000200)="0fed9da5f710c2988865afa06753e06a1b4f1574660ef5e2f9af257076143016be3928817f2d3774aedce11a91fa784438d960923f3887226d502e69ec9200c7da1f74264ef9", 0x46}, {&(0x7f0000000280)="e76fcf0205d64db16f93c96e3b19124bc88a1e4b45d4e71238727357dd35d195009371c9f6620552ce417fbe9f1af506f3c698bd9105e64039870551f99ded156ded98797ff626a730e378c522caa6e57df4029949bc8dbd153509647fd0fa9091e7d11d69f14aa42633cbd41ec94ce432c5e4142cc13a2e87fd", 0x7a}, {&(0x7f0000000300)="30a1e60d0d934fd4f394f3d6b93708467741dfa1ebec7213779284a6a232d8554111a85fced550a011488668bc04e2750830924fbde58585074b4e7626dbf0220acc6b77876ea436f6a9dbefea23a7c5b6c0ee854fd4be7e2d78e9daf98e86e09804ab29ae1ff833619801a98844707917b3fe13d3da2b5fe63c740e7efb79971fe092f88499bed42859977ca067585cb1d3267e35dc5c9a054d15b2c0c80caa76991f35a80bf2", 0xa7}], 0x3}, 0x41) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x12d00, 0x4, 0x3}, r2, 0xb, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x1, r2, 0x800) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_opts(r4, 0x0, 0x9, &(0x7f0000000440)=""/109, &(0x7f0000000080)=0x6d) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x10000000002) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 707.411093][ T807] device bond29 entered promiscuous mode [ 707.441767][ T807] bond29 (unregistering): Released all slaves 13:02:43 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000600000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:02:43 executing program 1: write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x4, 0x83, 0x8, 0x4, @time={0x8, 0x9}, {0x3, 0x9}, {0x2, 0x8}, @queue={0x87, {0x4}}}, {0x2, 0x2f, 0x20, 0x0, @time={0x3ff, 0x5}, {0x14}, {0xd, 0x7f}, @raw32={[0x2, 0x80000000, 0xa9]}}], 0x38) exit(0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r1, r0, 0x0, 0x800000080004103) 13:02:43 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept4$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', r8}) r10 = socket$alg(0x26, 0x5, 0x0) sendmmsg(r0, &(0x7f0000005100)=[{{&(0x7f00000000c0)=@can={0x1d, r9}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000001c0)="53d287cc6e6623f22a31084d81291dd3d03d0de70c034764ef0d05de64805a68aecd08681f472b3ee1e7e395dee236c64adf282482558700df10fbc8aa8f99b78abb552982db1a9e70d709601f21a8ba8647a6677bcd5494462482be5aad2f28c21336c7a04212e8218b11096d0080fe796ed90ab32b81a9b70c875a8f56533c27345a91f5097e5d022adf519da696d0e49597d1267e6a51278442358d7790e236ab74bb798bc1c6640462770e3294c7409419c8092cf6b62bf7fea1209021604194f2aa0c8a575576f5c253884916f844a561d698c4cd4a1d43d489802059913b1920f48b8b", 0xe6}, {&(0x7f00000002c0)="b1b63871bef018c29dfb338a08904b359de9be5a1032311a3a4f6e5cd5b2e3051380a42c98a2c53e80e34f1b0e0e4a8477cc15e9b87f50f73e93b0eaab399e715d2a6b8772651912d4e98f00ce1d4dbc6f44c9ac913f2df61a5533da973bc110feabe053acdc800e621fa18cd4e421ad0eebe30a35929f5fed9ae5576604cc14a711524f6c2d2f6b5ecaeb15ec95b6820f14e4544e89cd5c7195a17ae975f82beea428f940a0740d7f6183b6374ebb63529e627cb59d81de117a6e6f", 0xbc}, {&(0x7f0000000380)="9f86d2018eac9b08f0d08692077adea339e0db19f23f1fbe6f72871b4611dcdac8bad3a252d7b72b804d0f00800bd890364c16355e3b6e8a72ebaa39ab28c359fc94a95259c0ba9c1dd3553b11aee403544c2cedc35d3c38ac8744a166c7295f", 0x60}, {&(0x7f0000000400)="21deb83cf649619e45ca4b93aaecb8874d1ddffc4d86f39e833b0335e5efe0b6e8a8f7e551e9aea306912c734deb9b", 0x2f}, {&(0x7f0000000440)="f55c6eb0524258296a659e79e2665839933e223cc6d4cea9949feef5215df81875933052952e8d08b0c70e53b55c6d0d270862dc6dd4a6e99fcbf3da1a8675d2aad5dbfc73c6e932412a779d66a5f2c78b14d4ac85", 0x55}], 0x5, &(0x7f00000052c0)=ANY=[@ANYBLOB="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"], 0x1c8}}, {{&(0x7f0000000740)=@nfc_llcp={0x27, 0x0, 0x2, 0x7, 0x80, 0x7f, "5d8ac3e4698e07c0c54fb91f4dd1fcea2c3c09723c0bdd61ae4476aeebc57029d8ef99db0243a67339f23e2c321def08ca4d3a69e5c229f5d2c2d062044e22", 0x10}, 0x80, &(0x7f00000007c0), 0x0, &(0x7f0000000840)=[{0xb8, 0x3a, 0x50f3, "3ce509527028336a0e060b463e6fb8eab383d045ee3ee16e4cb535f6c8ac77ed1f9fd9e2f90d10c80d38d92fa19cc34b8507a6bd6711184d38e017fd40d89c3f6ddd91b3effc21fb3cb7ddf016b9c410bb59f4f8b1aca5a4f8112ceb29b9d843dd6c8f275e1a3d1d95248f0ce93c498c73aa9f478a1f836dedf469bf5f5656df54e96ed88bd9f73f8ab10ae0ae9bb6e638838f0c8752be9aa74067aeef910c4c80"}, {0x38, 0x112, 0x4fbe4831, "ee4cc5a5a0221b40a511699a591841cffaa8908600289b2525ae96731274c52b486b5172"}, {0x38, 0x3a, 0x4, "1062b21fbfbe9fe6e8b82b6b6b0ea3d5aa1c868107f274be7bf2242fe13a3ed9b960"}], 0x128}}, {{&(0x7f0000000980)=@pppol2tpv3in6={0x18, 0x1, {0x0, r10, 0x2, 0x0, 0x1, 0x4, {0xa, 0x4e20, 0xe4, @local, 0x2}}}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000a00)="b6f5a6e9974d8aa0e5792e65a41f8eaeb96593fda0995feef9acd1de7ade0e48cfe800f5e2b874c4a7b8426d36a01c07fedf7dd9f8b92753194be661ab555f9b0ee4", 0x42}, {&(0x7f0000000a80)="920fe4a9872e2861c1a479319883dd43c728a81bea5b9360fb41b56ff52067d6c3ec2de30b75f5b2a5d7e770ae8e290d6cd03a524ef7eac5a38f8baf155d325401e14a93189d80cbc28b36582a3509", 0x4f}, {&(0x7f0000000b00)="9dee704d824fef6c959ab881f6964a320cf720c364c0b7ce8025a9f83208eb392e3323474a6e3be37947d5b42fc7bb3771c4bdb141ceac197ae139cb90262f1f2aeb63097178f6d0457d5091e61f363c2967ff8e4cc891063f4f6af4d1bc048c12ea32283f8cb0170d0a83d975056477784aab3eba45497c7b1e8e6da80c3ae6de8f3b670d96c6933ebc5c0509c56e133e264b91", 0x94}, {&(0x7f0000000bc0)="18884ec3d3ac4b84edbced7c82349a8440b366a27875e855", 0x18}, {&(0x7f0000000c00)='A', 0x1}, {&(0x7f0000000c40)="99beb9f11a0a86", 0x7}, {&(0x7f0000000c80)="974e61b3843443f102d54315886d12bbc0d1d66956c8a0fe7d94b5302dec76c3b67c6cdbc3d1985a0d7974b2f1e4ba3b577c30668648c5884c567515679e4c52aa02e5582421cf34f19a164b2546171d6abd7d5f9a3508f3ec62e57b94c7f54fe3f147e1bbdec943128137a77b8448d55322b32647e4f48eabd87e9ae9c8cdf4efda6e", 0x83}], 0x7, &(0x7f0000000dc0)=[{0x48, 0x29, 0x9, "048c362306eb5ea4f5686486c409e86b879da540e057ec967f40acdc0c2a5bdcf4e4c12a92bb551290adbb8884e861a77f9ea27650328602"}, {0x98, 0x10e, 0x3, "5fc739d1bb6e2e34e2577ded0f20e93c64157cf244f5e74b65950e30787e03b1d9e336035ff2e0630d0ce12bcf89c68e6d93d55976db74ae9703a2d40bed69117dc658a3c3f1ab686841b622cc01b46da3b4e335d6e9ce6694ab13e6613b6b6ebfd91164ed9f59ecf64eaaab0c0d54a3629111dba7609730bfe064faad30fb31310db9e5"}, {0x28, 0x10c, 0x911, "10c09676be63e2834c5257b42332ee663c9361b5b0b4c10f"}], 0x108}}, {{&(0x7f0000000f00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @rand_addr=0x64010100}, 0x0, 0x4, 0x1}}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000f80)="090198256dbc2839dfe4f8638910182b0b98ce9ece5a6662ea50401fd36b3c50e344fc4b01e4d8feefafc345c9ef1c8ed03f2fa201eb7ec6c976b4293888e9cbb0de0ef98444523f365112bc8a6836da1970e61a6dfd643d821246a347d471cd", 0x60}, {&(0x7f0000001000)="d5f2fa021b400fdcbae97ca4788a5d1e3702ae076e720625360a2700ff1fd3", 0x1f}], 0x2, &(0x7f0000001080)=[{0xf8, 0x101, 0x8, "f1f37496a4a005fc656c3600b57c0f96574a99aa996051b13b4661b17d447e5de5b542fdd6c81ea99fa760a1a82f910fbf6fd96194f4521912b039c91a6a9f9ec92a0d2cbbc32a287301466f23acff5708a0e6b173c0d7b3d69d4e3b3c541a6d5f9b107dcea4efe01ae45355ba3867a4d475ee7bea4455242a7e23115e1fe5a9891ce8cbdc38eef3d0b4632dcdb7abc33f73f08d5d49a7d8004bb31e340fadda1f270b636ff08ae8587a28bbfc4a55263f95bc9dd4976a50048ad35e1fb0d62d29ab08caa478c4f12e4b61adeeb06f29606dd4c6f9ab1bb8ecc26b73ed22e676e81d5a5f227425"}, {0x30, 0x109, 0xfffeffff, "8d6536915eec5f16451f478c167c1118f235ab9d2647716f16"}, {0x100, 0x3f8, 0x0, "55ca2da25d9d34c4a2a5b04a625ae7c426969a0486d95f78db8ffbcc14b020761eac527d784f62e9197b8d120bf097933a97fc6b38864c7b1981d6c6342e0dd4a8d1c214f38e80b4940b64394d27d9717cd5d735910d4ce51d7d9e7c90fafe55859cb7b0f459c6612b5d640d9a0add89ef365e36bc1625c8cdc1bfb73abf48f69617f66623be2fdfb28b1491134654ac21990e53825837372a432e3860a1fed01243c536ffc99b35f83b729553117da33d028b47595f36592c1aa661064c24493a74ad78d08ffcadabe1fd1a79e4fc5ad5a0884ece08123cf48a0a9c3687ead4785a2df97f0ca91b3b0f"}], 0x228}}, {{&(0x7f0000001300)=@caif, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001380)="4d5dedd8a4024b790280102a2ac5bad5561c8bce86815c91089d89a0f8f17a0038ca5d9c53979ff31082f49428bbbd69b82c6dcb52ed71339bd111", 0x3b}], 0x1, &(0x7f00000054c0)=ANY=[@ANYBLOB="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"], 0x23a0}}, {{&(0x7f00000037c0)=@rc={0x1f, @any, 0x24}, 0x80, &(0x7f0000003940)=[{&(0x7f0000003840)="f17652484adec5f933d8b07856a4465bca0aec6df5bc73e5634a26f84b8c1ed2cbd384716beb8c82b98024aa874c196ef9ed3c6206775e99a1d16d6c9fc540124a5fd62c6b50dfda46decf7cb741e1755bd4fc5ced183b4fa6c173b2c57dbdd46da20929fdbaefee3ab3f19bfa65fecc9ee9326c04a8a9c29f13a6284d1f537df697da840aa5965d15093f6c657584a2ff91df04db6e4e9845a6b4bed96872a6ba91f6864c62c5c037fb654872ff7108dc79fdb31912a678eb0ee609a55079ca71939eec129a642074a0fc2ef49d2823feb0b7d3e1be63eddd92c4e3b475f999eaa6", 0xe2}], 0x1, &(0x7f0000003980)=[{0xd0, 0x117, 0x0, "2be605340e40d0dffe2cc8fa57e643c1bbb22d0fd867bff6051387b8e7ade8f788491ca9141c1059554501b16b8d85baf8a186d3fa6b34b3e59c71225427e825d2b0ea75a8ba1540338132306335da3de03ae13ec9ee49bca4a2cbbb6ee1ec56d0092a1b171935be7f1d86001b79526db9014dacbc179b15b63e7b9fc38b8494808cb4557312c9e7d9d13bb3be35f509ad4d7b2ba1aa0762b7897b61b876d9865b628cefcce51985850b4b276d91f0f0a232dfb771a4e9b672464b4641c223b7"}, {0x70, 0x10b, 0xfffffdfa, "7b533e513162ee8369af236ccbc88974256a271d31a75b8c8a7b14a43ad36013abf0e74153670dbd1733e75a0382484c208adabd07df56a32ae5bb10c00d3942d142f3fab7f5135905d7d99706ac4e8f7afe2238d31c4fd756"}], 0x140}}, {{&(0x7f0000003ac0)=@isdn={0x22, 0x3f, 0x1, 0x1, 0x1}, 0x80, &(0x7f0000003e80)=[{&(0x7f0000003b40)="237a45b36a21874455fb0c08055da2c1c6c36a3c49cf48475c7266f6df2ef158cdff56bfbfae37c3edbaa1788b8178016573ea4fa95760541025c15f9e4ca15af6e63b0b4f63029a89dd321808a00389f6e8017eb7ebd1ba39b95b1cc5f4cb63dac7dfae73654c772f3ba48adf395d33b9fd0cbf7ff824abca665c30a0222d1c8c2f979b53f8148c7ade9c1abdd021647005946615884069286f3da1", 0x9c}, {&(0x7f0000003c00)="5d7dbe97d8732569410270a636d80c6b11dcdb0b10ce33450c0a2a863525d4e2ec4c8ac6677fc5f4ade50d1d94efc40b99c0c7ac30d06e9b795afcd3a79e6345e3f029ab923b7c0387906be76ab17d5790e71b8892487041d4b789388df273f85e7765f9e92b348c2931292419187b67ad967b60897525d4b4542e62ccff0a712979ae715234d21865f0708e76503474", 0x90}, {&(0x7f0000003cc0)="8cdb7ab850be96e826d52b701dea24b99bd2757c084acab8e0d69fd2cdd38a591c16492f9de4d953cb7cd5ad43cf4465caedd488f5fbd651d2", 0x39}, {&(0x7f0000003d00)="115263f641321b2c669924eb5340a09678d9d27d8990530084d8013e78261879f469d04b648ca500468fb71b88a37d74599dc5287b6ded70eacd58f55557262ec2dc85ea", 0x44}, {&(0x7f0000003d80)="155848f8741490ed4b52b7571e9e2ec7d6f4816c80dbba288e70768983dff2dd220d664657212b17408ee8e00888b77ba2bc86ac550f2d23f2a1971452172ffceb9f6f5259f55b901ca475c28e77151dc484e60f8bea4c39e25b3ab1df73b7015f1be62db372703aa35625b476d104b35ae0e4756167a59d41fe6be16fc2ca580babb06b9cbf1ef14e57acc626896432a85bda0e11daaa3985fa25152a24a3789a79232e12f15d11846ef14dcf0c8638d074f3dfe65bd1d9776e0993afa214bc1ccf526d3c47b2bf", 0xc8}], 0x5, &(0x7f0000003f00)=[{0xd8, 0x113, 0x5, "64dec11898dd4cbdcd32e7b35494fec39d1772b9d3ea4f0c57b4efa89bd06dea34904481fe5086c7a73359be2a2486b4121a4bf2919da46598c3ed158d87849cfef4c94b7e0cb463dd1d27ec82bee8c8b17bdd55abfda5201f32eaf2af8844e372defb39a5feed756f9e40bb0be5f6eaf6b8e3b44f1e55ac2b8a54652ca1dff990ce67fb2d8150ce9e454862d08f1095c010211bcfa8c47746f27cf50d00f44b486234453c17ec61a7a2724ed43ae148090508e225ee958d01fe465b933c1c5207719b48df"}, {0x78, 0x11, 0x4, "479fcc1d32e3728b0e1450d704c3aa4d532c0ad97831046cae5881ac0c84c92142b25bdb4aa0e8b70402d6e6d481c0c2fcb398e633bea719df962fb93111863c7b9b904fdf03bd97e79043aef0fe1e4dde993ce93f8d5d446b22a0e48d8c742338660a3e"}, {0x1010, 0x12f, 0x3ff, "f593e597b4f054afb172d8dc9e8b4124518a3df4311eabc483fd60eec9f5d1be7c490aadc533308266a4cc87ef5354d66b2769e35d0e2a8863da4b411de6a690d409a534f4a0acae2416f4897e19bab2859feefd651c3de43d10eb4fe99f9292592ca46a23148a5b535715765fa2c32e1d1f751922442fd48090f0752cf7aa7a3a41adbcfee9e6cae69611ad978d40bda2cd3f63d5965a5a8c9d4e94d8af796c9551fec515aff2ebf15ec0c466ad2f9ee57b3db20bdc8cf1fa2a88e74f9ddab6825779cf5ae29285ec5c821aa4e73edf84cda244c9d8150c1f971725d515490418e8bc8b09dd28132d313f3cabc15830db2d51f25b7158806c5a7e0a4081ac90e3f2576471988ca1283dbd0b03b9fc3c97b049e67907dfa90377d6b69db7241f710f5870dce4723fc3469a786183c8bc0e88a0be9c6dce00ef51d85dcb7151a55c32ce9d3d1c394f0f17ec658c1077433539a26921092e3433c014e953c998c767e97c0c24519efccc05c1672d3f4a8f37794bd65416c3129f36caf4719848c11c938f1359dd4f14ca6a87a859e147c9d0e66c3711641588aadf26e01593bbc10e706b85ac3767ea6b225e5eb6f47f22300d97f0420bbcf3e03da622f9acea468a4622df255ab0c7d342338ef032c2c84c0f597815b575cfa13f63f3b6edc67da8d38574193d5628706737e44307f9bc9027fc0c620ea1d261815d491524f25c9d8a85d39e68f521a1af0cd9e58a229548e8f42e4b461a4c6424f055f23777a455774679a0aa1865e67f1267057cbbe1b7589f9b1fcce3918da1e0d761a11126017aab41a229fa432328b7e39b53c1945aade64a598cd63ac4695cd9c5e8556dd71bd1565976b8dfa70b9cb37594ede951a5dead2acf1622f92df48a5cfffdc7d84126100a85982ab66cbdba47c66fb3e98577ec228466b3ee16aba48f00711cd2761b60d8be13399e9f69a4f9d0464061fc6dd1a1ea1ba4fa577248fd4886d84ed477bb05cc66104bf6b306c5bcda086600604424542e3157c3b860869badfc0af9cb5861fb805c65b3edfb80f7ab684ae7375b0a7498e3c6befb0f94bc748e0d8eed12bc55f992302245c4f644c2d8d8da3d91b02b59f04c2a975c77bf41a4edc2b74e11decb07a8e63f943c3117fc71f8bb0f51b5b738fdfda4e87c4f81d3ca73e4a87847e011c2ccdd8b98b9d2ec54526c07b2fbaa679da232f76448e4a586b21257e3e52efe7882756092c225ed1d20024a5e381fbc577dc1396a99b45ef8a916ba929d0fd96994a5560e25bb0c507900c37ed886877b8fca892b996bcce5b723b4085cd376cadb7b38b50744a75674df3d6a06f246fab289bc6e9197ad29de09912340e6e8aabcbe9f8748d7bd529aabccd2c8df064615ea259e0d7df79bf514b9227368f99cdf6c1241ce647de37631ddbc76832b3b8c93028e3cb9b9d9b56ce492725e0305251db20313dea49ba57f2f1d7948d9cfd7443e70e18b4d1ffaba62eb60f22d3280b9878f39888eb3463acd0486ad6c460cd9f58203aebfd0f76cd44da8de27a034e2e7ef760b11fbc68046b7191a42922016f2af8b166f76d9260b6fa81d4c16aa7c178287de2c8d7be15d9efd31932368d868970a667a64639aa2f5779e053b69e5c7b6267b6bb798453687762e9c7b4a6b07f71f4cbd86fcbaa2ed791baaaf337266dcec2dc679cc027c41de9798df27b441200a741bc227cb38b322e699529666fe515b7ae953078c33613962e0159f461a9e8410b0ff79aab6516af3957204d031ec0ec0667d12e1363d8926570f4883fc12b3ea37f3fed7099bd0b022cba5318cd2d47c1ab646870eceae16585a776d1bfa89ec2d79136184fc848993cf83dd09fa4be9f14d7f3fdeb61a924af0ebe140223c3692877f9f9cc985e3131f33085aed2d6cf8a607527748e68ba4e69c4376a3630419a0e8d93c9cb0ac4b64d7e40d377263ee4ab46bd636c9986976ad07f3d7c42bcbef45c9f23b6904da7a62fd1499ae07d8731f73ec58acb09c03df51621637f945de9b40bd7d6787f16959d504c1ca0ba00ff3036d9d97e0b94de12ad7aec092b3788b24e5626fdd0f1a5587470346f8913cc4722971d2df3d1714d0d19806ba73926ac21ed07113cc74baf5553f5a906029003c298ed8f26f253d8dfbca57daa61ea0c6e9931000f1328b803903565b40abd23b410f8e17aad454629f1e6a82a6f8bfd8aa4eb596c1151817f464d1473ec725df334ddb8ad0a9baa87c16784284e7613862521f132e295dfd230e87b91908b85c5c134db01f9fb3369696a6e645ae13ebe5e9a6e991c9044e478a8208a0be2017f7b6e48a7b22a81655eec2bf83e90416563729f6cbe93035962d5f52df122a12ce79e9d64be754587f18476dd7d0dff4c19436d450d1e5c741d82249f50c5fe2f8d698aa1912804b858fd739827a36fe7216bbe4f664caf9ad5e8ced1f2e5ae9c2e294030078f2bd1f526ac15cf4d66767a010d71aa7fddb87f71471720bd7a04995ff0e8f16dfc1ed748c17175ce4a22aa2aa83a2a297a36ae8f81e5372211d08c82aa8df18e7cda14377721e67760aef63f62869413b53b4fb9853d6ae84f33ae4b195ab605c33b579748147b772db319d4071fdd479ec958ad7dfbf97c89775eb78772377ad590fd6f8bead18e0c2f82cc36f7cc4d13f096b13c19c8c3521ba9300ff4408361f48d077af82b31fa4147b3f785affffb210a0d7b40c0228e3cd70c973e7b6ca7058d263f2da5eb1c6db535cfcf67fefae45ac854014df23573ca720dbbaec155c6ba5dd3beadde69c7ea882e30ef1f68d83f7f3c68336e50c353baf245ba46bbed1718958dc65f84c242ce76e7d63760757cd5942347b68c2c01450acdafaf95ff2bff15a500e4c951eb11cf077e8ece482b7802c270a5f5140c28264d084cc6e512a7aac97df97067f77a539c335a02fd0e73b08aee3daa07cc14333407d120cebbab60ce64071a3c4abf77d096656b173100ad4ab47f49b6a0990af963a6274b7ec657dfe5f5eb22a86eb6aaaaff7e65c66323869805421d287436e44d026705d73edbaba5c65e0706f2ac1145d1f2a831a18b577a89252f1ef060f2114a87cc988e25c9b6d3b8a36ec84f89d44b4ed7edf8c7dfa92ba0dd929047b9ba9b58645ec93caef27cb0841e390b1a4be3a5ce7edae7ef90af5dd526333fe05b7074b7c46b776af884d3b435e317a0e8bd902eb30c4686a0677c6c50d023256d1bbf5209e3a3013136f2957f7e9a17dc0c13a371408e667aff0446bb65c3602f83472735af003a65d09d268fba679c89b7d7accde189adbf1c85ae9137ba6b1b5f2bf813aa898fd854a42418c995eda3d599903002b2817bee0bb39c3b98694e8274325ff2821308fea1f3e158c32512eddcd5daf0bb9f01f7c667b552fcb83917c982ad4d850a0e08b4385c8afadb07f24da6cf6c7c3683f509fc42104d6227190d5a4f79c5f6de983c4f0326003e49b003d06a068a1f36405b176ae64a86f4b9ec4c4779d3a95da55b33a9d9880406ce9bff159ad30572549859c42e3d5b9dbde822c5e9d303219ae095891dc8dfe056a18ec54fac379d86c1aac0dd21831d8fc31d54f229ec61bcd531a210af8b1468001a2a5df4f10366bacd077d2a48d931d2de01450f3c44d4c6fecee996b28f986b76a6721743a8c6a3e0d1720011e34594feb5637f5ffd43ded86d082f80928bd498dda7ddc1466480b5792387458d49c4b58f45a7c366353fe6d56b3316f80cdaafba52c4f2c90e12be1c0795db71e9c2ff8d85ba2988825fcde218ef20124c04d8066dc87337b810705c8fbf02ac28b0f952202ad03dae2144bbc9f0d3c782204e5aecc47a66284eecd81e1f73e470fb72a6c1e66015217303762190e576731fb2af7b007baeafc273a7e0cdc5167dd4633df13678cbc05baf4c704f832d906629d441414d9c56ca0f95ea1fda2a68134a1ceb09531b463a20730056f5de5c67b1161cc1d318129a67c1e9da5a267ccc6ed3670cf77db3eac9061287763c8ef041b8e924afdb92a9ed320ed9f23304502fd21ded1fd87c7ad9c3f922e8df836457fafbea1fc779a02fb8903d9c9c51ddde8c80b90f0848f9f024033b6351a0ed36061dbc12c27a7bfb5c98cb629a3f24105eca8d3ad35624927883a41f83598690e1072379361e20f1059c840a8f3e3428828feda0c7ebdc2939f26d62d845c8f10c04b196be4951bd7044233f664bc47030dcffcd69181c2035ab433251b146d6735250f857db89285662e9ca0d4005ccf034750e8452e81efe92bbc5b75424a3dfaa27ca6dc5cc9dcf99d2669c3aeaa5939a481fe5d895cd259628599a3e388d4096fa4fa3765d9516bd875bbfcaa8bf2ae9c62f886346443149edd128b26be1f9a66c7f4c160dbee7337e252414b1c63b9bfc463acc38230afaeeba58d483156f7e457a969a273ba6f58c30789290b94a24d85bdc9cab5240581b41f49c6c082c8171bc65b306016d5e4c0495247efe8b0549f0e789694ae4f34b5afaf5a5ca82661e25f17737061478a5875528484c04505720bd04e69df9251d168653d701c0505124054891454cc137eaacacfb5846b3c827dbee302718b36b1b3c30eb8ed305dfb8db8bc63837cb86b52c24b0c45c3d7be98ab7a97b414592fc0602180c3ac8a7bcb694c3349ebda567fe785d76d3fa8a65689f1a7857b07d99f8bc7945825804ae3834b56deb450a0cda95b0ef4f36f70f611679c3c6a7a30dcedf7d482a2b6564df5ad6fe24ff1ef44f0d25a9d3302f384fa7b55a2f26c69bb59a3e86177ce988acf4dbce1d1ad509227c1e9ff078d150b0c0ca9a4c0dfb6a9ce043b6c61c07e07e76f46d3c1ab241beb0fb3f6f2978ef70508c0c23f4d47883857637d7bfa525939166ab49bef58e5f4b2587d86f75e6a26c510aff3761751ab9704347fe701e9a5d349f2e26c1b96864226392896f596cff48c5488824999b99e30165f2c69a9247e98cbfe415f55a60414a496030a30ef01e3ebbebeb1a0ea2b5a1cb7fa6a1f7aba8af07c550123a4a3aaa8c18697f9892ce0d26fc207dadc769597b859138beba5c8acc8affd3d5cd3cba2272257dc65454eb192e875bce116c2431a03f4eeafa4ed036b071a05dc49c7d8caf39e9b7b769d590e0c4c64863a0f5540afa9d0e0c4574f3f19d52c6a03fd2105f9ccf5132c2016435746f475b096f26fab874c70e65d157d359ab25359f7e908c4b9053c4bb35b729fbdaf42a92f4e5dba8c4f58e1f734f9219f88d355ba1c3d405eff1cbb4619638794e52d26085062dea1c70c9a7f7f08b77da07ab62ba78104a4cab35bf84e74978b655d47c5ee50445d51c7300b623948cc9be1a886e16bff3be140b92ce800b4f10fb002ad3b06786222a460632b75173403246fec9f222a053b6de39a1d424ebe666115c0b0aed4c6ec839d81ace6ee6dd1aa91fa00d43ad6d26eed1754e27a62c14c14c0fbff23b00f98c8c9cb69fd3a3708ee5b851ad89ba0684658025d9ac87b265c0c736245bf07e7aebf8933658c34ea5da74ffde60632c1884ad35619b861f4ff5b22a150dd4f41690ad566e424ef4f83a48a62e0a299b40d23c88fad1187aa28dc9a9f5f11aeb2ab2e034c62e4ae819c476251503e86cbae84eaa062ddf92cbcb632ead5ca2d4cd99d18c6b419bca717250fde78e9aed3b63f3f5ebe614ba5b6238d67000c8b3afa2eb9f998b37775113db886df3b635a88f24aaf80d105f3442602dbbd5874f8aa6ec8d7589ae6c20880343264e389"}, {0x80, 0x107, 0x100, "872413ab0fb7d57c895de545a9874ee846a46b96e00ff2092f30882670dba75a2d3de4fb5107b9169642cf09c660b956fe0a549f117cb4888a1b9e2563620b137f85f7165af237d5585ebe6d1ed105cef9fa3e4834c7812f4b3b4068aa7ff560a81172f1d88a3413825456"}], 0x11e0}}], 0x7, 0x0) 13:02:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:02:43 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000002640000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:02:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 708.122126][ T898] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:02:43 executing program 4: syz_emit_ethernet(0xb4, &(0x7f0000000140)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "ffff00", 0x7e, 0x88, 0x0, @private0, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x7d, 0x5, 0x0, 0x0, [{0x0, 0xd, "0d44e9a02f82c76a8e530efc1d1b372bdfb7ff2e57df02931ca92be6b796221c566e3419c924107c514be88a5d4f3d4693963920fb944c302dd66bd6a8537347fd719bf33046670c640ab383cf7cb47f6dce3c6e2529591779e11f9a203ef5be6bc18a1320fc74fc26b75269"}]}}}}}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) syz_mount_image$f2fs(&(0x7f0000000380)='f2fs\x00', &(0x7f00000003c0)='./file0\x00', 0x6, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000400)="f5a6a55a706a38311bfc1d41177b5791d42adc674702b8e22afda0f172f5965f20d064f5868cddf45e65e6ba54bbfe6321585f898c29b8f3d75675cb5cfa321acdc8a786d38ad2854588944377239fadae2077eff9c44cc52a93a1fae580ba5b885b98377b74fc5526b5c8bceb31054841d7a8c464e98c54428663be7737c58a21b96a2413b54269c2fcc63ecb336710a86b606b0a4b7de04e5bcb8a6e2b431206120ac132d983cc84129d247c58a41b5ba4808dad74cec6a25772a28983f08c5584db8c149eff7d0bab1e20b3cf", 0xce, 0x1}, {&(0x7f0000000500)="13b75b36bb624676b25fe8e0adc13bf5d48315fc275d5aac6318265af6b26dcd147c", 0x22, 0x100000000}, {&(0x7f0000000540)="138cf208a9e7a85d3da9e3868c9473398b1a4604f8c902b3d178482764fbdf70db4eafa00f6ec7a2989ad25c76893cd5d23b558cc1854f874e1be6916bc78828ee7b239975a21c812eb72ccb496761db69b71c3823545ba3fc4f5da958f83bbf26b8afd921ac2ce1c2d7ca1d", 0x6c, 0x4}], 0x80000, &(0x7f0000000640)={[{@data_flush='data_flush'}, {@inline_data='inline_data'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@usrquota={'usrquota', 0x3d, 'permit_directio'}}, {@data_flush='data_flush'}, {@acl='acl'}, {@data_flush='data_flush'}], [{@hash='hash'}, {@context={'context', 0x3d, 'root'}}, {@audit='audit'}, {@dont_measure='dont_measure'}, {@euid_lt={'euid<', r3}}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x61, 0x39, 0x33, 0x64, 0x65, 0x34, 0x32], 0x2d, [0x65, 0x37, 0x33, 0x62], 0x2d, [0x65, 0x43e5b41c35754612, 0x38, 0x31], 0x2d, [0x37, 0x64, 0x63, 0x61], 0x2d, [0x65, 0x31, 0x37, 0x62, 0x34, 0x32, 0x62, 0x31]}}}, {@dont_appraise='dont_appraise'}]}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x14, r5, 0x721}, 0x14}}, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x3c, r5, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x20000054) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x2444, &(0x7f0000000200)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x80000000000000}}, {@rq={'rq'}}, {@sq={'sq', 0x3d, 0x52}}, {@rq={'rq'}}, {@timeout={'timeout', 0x3d, 0x7}}, {@timeout={'timeout', 0x3d, 0x8001}}, {@sq={'sq', 0x3d, 0x3f}}, {@sq={'sq', 0x3d, 0x63d}}], [{@permit_directio='permit_directio'}]}}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000012c0)="0a07e857c58e5b0689160ced5c1f00b7", 0x10) accept$alg(r6, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000740), &(0x7f0000000780)=0x40) 13:02:43 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000005dc0000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 708.202351][ T898] device bond29 entered promiscuous mode [ 708.236546][ T907] bond29 (unregistering): Released all slaves 13:02:43 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000003e80000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:02:44 executing program 4: r0 = socket$inet6(0xa, 0x80803, 0x87) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 13:02:44 executing program 3: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='loginuid\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0), 0x0, 0x10020, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @local}) 13:02:44 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000001f40000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:02:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 708.889563][ T1003] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 708.937107][ T1003] device bond29 entered promiscuous mode 13:02:44 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000fc0000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:02:44 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x4, 0x6, 0xcd, 0x0, 0x55, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x913}, 0x1, 0x9c, 0xade4, 0x5, 0x5f82df70, 0x400, 0x7}, r2, 0x2, 0xffffffffffffffff, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000012c0)="0a07e857c58e5b0689160ced5c1f00b7", 0x10) accept$alg(r3, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000d40000c5d021f0f4d706dca55f900797665a3bb7b9fd7367538aeacc18166c88e3adb3b42c46d7762c7407002e59eb55d09c50289054ddda2a2b300b5d4a3948110c2e9c39d964f969d4b3c8b04f5905c486c867977c9e4438ef2375d3ddc3ccf84b7ef20b6988293c9eace165add0f05546e7005135836bc7d5fa4cabe2fe2176670a18c6adcc02856b338f466dcc72a5a04ae24bbdd0cf8d1a7cc528e081d17d3368254c0f", @ANYRES32=r7, @ANYBLOB='\x00'/12], 0x24}}, 0x0) bind$can_j1939(r5, &(0x7f0000000000)={0x1d, r7, 0x2, {0x1, 0xff, 0x2}, 0xfd}, 0x18) 13:02:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 709.034240][ T1011] bond29 (unregistering): Released all slaves 13:02:44 executing program 1: exit(0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x82, &(0x7f00000002c0)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@common=@version_L='version=9p2000.L'}, {@timeout={'timeout', 0x3d, 0x2}}, {@timeout={'timeout', 0x3d, 0xc2cb689}}, {@timeout={'timeout', 0x3d, 0x400}}, {@common=@dfltgid={'dfltgid', 0x3d, r1}}, {@timeout={'timeout', 0x3d, 0x7}}, {@common=@debug={'debug', 0x3d, 0x5}}, {@sq={'sq', 0x3d, 0x9775}}, {@timeout={'timeout', 0x3d, 0x10000}}, {@timeout={'timeout', 0x3d, 0x2}}], [{@measure='measure'}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fowner_gt={'fowner>', r3}}, {@permit_directio='permit_directio'}]}}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r4, r0, 0x0, 0x800000080004103) 13:02:44 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RRENAME(r4, &(0x7f0000000500)={0x7, 0x15, 0x1}, 0x7) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x488, 0x0, 0x2e8, 0x0, 0x2e8, 0x2e8, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00'}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4e8) 13:02:44 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400fffffffd0000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:02:44 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020034000507d25a80648c63940d0324fc6010000a4002000000051a82c137153e670902018003001700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000380)={&(0x7f00000000c0)="09a55aad6163423abc75303ec3d14f6c3ec80cca59e212d42cef236734180e1e2de397c6d025702befc70607064a1414c3428c6e769f2da4f533c6ec712b52fbcc6acff6bc1359681f24b57df0b9ca", &(0x7f00000001c0)=""/128, &(0x7f0000000240)="bfcf602df80074a729a0be1ec29450022d3d84c165faf410792316c52082de81b4a3c0e7c2e6b574681eb90debf9a57fca9b7fe4e1dfefde168de516a329f4baa0a6f508c40a5f5b849af714a9f56197e2972af6379896a56f299925d94bdee563eb4d46e23be4d938a19bcdb1c891e0ef6e182de2a795f753ddbdd68347584c7f0b08050c47654156c594fcf71311c96b755dff7968b7f95c6a8681", &(0x7f0000000300)="373f8c63d0b8f405f1a2033d66c9926806b1ebb199fa41c93d5d4e4948366211df4b390d68094fce578a856828e6df32da375bfb82ffa563a693d7706ad399bb5338257cb729c134c1ffe2c78b3853ca26fd7e680750bbb83621ac2401bfaff6f998d1b2dd17ce2345c712646e14888ca8cf23b2e914ad10cb48b6089eb9eb37", 0x7fff, r2, 0x4}, 0x38) 13:02:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:02:44 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0xe2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend='noextend'}]}}) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r5) 13:02:44 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000080fe0000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 709.538809][ T1107] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:02:45 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='fdinfo/3\x00') ioctl$UI_SET_PROPBIT(r4, 0x4004556e, 0xd) r5 = open(&(0x7f0000000000)='./bus\x00', 0x1610c2, 0x0) sendfile(r5, r1, 0x0, 0x209) [ 709.732259][ T1107] device bond29 entered promiscuous mode [ 709.772839][ T1112] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 709.806705][ T1128] bond29 (unregistering): Released all slaves 13:02:45 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000084000000c0fe0000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:02:45 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f00000003c0)=ANY=[], 0x8) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f00000002c0)) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x88068}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x4000000) write$P9_RWRITE(r0, &(0x7f00000000c0)={0xb, 0x77, 0x2, 0xffffffff}, 0xb) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000000100)='/dev/vhci\x00', 0xa) 13:02:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13:02:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000040)={0x8, 0x3ff}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') setns(r2, 0x10000000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x5c, 0xf, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004820}, 0x80) 13:02:45 executing program 1: exit(0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000140)={@l2tp6={0xa, 0x0, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}, {&(0x7f0000000000)=""/249, 0xf9}, &(0x7f0000000100), 0x1}, 0xa0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r3, r0, 0x0, 0x800000080004103) 13:02:45 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000ff0000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:02:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:02:45 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400001fffff0000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:02:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x0, 0x4e, 0x5e, &(0x7f0000000040)="1d6c91dfd69ebdc87711a827483f92d06cd5d6e691dfdadbf47d496ce85f902a36c8ccc14abb27fc4cd5917493ebe74317b01837d7c2d32a6aafd770376ec668092d28fc468314b9cd2263095df2", &(0x7f00000000c0)=""/94, 0x100, 0x0, 0x91, 0x70, &(0x7f0000000240)="5dfaea4a4f759e9c40cdc8c04e492b39e0fa1e4e4e85f7b223bb4d171bd041bce7767c5e4bdb1df7cbdba9912bff99dfa290560aec06be4242c07579997dc591e834c4096a7c12c8eb0a43ff848f9c6ae57fbec16d7b8187007d6f9246b2e6dd863338bf683d3bdc489986f4482ac7b6e3d7cf99509853fb1c07c1d86f0e1caea17ad36d6764612208d087002521cab22c", &(0x7f0000000300)="4e0382e0049b73357e12b921260ab96bcd5d8a5cc3f2f887c466e9fa0e12af77f472b2886ad2e579cac62020f1ddb4ed9cbdc45a11cb9c12e48a0efa3ce17690d735ae1a0354012826be87a86410b103f1f12153fef1c7060c07e1918a435c5a5ce8b74e4c2fdd8985e61140c5515f4f"}, 0x40) listen(r0, 0x400000001ffffffd) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) [ 710.438341][ T1228] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:02:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f00000003c0)=ANY=[], 0x8) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f00000002c0)) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x88068}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x4000000) write$P9_RWRITE(r0, &(0x7f00000000c0)={0xb, 0x77, 0x2, 0xffffffff}, 0xb) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000000100)='/dev/vhci\x00', 0xa) [ 710.574993][ T1228] device bond29 entered promiscuous mode 13:02:46 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400fdffffff0000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 710.622105][ T1237] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 710.670334][ T1267] bond29 (unregistering): Released all slaves 13:02:46 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r0, 0x1d7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getpeername$netrom(r6, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$inet_sctp(0x2, 0x801, 0x84) sendmsg(r7, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='#', 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 13:02:46 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000200000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:02:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13:02:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f00000003c0)=ANY=[], 0x8) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f00000002c0)) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x88068}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x4000000) write$P9_RWRITE(r0, &(0x7f00000000c0)={0xb, 0x77, 0x2, 0xffffffff}, 0xb) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000000100)='/dev/vhci\x00', 0xa) 13:02:46 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000300000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:02:46 executing program 1: exit(0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000000)) sendfile(r1, r0, 0x0, 0x800000080004103) 13:02:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:02:46 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x6, 0x11, 0x0, 0x3, 0x0, 0x0, 0x8}, 0x0) open(0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept$inet(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r4 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_S_JPEGCOMP(r6, 0x408c563e, &(0x7f0000000180)={0x0, 0x7, 0x14, "e77deba986f0b0f59ec589f0e26e3b0b650c0ae88537f99db6b993cd4e34728fdd606c4e1c8e3dc6328c456463c3bc23acee617807e1ea54f2e7bbfb", 0x31, "a4b92c9d5dba4b04338c65a7388545947726ee71f3af1873e8d9d5f420d07820e433aa08fc30ef132fb338a66e095ada81dc9c896ba500", 0x78}) write$9p(r3, &(0x7f0000001400)="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", 0x600) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x40, 0x140a, 0x0, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x24004811) sendfile(r3, r4, 0x0, 0x10000) [ 711.376244][ T1336] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 711.422826][ T1336] device bond29 entered promiscuous mode [ 711.452091][ T1373] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 711.477201][ T1336] bond29 (unregistering): Released all slaves [ 711.492569][ T26] audit: type=1804 audit(1589720566.954:135): pid=1354 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir362459442/syzkaller.5zt4aj/539/file0" dev="sda1" ino=15986 res=1 13:02:47 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000400000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:02:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13:02:47 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nullb0\x00', 0x4000000004442, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000080)=""/192) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = fcntl$dupfd(r4, 0x406, r2) ioctl$BLKSECTGET(r5, 0x1267, &(0x7f0000000180)) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 13:02:47 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000500000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:02:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x2, @private2, 0x1}, 0x1c) sendmmsg(0xffffffffffffffff, 0x0, 0x5d, 0x40000) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000003) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x1}}, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "95cfb8c57ebde371503a38bd8e3f6ba990189977170a070502000000269a0b966b9b9d3289c8784f16963ce7c312649ce2996cd4d2fb7a95ff986185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e6265300"}, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) bind$x25(r4, &(0x7f0000000000)={0x9, @remote={[], 0x1}}, 0x12) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5f6779537836c67f}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x20008090) dup3(r2, r1, 0x0) r5 = socket$inet6(0xa, 0x80000, 0x7) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f00000000c0)=0x5, 0x4) 13:02:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:02:47 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000600000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 712.427363][ T1436] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:02:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001ff) syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x1c, &(0x7f0000000000)=""/96, &(0x7f0000000080)=0x60) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001740)=ANY=[@ANYBLOB="12000000003844a4b0183357b29b694875e1d91eba093b4fee33e3d699be56e4e5e168993c74d11fbc4072dc7c92322b1af2d20b43b3cfeb2629f0b9486d75652fcec4fbab385fdd09793d766b332469ba1ae7694ef7df2418ce14bf32c79c97cdfeda1e4fee8332abc5c6987e539ee62f493f0af8c52b13e0afa47dc5884aea43bf8c165370593453e09dd4c479f55811de2f428dec7e9f1adadac739b3282a5fa6171cc8a73123b10874faca9852437d6284aa9afa8c25ee4f907b12067564", @ANYRES32=r5, @ANYBLOB="925b00b4e860513d204cbde5698f7067636c1169bf2bac4d820a9648807767528d7f0cc272663cb22434de4a4b4d24a7fecaa0d3c607736ef6253f4b38"], 0x24}}, 0x0) recvfrom$packet(r3, &(0x7f00000000c0)=""/124, 0x7c, 0x0, &(0x7f0000000140)={0x11, 0x1b, r5, 0x1, 0x5, 0x6, @local}, 0x14) exit(0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000006080)=[{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000012c0)="ceb5049657fda2bfd7b0000058788fdcbd4d4e5b0c0384a200000000b82cb8edd1dd9dce5b0fcab9e70a06c04319b98a61fdbc7a7dec4f692f1eb642c75203", 0x3f}, {&(0x7f0000001300)="6d498b2856e6a6df1a096b68c50531fbe50b8b8193dc841df56ae364f63c32731e1fd4fbdaebb2ee9e0b572953486e634dc8ac6bb706daf4298a4335f3dd98f75775fa24c70c920b9e94282d8f02744c91a677831c8f6c7f1a0887fc60dd7c2d54d755d3ec8e55890e713c2412679cb99b33e4beb956147b436bdfd8c4c3effc40438a9bc8e3ae1c8572327119218696bf5f823d17c47b8e248d081966559f08d998a56bd4a3adc2cd2419b1da4c2954b84030e7daf86247b24d33227b18f58c22c215c473748717cb4daae4b77fb708d7250bf302", 0xd5}, {&(0x7f0000001600)="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", 0x135}, {&(0x7f0000001500)="ba10d6a50e435750a6ba2233699ecc6f63c5141b72983d4bafa97e171dafece56096c8917eb6300156de60e2618158dd168832b116f6203fe2b524a816894b6895348c6fe2a59bd7808decddf8bb86a8bcbf6de0bd12fa35f3b3eebec6f39d32943477c15cdb93997e5c18091eaa144fa427268c3318e24f03e5c645855699f5ec6062d1d3458bcfc079982fd6b5ce", 0x8f}], 0x4}], 0x1, 0x24008041) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/4098, 0x1002}], 0x1}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000001c0)={0x0, 'ip6gre0\x00', {0x1}, 0x3}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ipx\x00') r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r7, r6, 0x0, 0x800000080004100) [ 712.628560][ T1436] device bond29 entered promiscuous mode 13:02:48 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000700000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 712.691331][ T1442] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 712.715644][ T1461] bond29 (unregistering): Released all slaves 13:02:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13:02:48 executing program 3: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f00000003c0)='./file1\x00', 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x629e4eb13e7a73d7, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x28) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0x2dc, r5, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x0, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0x0, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x0, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x0, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0x0, 0x3, 0x7ff}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x0, 0x1, 0xd3}]}, @TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5c}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xa000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffff8001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}]}, @TIPC_NLA_BEARER={0x11c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x80000000, @mcast2, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x101, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'bond_slave_0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x210, @remote, 0x4}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0xfeb0, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x34}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x417}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'syz_tun\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xfffffffb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x40}, 0x20004000) mount$overlay(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='overlay\x00', 0x100040, &(0x7f00000001c0)=ANY=[@ANYBLOB='nfs_export=on,uid>', @ANYRESDEC=r2, @ANYBLOB="2c686173682c66736e616d653d6f7665726c6179002c6d65617339500d992d"]) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x5) mount$overlay(0x400302, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 13:02:48 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000800000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:02:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13:02:48 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) syz_open_procfs(0x0, &(0x7f0000000440)='mountinfo\x00') clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000012c0)="0a07e857c58e5b0689160ced5c1f00b7", 0x10) accept$alg(r2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESOCT=r0, @ANYRESOCT=r2, @ANYRES32=r1]) 13:02:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:02:48 executing program 3: socket$alg(0x26, 0x5, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000200)={0x2, 0x0, @pic={0x81, 0xd6, 0x3f, 0x2, 0x7, 0x1, 0x4, 0xf7, 0x1, 0x0, 0x81, 0x1, 0xf9, 0x9, 0x90, 0x3}}) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0x1) fallocate(r0, 0x3, 0x0, 0x8020003) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0x1) lseek(r0, 0x0, 0x3) syz_open_pts(0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 13:02:48 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000900000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:02:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13:02:48 executing program 4: syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000080)=0xf) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f00000000c0)) ioctl$VIDIOC_G_AUDOUT(r3, 0x80345631, &(0x7f0000000000)) [ 713.324923][ T1544] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 713.348788][ T1542] 9pnet: Insufficient options for proto=fd [ 713.355695][ T1548] 9pnet: Insufficient options for proto=fd [ 713.453510][ T1544] device bond29 entered promiscuous mode 13:02:49 executing program 1: exit(0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000012c0)="0a07e857c58e5b0689160ced5c1f00b7", 0x10) accept$alg(r3, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000012c0)="0a07e857c58e5b0689160ced5c1f00b7", 0x10) accept$alg(r4, 0x0, 0x0) r5 = fcntl$dupfd(r3, 0x406, r4) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000080)={0x8, @raw_data="b99d9f75add64a8a1123d889876eda47561ee62c9c1a06cd7bdc6a5840351196b09fbf16357fd9e44c8f3a2a4d6a0902dada206d6af82f3f5421ec9390bb63065103c0b62fad0dd81f9a387ab360ef46fbc7dc5571ec669ed746ab4862ff03ec8fda0b73616dcc9ae6ea89b64e22da77684fdd3b55c77ed89443fe808fe17e16f35c86f0ff8013b56f9c8cb74581d79f1f4d4ac78205a23e7485a5fd59054067d15b882b9b5a8883db6d724e9d4ff72758309608518da884011ce3e4537f81cc78112a8c999426b8"}) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x8001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x4001fb) sendfile(r1, r0, 0x0, 0x800000080004103) 13:02:49 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000a00000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 713.516529][ T1551] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 713.550124][ T1572] bond29 (unregistering): Released all slaves [ 713.643267][ T1596] ntfs: (device loop4): parse_options(): NLS character set macNäOl)~÷­ls=U not found. 13:02:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13:02:49 executing program 3: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet6(0xa, 0x2000000000801, 0x0) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f00000001c0)=0x1, 0x4) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x47, 0x20000000, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r3, 0x4112, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x10) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES16, @ANYRESDEC=r1, @ANYRES32], 0x4240a2a0) 13:02:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 713.836275][ T1596] ntfs: (device loop4): parse_options(): NLS character set macNäOl)~÷­ls=U not found. 13:02:49 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000e00000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:02:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13:02:49 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv4_newaddr={0x28, 0x10, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x8, 0x8, @dev}, @IFA_ADDRESS={0x8, 0x4, @multicast2=0x10000000}]}, 0x28}}, 0x0) [ 714.006568][ T1662] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 714.090079][ T1662] device bond29 entered promiscuous mode [ 714.106478][ T1689] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 13:02:49 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400001100000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:02:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 714.161900][ T1706] bond29 (unregistering): Released all slaves 13:02:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x17, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x5, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x48) 13:02:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13:02:50 executing program 1: exit(0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000012c0)="0a07e857c58e5b0689160ced5c1f00b7", 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000002400)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5de90b35}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x89}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd9}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040044}, 0x20040844) accept$alg(r2, 0x0, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="6005b79880a2041bb00ffe8bc42d88ae00b4ba66584d53a88b8da1e271261156a50824f053cf3a18e58da954ac9ffac0badd8716c3a0b399d8aad81c7d8c5914174dbcff6d28ae7e96523e2665ea2585a3724182628d986272387257c180e91764be4a5eb5485cfd4797e419215bafc45b73b0251b188701f725898a353883ac40b6c40286c2c1eb2f5c0608f13ca6aacdeeb7968d5ef7b7e977c40bb862641173a7a58644dd12313f1f33143379851aa7f737a84dae90f3e32213b5e63614ea1c2563432b55370f573718c17a4cf43a4e08ad4ed41dabdca9b7eb6c590b48b19662350b67a608663a21fb5c9b07", 0xee}, {&(0x7f00000002c0)="94477e7e511586db65b6d739bde9bfe02b95b0a010a7dbbd67d2b1ccb371c9dfb263fb1b996ff98b6537c6330d9efe584a3a22d5df763ddbe8abf139757e4058689d7a8d9280f91823a32bd126d6c8073a3e2779df6403e451e80090c26ea788e25dfca3b2c4618da71dd4eec046824f6845c8d1229b0ed03fdb8cfb10141f0aee6159bb3a713d2ef659117bda752aad40390bd0f8b94b183be8e39c3e5cf5b8eb6f8784e753ea5b002e1b4d64bfd2d506bf400e756c9a48ad581ee6d062ac13bea9dd194917482301cbfe525c66b88ac01d8fe27bb39d7743404a7e1a53e73c20ac39de524d355c9a3b6763982466ec97b64ea96c705fa5d9df75c63cea2146fdb323319c6208b3fbf6f5a8d6e640c8d369c4ffb30ebab760798d7935e109b6493cc174b46f51191c1ad4d683dc88bff23282e35601d8800e897d057de6beaa921f0846327f860f02ba026f1b6c97b001586de2deb5f2cc24dd48ba71b9709e728faa93856731e3b92ba1e061b1cead407ade9ea7cd75708c32e201776e463709ce9d1625cb279c71224cb20d66b9282fdfb528f55257cad74b05b0769b2f073456fcac849292f5f1576570f552744375ebdcaf3366ea3d9927940573ea6244178821cda6d8ded3bb041a9ecfe8c66b5d1d5f2575465fe0071bed5a0120c22b3ae638a7697dabc200ce758301c6939d002333fca03e7c9262a32ca40943f155a42d43ada0235ad669e497d82b4d5dc8eb84f70144cea227e710296f2df18e38007cb6738fa7f2ddcb1660c38e1ffd2f1a8d6816acc4c68932dd9421cabe2a906c40079f8f33aa8f6b7ae2884e2e7d20df9e87ae4e98b9a80b5f560a4d77fa2bf87fd7bff864905783fc1706a4319a9c342330ba3a602599b66af755522a9181113c96770da158daa75265f09f76c791722ca37d8d62a61047635cc1304dbf21c5a96c48a8ee6b7a6e031c2c873fa269465cd0dc108777e3ddf1e728de9ddb56a1718e8e7394f3925b6e15544bf63aca8adf5a4469b5a81eae47ff2bb3eff2b5cdb6d89996b27456391896c7cf2bce026546b63161b596e6aae46bb4dff77f7f0c87a81a4f8b997dc07ef19163dc18f715e43bb9193b6c072f88cb683ad8611c71c89d41188cf1a3f3e66286d5e57b4e558f5e32262d1e361d16947b16755b1edc536bba64e12061c599412d4531aac146bbe97310eed8836ee0411f736f747ad303d02311564cb59e00072df08e40ce95bd7f8bceb21cf0d110754de8aee7e4d8f597e52a8c7a42b48b407b31daea83b4931fed78e62167632558e3d75d205ab17b72d6fc1372a9cb4ad2772ec8fec07a338c4bfd9bba9058b6be8ee5f7dd14f9f0ef5643426b300f7fd249d9ad4a1bd17f10355ce80580c43d6f8dc3922e449928f67f0f90511a40fafa0c926c17219482dfcdecee7d4ca13ec90d62fe33035961f23ac3f4aa883d10546007533af46ae936db803ac933a45583647cc5212f8036b1e292f80e280b49269b500143bf39d1ed1388786df9bfe04063a79710b5348d37c8b0d2ef1f0493999641a9135b420f4f0cf8e1738204f13e4a7037864fef8a698a976ac5426806b86c6dd0385fffcb0414f1b37e33c5c870341e7ec6404a4c300f33c090e80732d3046ce6de0271410b44a9f015ac2049ac0b395b6b57c3bb33ae2023758de146aea711547e00f8382ac06fb6bb7d09225420ef29f4f64052f284b08ef23d8c70bd63bf7f94113729ab29b769dc229b07d425746a2e5c5867f61ed7b5c2add22a2d0f038a23a0703da583e1b6a0997e9cbc2b5a518eddcb01cb88bb5869eb50be6b504c0568795f293e03c23ad88879243833fee2aadb66f878a97074cc24a1baa9cf5bb690ab0fda7b1b973b16bc6f0b74da8a43b61076116a84c5fdcfa61256a80f8f759a75fbebbe987d47b89a047048798dc12820e3ea2a9f97925e3400f583a227892f9b332b4383c60471f4ca346ef344ceecaa279c0c1da1e2577119284e461a9acd1bd0a97e573c51f7aeff9badea79c804ba55dcfc6f25c952db466176f13ce41db113ad2e439df9a7e46e2265211786cf5103c95b3b16bb6b5a7e104f45af30f789b4bfdec137cd7fc34d02bda511a7636c06cf0ed5b631ab90addc8305ff5eede2f077556f04f91c26d22b0d046d24e4d41be213a296545f6ce45114ebf359120910574dc82376e8c2a20e4c50482919626a4e7f82462d6ae7084c6e12e049fe7b5b762ed59276f5916211476c6289fa29d4055a8aace95557b769180647a2654b9355de5772434a70e5db630b0ec278f3d7ee25828d28cff6aa59d04fccc8b5920a19c6abd960c603898459ff6749b9afd2e50dd57bd52c7d3ef1cfbff4878e257b15af95950edc16515a8cf5de2a4f02a907722f292b70fc429831ef938d2446c9a5e9f450994c56cc85ace728c3340c3b7c38c6ad623c10eb278fd2f14fe6ce1d07de4cee94ef3122ee456ec4757142d5e4cf1182c7b586f521062a8bf0a9d4ae1213b8c6ccdecbd959e7bd616ab5b19d232675937a86fe6c80d21f59eb24dd0c45a2825852d1698e38710414e750535c03dbfd5615b374325f710cd0dc3a518b157836eb224f05efdc71e27d0ea556e35294058a5523c7bb8f204bf7852a6b6679893c404d82d3f474957358d67f304d5edd9ab0dc2e9a2f502baf10773cd81d16f1e7bc65b1491be38cce3177a41b8b82c3361fa58468bd3354b5b6f8f4c88a4d00a41192929b89b3cc5a03ab980437e69a759264b5ee6dfa6a1b6b78a04bed68a0f077e2c5756c8a11bfb0bcae0731f3448087afce4c4b5027d370575f67377f00ffca1f5707445a1ad3a1def90e6b2a247f2f4506085a70345f08929041eb543c0b637975b421a30b80f38faaffb1aa82398118a7252c4f4a24a27f1cc85fcc67c46e3a5ff420d2a2e9a6283d27a66780b93dc4ac4f7add7d20340c7104133ac413cad5d90177f00483b3344941219aeb2f6897b2fde173e271406bf195ce38c198ffa67cf6f3c9948d6fdb5a464d7a1c2090a0b96624095f88cc6bdf8f889a270010989ed0a87ca174d82ad9a6279c983715264db99689f66c1830f2ff92b95756ac1436e67905a0b63fb122c9cee4d8ad8e66ea4a05a1b913fc68f62b5a153d0db8dcd59ac9d00578dee46b783913ea2d1847d970ce3dd9de87664fb821f79e1de14db257d1a5508f1c2907324d44557bd4f69c95f814190e5b300374231bbfb98e0b5c5863e666128a58943a495d846636d475b84d52929e0d18d674a49a9fd2d3cd6e74aad83673e8d68b584597921526aa4b4a1bb0a593398cf65a2e84b46f4e2cf6ce3ec04b4296a64f46e9e24c46da805ccf227d1b8f735d08f7533552b1fb47628c56c93144dcf61c8fb9f5ad551385a4e977c5e9ed7994b8678cf0fc75726209479f960d74701dbe3b9264977e16c30dd12f1a887150137b65bca0d3845a652c3d96086b737bbd87d55126bfe2abd0dcf2769951973c6a1c8842572118fa113adfbe9b1512e97b99438a38b0eee9e77604eaf58015f01bbc888e2bfaa693ca90f4535a0c0b552b82da3be52dbec366b5708b255a068711f291804ee9660e67922648c56f1db9f4343a5bbd90511e43f9ca52cd02d28b2ba481a2ea4dfb49fc49e1425f12425bbc1f0767e81b2682a11abac4d1aca7cb483ec3d845965c347eb28fa435834672329a61855304e3b55435503f731f54d427e73a9b25edafc050357d722dfd0e1f1e5cbaa2d56ed4caa26c8fdba1eed3c3f9bf7b5c20b91c907279c5bb19af8f15b6bb5fcf0da93a391fb184241db74281e221d17657776254f0c484c2349d3ba599559c00a7cf3c1b0c620eb07979abde6d52550e13bfbe8927c7d0bc0b27c17296b069035e77b1b9b3785fe81e23e27dc90b22deb139c08787b71f808b695940cac2e32527620fcde084267d49c7243b482b1493933bdad3fa4d2e752bdb9ab7a9dac17658fb78cdf9b198c802d86b86b0208f5099ca492ef4ddc39a5846e1b6f7a4dd958d186642226c171e1b3e99a9aa7541fe0606fc7435f9eb5f1460c8d1d27a8b082dc16b53d113aaa3be44df7675a7bd7c440d92ee12ad9837a686aaac686131981f8b2483350883d005cc0b26f592005541a842a2381617671214d6aa4f510413ee35e0c7dbbd947560ade81b0c11eae4837cf76730eef044705f4ee8d0290ab3c29e52e2b0bfe702ddc31198ae91a9d15259ca837e99b8d7e1bd56a2fbfc0b4bbc69d3432e103e96a6f8a0552bfe3c5affd4ea13c3fa17f6f69394ff3b059e8676304f849459e73909fdba6cbb2f7f83f9abbc74fa1d1a2ee8bd42e1c21e7c3b5376e6abb0edc3c8c6c21704d3321d199771f58908d87033dd15c1e720f4aac70187b430a4f8c8b91a6e36fd738033088f34ab31d316c0722a2794c52b84b1262cc5ca6229a58411ba1be8dac363fbdaf294d0d2e5f75c6f12dcfed3abb0027b0d962bd6e8dcff653a7811d550ea041ce61bd521cd174be2e24827c846fdfae971682be3bcf3dbe814b9e01ee912294aaa4b6a5e796a61caf9a71f1bb66e963de866324c9d812d6363c43375d00bc430a1725ea2182d3214ffece32ff569337f4027236df00d7459c5b5804f6177582c05d8f945bdf3cc5845350e57108bcd49033a0e09c5471f35ad391576200d7bf5fed8843f49191b1bd645a353c2582f275335c7c9d708cd94a8949bb034182c90fb12ff0e7280aacff08735aeb43d357c91482aa80167c08f56c0928bf242d25c00c10e3ce8c379542373ae00bf57a55a6b9f028bb5fa930a394e62dcf13f1845610798c5b0581ab0ec54d292b485d954d56a61c9847dbf5f487e62aef33a019b4657c41fb4ac7758ab1b2f087a2e7f91344d5ef78de43667217cf1d13d88fb00f06ddc60dda852f049dc8ab299751a570c169f3c72240e200fd81e95c374eadb4a7b5545f936b8d3e90e719cd702a3e4bcc5f694ab9bfe37e00b13d8c1f5be742883c95c830775876e9c60cfa0668a4762e5a0d50352692d062e511a68fb6f51c6fba23ef8b58b8f94fc22e69f2bc13e9450bb34ff301bf9dfe8de52e56b2a82801db845628fe0af51ff3697ad4064e8f9ce562d1fb11650c890dd60acf19735507c5ceda3195db622ebbfce9091c9488c5046a395d0fd8352dde069303edb9e062814fca9d0297cc77c3025fa6e7b6cbb48b248b27320e1720458a5c4d19e71c5cbf369a1f4b09d750a6682a39e020223fa8869187d6591c6e218a388ad370fc6df7e310d4e57618eb5421c56eeae28c5bad0050562b90c0b32b64e16944f0cebdce88433cf9421fc0dacca46c5eff87176523d21f99bf24cfae4c287db1e8aff91e6c3acf77ee17f08d35ad5bbde2fdc5367864f5ff089414fba4ae2cab03593cc441a3f641c62d426490788ff3957b8f9473fc02518ee54c871f3f1645b62b1f3f3d36231451be5c217d3bb18eb6ba9a48aa953d7e9a665d24e970e056c69c1f3141321eb095c86d6e8eeec7a3b9a6f5e852135c24e0bef3862e0dc0b86c820108f90bcb0ebd4c8f530a3c260662ed4cdf2eb057664d210632c643d26fe767eba5725c95d431069a7b30de3f94e2fb9f074f5d16283075d079558c575fb02c43136702c92d1880574e3d8fa2e08a3aec86b342ca15891b0f092335c6f33102f5e80805d2012a661ddc46bd3f0e925774da66d02f32edda05fbca00448613650359606ea9851470e7c035ef0076d53d75d8874a8e25e9f5d70da10e2d1bcce9db9b3442ea24f3966cc0254bffd21", 0x1000}, {&(0x7f0000001300)="08b63e4e852c3bf2bc0c7b73da84d30d3e417578f901fdc66548f595481728a7879f6f61682626f99bd9c87a8d13ee73010eb0c85e5842c6a2effd994dce4e61c817668a19108ad7f150e95bcb0296119d7ed7c052e307121e020b9d4a1b19dc458fc0d7a9cbbca647150eede2e64c8d13557be626b6d146fadaa5a10ff844d4e776d6e0ad0ba1460860fe7a2f9eab16de170f2f18a6f31cd625e98ebd87520bd4cc4029152365e6de1317d6cd0ecbc3c51405551d200de0158da1d7dbee58e2a733f47e0285abb983883d7261aff06bb74762b390a4e706e15f3f064a8431d89eaf834f2a172a271f8b0b28163333568f95c3ff44ec559f8d30ff91fa82896ebeb9a7e8af5a6c1d1a18e90f090d9934b63c85d3708239e8bd02d26b6c4bfa254b5f3b116b46fce188ec24141f48a80f6a3396ed42e82ef9537195a7aa6a6655f9506da052a0a7fd1084b9aecee09b937b087c82eded36d4df7a5022b383fbde515da3efafa7ac79050f666700fb0e0cb0a8c006f38f8dd479022ef9588c8bd736662c658c8c881fde09e0110ad0eb58e80862e03c33e28934f4da39159efc313713da5e3b08de55fdb2317056de98e29b917c2cfddd199689a0737d05a1dcbeafca8b69272d833a4553b49f4e59a9b0077090378f6b2d5ec766828ba21b9f646088a9e6bbedab7c5ea6d53a090fb66848cb4155d82f8b0dff1aba14cbc5fb9e8bbc361b90f4dde7d2eaa033a22ae009ef1cd9b98e10383089ee09d234815a40a1b92fb4b010e1f689c14a34a2bc81902b35f88c597ac2ff4079f49267f7a630841316f48ca059080a3642527647231a9a27f3bcdab86ca951d081db6b1912a449ba5601af29e0f3e15bee2aa68691391fc6d69df1ac6d12c2faa5af7e28a395ac1f09292c198829ae417dbb0d46ff8ce6e62f8bbdce532b0fdca22de05931b3704e937bf1c70ad3da1e50a63cabb09aaf0ed32d42431afc58094f7b8b70bbde715c6926f7ba8460ac988d5663512ff0132ab0b220f9747e14eaf5c398922e9126de503d4331b235bec5e1b12a4e317e7b70b7c28cae0a82a2483592c25c1a8b3489f557783e166a2016f087229788c0b29011543b9ed5f37474c27b22fa0c873ce49adb3f39cabbb9c6616b8124ec1188036dc0589716c356c8c895b8d394203faf8523a483a1e28b4ca10ac59a4e36c647125be1e23fe6390ac73dd4ffb6e1d34110a21746d687c23bdf8be8054dc9e0cf8dc683e9119df5b3c65a76a1abdc995bd741e3ed8ef5ffe60fc5f727380ec9420c4c125a13dc9a43e92726739cf9dd5386812c65cc63b0c98a700e7bedadbbecd18069279bea4d2a41032a378a01f753fe83d4efbc1f0cbe7050779a7c6b8632625cb6858efd63da92e6e2ef296556408f3d3ea9185387f4fcff9383eb169989bf8d7025bae72a99fff6502780699256cef3cb6b040835d3b98c715a3eb61cb1b5f33592d59f0a9493f629ff55388b3efa3981bfd81b47281410d5cbab14f8cd1c2a476c9891223c52038621884d9a32ea28ae0414756a2b02d2a56f3cddec81045d533090a0fc45606dcfc139d9f2fd62a24fbfca12d1d93d6967b509a5feacfb9fb24f765f76cc0e130c4345ef830f833ed765df9b5f40e76817f732d71292e831bca5edce6ff37976bc9e58bc21e03799ec6b631d12dd965f6f498d3621d010603a980f1e3432a4f68a211f366712ee80a9491a7c453c55e88abc71a9c8cdf0ef2f42017f1ab16eef781a30288a905c8f753eae3d3fe0969f2de27b0f4c85cc4d0c92d4272f2922dc59c5365c642d05b0547bf895057b403ba201c1307766831136e6685c11854f45fc2c39b01285d8adaeb9f3813798eaf74758ef69623cf01a32f63ded053cecaca3035cd1f3490a5f5bfaa2575603ee7c51b89f04bd52f477d7b987b6bd9fbec42ec0fa7066e1d87d9b699ab1b7edcd83045882eb6a03519e4125b33e8793555f64733d468998883ad97c0b3026d7378f37f854cdf3f0d0dcd6ed28356328d6a03cac18728797b58cb45d87781a10fe3e110bd41e03333b187b2c529d27da1a6b5f252b6078317227a71020d15913be8dfbd8ea0005f5d97269bbe710300b96cb8935990a05a00fd4ddbd3801662a766516b128fa6b97dc6fe9881a49812807bd12c9db5862d307f8b2d8f684f0b99a30584672f24835ad6ed8ef6646bf467e6b732c02b88376e95800f306751b82d5c6df7998bfe375e18e323cb7575cc97ecde670be46a9f2792fc34b49c4e2013c7f2f8f19f65bb2d67b8415e1ccf056fa3ea4d121325a8c45c0e2dbc1bc8a772c2f1f6d7616221bd50e0f7108a5464ae3f6825a900d2a643dd35d1a40fa679ba32a2b0f883513a6c2d0a6710d2d6c78dabeb1c045ee00dd187ee1ea62926165fa7b10788904f38bf408bd45fe84be7a7ecd004ae4c61b66d68bd8453e23776543812069cb2a0d73d024771e6f969d6727cad041c76e108933b0d7485646511874aec3bc0dab9cedd1cb79ca8ca7f4dfa033036e6d49daa231c8da4da62c2617887707a000fc2873344190c1f62ab795b02451787dda0436b657b8f36cab82152f0827e4d6ca867465199a0172212689714de10fa22250400456cde179f637f368abaf617f0acc753f85c1977378ed05de964566eb7e2360632af77dabe64831929d3f65019998de9d7ba74b38d341dabc295c581e899bfac883c702f33f3d30412b4f71c3f3491a7e70c99a0746365347472e88e17b7e1e051eca48c864315af52c7651c40340f554f03768a120321f2a283c0ae9f0e6cc08907157f7b5728bfd832682364fc96d0517b08b84c6b6ccc4a8f55db055c296ada9a0824e956dd4f75fc3250fba5ee066099dff7eba6e27b9b15adb2e9442527a86280143a6b8f21db23ed78c717d16bbacf42cebcd064182e79c3200782e9a9adb52b193503d7522abfc3c7883cfdea81f139f049db719e0b93ec0eedb6a954843d6d302d84b9def87ff0a090dba2cafeedfe72afa1f3fb07a748abae2ded36df25eb71c6432883537dcb75933b4d1cf3b1a5dc46b2dc69c05c9421e850f81369d6eadc0545516a19ba2f41801ff7c89fbc07e5a4f09bbfd289c0db86de6c34a41bb135fea4872d376d6487f3d2e559a8934ab15b9ba2c9999fd98831f8f85b537ccf8242c975e4f4996b2210c0cbbda18017afc3dff558280deb78f61b307406231f185ec615af7f0b87e93c4fb8567541baeafbb0e4893a91f09130f97775e47f40092e01f68a3c92ae4df2120375a37cb2686022136c01efd239da8d753a193f2335062324ac3a250685c0eecfebf11f9c24731b76540f3edc3aa880d038e80686ae555b62cc8a3754c6b8bc93c60c20e637bf7b8ecd1f2f56c54e4afebf58a3c85145112a7b7b71b7587e2551215feb454e2d4f9e2ac87af5a925e6a6a28872f870947805dcfc3e9a00da4fa759ad19fe1cee7ddc66482ab4417684204d356dd3a7592437166ad891c1884e226490cd92e8c4def260818ddc1c6a39e917f9107df925dea4cc9d9feff311cfd2c015c8204cb65065487aba1b43cbc07d53fa21bf4ba3a6e4181d2f2a1abd97b32770afd3937bb40a8a126799af912e200a4319ce412e116037409fae40d5404eb6796b09621c4ff4a91dfd314d4c5ee28c7cc8fc3dbf88e1fbae7a034726716dc6b521e77f9072ff7f3b90000bd1fa59aa85f934858b506afc40418fd7e0969740d2c7fe724547d6fdd237fa3e1addd43c289c4520933ead59e10ca82ddd1fa6a98e9b727531b93948e53ea1cedb57df0ee67af48a41f491c8ea9c427de613c12893c273324c06060160e84d87b773942b871a4a2ba1985cc4d638db551d195f2f3b33e083594d1f4ecdb3743fef7574f18a7c3f693bfd5255de5d036f57a746dcd99efcb4ac0248751931b1c85419d34ca70094258207ca7ef299fbab53c3990d0ff217544c3f56b691ddfaa0f919dc673321d5d247f2e141f786ef8d728677c8ad8ddb29dcc0daf9d72a17d049cdaba22338ed4c2b8224e932792f520e081c941c9468c01db4d11a0989f2f95266f563f9c43a4645b6127e8ab3793c4b8a50ceec30e430366fe9958e30e2c0c1580c7bb022d12c744bc203808075ec501e5387a8daf4a542b6aabf49c33682bb5259cfe8b1d078985665637dfbb472ad9b43c02e72af6795c848a107c6d6fb0eb65cb92f1a60c88daec29048b5aef6345b39a05c7d42099720556bf43d0e19901bd8a7c2f385259473c88ac0750bf2654096d4ecdfca5ca8da282ad0d3f62945fe59df5fc21f812ca1df34b3a3329c17fb638056951d82a36e7e0299b6eb722f8400de7ad39960788355c18f339f82ef1b7e6d24d61aaaa13a6362cfd3a359b76b9e60e91b7700f8819d7899b72d39a01c9db16a5385a3ac80caafa35dbcfb127b5c06b5cbe00c66f1ccfe3923a4a091158e6603dd67b5fa403034d614630a5a7b9493e8ba82024196a73a252c81b801101e75d6b984ed6c68e4e000c1cdc24b42aac0409518b42e34b249294d0a6d0419290ef1c02170eb97d590f37e07967d0735d9c963082ac7f0c498e2879eb78195f73f712d8ca60064ac94c832f3b9d41887523ca19de538448a4678ac6adb2946c557433578b6eeddccbdc97233e75a345f8d5fd15a1c514aa312c72341dc4d1726ed91c2f45b8732b3401cf13afa0fac26faaaa0b0cf2af023544b650c088b7ea33c025b66f2bd97c2138503638ef8641d08e9644f4698039031cfd332fb010e38680fe5c023134106a6aa5b8f7143836934c20e8917bb66ffcd49aef910bebb886bf8dd203c3bcdb85ecc33c49dba6d7cc197e9afafa8db8237bbc5a1d590c2444211c3d45ed32c907e544d0ccb85acb241aec405a07f915217692013cbca57d6b764b95526690f4ebbd31c465cc3f98d12d33c0677270e0650546cba4320ddc6221aada33e8aa18642d9c548601f8e11b7525249f0e1d2683d254e2f43c827a0203d3146d0abe2f3c409bf2f263d7306ae0913be111d44313aa98de4e1829e047e0fff48ffd4a9ebaad99e1e509299c05608029b820a59c30bf5cbf76f45494c7367fcaa57ef706c2781498e9c145416663f87810b66862292988105d8cf9f48f9d8a3c0e810b02e7105b5fc88f95add983a1f76fcc4f285ba59dce7a76cb703cfd9ef912c7629799984251128a4bf89f34f924d98bf818f47826bb6b3a928daa197b28450ea0c4e520b6f1f59312f333d5d98c4cce060953a358186bce8136e2c953477a2214a30f575161b3647266e9c8354b5cc1835fd77ef77ccd772426f90f03ae200b76742ec74b77714ceb571bedc9cbfe4c531dbbb7f5b8d59803df3e870d73fb669d6c268fee3007a8662f7e0c555e575056e3c2d01141c233f5682087e3a94a9a8e2d534b8a11461e8c877ddd1081a10e0a932de3278559fe699d9418394a8abe6a6fe9b3ee975cb87ccab8924f5e1e2ac69c6d4c3fc14a7e2e9bb59aba84e6fd93333ec04dc78501d1f1c98db32b01232b3c2e594579239a020487f6b2e7b0e2f883292ab84d6f74383a1be609aaebc1ca97db50e802daca747fb9c4ea694fb2081a5045af5eabf27c631b405e7091c548a4e0e254e6a2057799743132dbbd81de7173f85c4f2ca304158303b1e4c231921178aa47e36d9f1cf826769a380f189d094c9abb4057744ef03f77aafea8aec499f0ea2168d07d702f79372a0eb831165a030088c270306427fa2bc7677bf47cbee2b9912aedad25d2a5c9a1a7c5e84542a0f494770e02cc", 0x1000}], 0x3, &(0x7f0000002300)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x35}}], 0x48}, 0x4000000) bind$alg(r1, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000012c0)="0a07e857c58e5b0689160ced5c1f00b7", 0x10) accept$alg(r1, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000002440)={0x26, 0xc, 0x1f}) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000002480)=0x2) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r5, r0, 0x0, 0x800000080004103) 13:02:50 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400006000000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:02:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13:02:50 executing program 3: perf_event_open(&(0x7f00000020c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) 13:02:50 executing program 4: r0 = getpid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r2, 0x8001a0, 0x1c, 0x5ac484bb51fa106a, &(0x7f0000000380)="4d50b441e692763513ef874588a8ffffffff00000004122e25d30806", 0x0, 0x403, 0x0, 0x22d}, 0x28) r3 = creat(&(0x7f0000000300)='./bus\x00', 0x15) write$vhost_msg_v2(r3, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x440400, 0x0) write$FUSE_DIRENT(r3, &(0x7f00000003c0)={0xa0, 0x2dc9127aec631d4d, 0x2, [{0x6, 0xe, 0xa, 0x9, 'syzkaller\x00'}, {0x5, 0x6, 0x2, 0x9, '!('}, {0x6, 0x80000001, 0xa, 0x0, 'syzkaller\x00'}, {0x1, 0x2, 0x3, 0x80000000, '}{&'}]}, 0xa0) 13:02:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/18, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:02:50 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000840000fc00000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 714.803266][ T1774] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:02:50 executing program 3: syz_mount_image$reiserfs(&(0x7f00000000c0)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@nolargeio='nolargeio', 0x3d}, {@data_journal='data=journal'}, {@balloc_no_unhash_reloc='block-allocator=no_unhashed_relocation'}, {@replayonly='replayonly'}, {@balloc_test4='block-allocator=test4'}, {@nolargeio='nolargeio'}, {@usrquota='usrquota'}, {@jqfmt_vfsold='jqfmt=vfsold'}], [{@subj_role={'subj_role', 0x3d, 'jqfmt=vfsold'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x0e,\xe9X\xe1a0m\x10\xd4\xf3^\xb2\xb5\xa7s5\xd4\xa3H\xb5\x14\xf3c<\xeb\xdc\x05V\x84a\x8797\xdb\x9f\x1b\x17o\x96`\x84 \x8a\x9c,A\xbc\xa6\x1c\xb9N\x06\x1e\xe9\xe7^z\xc5\x95\xc1\xd9Ui/\xeb\x03'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type', 0x3d, 'vmnet0[^vboxnet0/'}}]}) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 714.930690][ T1774] device bond29 entered promiscuous mode [ 714.937041][ T1784] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 13:02:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 715.050502][ T1806] bond29 (unregistering): Released all slaves [ 715.118460][ T1825] REISERFS warning (device loop3): super-6509 reiserfs_parse_options: nolargeio option is no longer supported 13:02:50 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400002c01000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 715.326216][ T1825] REISERFS warning (device loop3): super-6509 reiserfs_parse_options: nolargeio option is no longer supported 13:02:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13:02:50 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000840000f401000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:02:51 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) ustat(0x7, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x204602, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x10) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf9b3}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_FBUF(r2, 0x8030560a, &(0x7f00000000c0)={0x18, 0x10, &(0x7f0000000140)="599adf4f74f821bb9a804033c54841bfeac66ba04a289087c2daa94662dd1d4a4e00ff4e7c0facdd8d406c439b8f5441a8c58e49265b3da77c2c1b3f715f2789399f01e1a03edd1b927f844d5d68b9d9c5aedfe48a74aeffb207f55d2dc9cc26d8ba370745301b863ebddda85610ed2d5ee58b1defe7edead1aa0064eb9b1b3974e0544dda3bd4044629407d9627039d5c5ddab08d6f0747bd5420565fd502d00744166e3c7cfd3ea5e1c755257b11d633152eb5307e6ab5bdf69e8e31", {0x10001, 0x800, 0x6b1e0001, 0x3, 0x240, 0x7, 0x4, 0x20}}) 13:02:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/18, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:02:51 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400006402000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:02:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 715.892446][ T1894] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 716.051797][ T1894] device bond29 entered promiscuous mode [ 716.106620][ T1931] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 716.184631][ T1945] bond29 (unregistering): Released all slaves [ 716.199232][ T1933] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 13:02:53 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = dup(r0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='lp\x00', 0x3) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x0, 0x0, [], 0x5, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8) syz_open_procfs(0x0, &(0x7f0000000040)) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x2bcf) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x22400, 0x0) ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f00000000c0)) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000100)={r3}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000002c0)={0x66, 0x8003, 0x0, 0x6, r3}, 0x10) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x7115}, 0x100) 13:02:53 executing program 1: exit(0xfffffffffffffffe) r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/route\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, &(0x7f0000000140), &(0x7f00000001c0)=0x4) sendfile(r3, r2, 0x0, 0x800000080004103) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000100)={r8}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x1272}, 0x37) r9 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$sock_SIOCSIFBR(r9, 0x8941, &(0x7f0000000240)=@generic={0x1, 0x7, 0xbe3c}) 13:02:53 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000003000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:02:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13:02:53 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getrlimit(0x5, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}, 0x1, 0xc00000000000000}, 0x0) 13:02:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/18, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 718.486916][ T2019] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:02:54 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000840000e803000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 718.544497][ T2019] device bond29 entered promiscuous mode [ 718.570300][ T2043] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 13:02:54 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r6) write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000001c0)='1', 0x1) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x4, 0x3, 0x2b, 0x0, 0x0, 0x7fff, 0x800, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x66, 0x1f}, 0x10000, 0x6, 0x8001, 0x1, 0x3f, 0x78, 0x100}, r1, 0x0, r0, 0x12) socket$nl_generic(0x10, 0x3, 0x10) write$P9_RSYMLINK(r3, &(0x7f0000000180)={0x14, 0x11, 0x1, {0x20, 0x1, 0x4}}, 0x14) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) [ 718.618416][ T2035] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 13:02:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 718.736461][ T2019] bond29 (unregistering): Released all slaves 13:02:54 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x7a0080, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, 0x1409, 0x400, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000801}, 0x4) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_newrule={0x44, 0x20, 0x4, 0x70bd25, 0x25dfdbfd, {0x2, 0x20, 0x20, 0x7, 0x6, 0x0, 0x0, 0x1, 0x8}, [@FRA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x40}}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x7ced}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x4}, @FRA_SRC={0x8, 0x2, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x40408c4}, 0x4005) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000000000000001e428885e41b8fd9a6817bf3d84c57b4776c616e3070707031766d6e0004316d643573756d00800008"], 0x44}}, 0x0) 13:02:54 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000005000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:02:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13:02:54 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/29, 0x1d}, {0x0}], 0x2, 0x2) writev(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) tkill(0x0, 0xb) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000100)={r3}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000000c0)={r3, 0x2, 0x30}, &(0x7f0000000100)=0xc) r4 = syz_open_procfs(0x0, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x39, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xeb}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') writev(r5, &(0x7f0000000080), 0x58) 13:02:54 executing program 1: exit(0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r1, r0, 0x0, 0x800000080004103) 13:02:54 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000840000dc05000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:02:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:02:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13:02:54 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xa, 0x2, 0x0, 0xc4, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x7, 0xffffffffffffffff, 0x3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0x10040, 0x98) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7, 0x2, 0x1, 0x2, 0x10ce, 0x8}, 0x20) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10800, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x34f, &(0x7f0000000440)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A'}, 0xffffffffffffff9f) r2 = shmget$private(0x0, 0x1000, 0x400, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$IPC_RMID(r2, 0x0) syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x3, 0x2) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x20000, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$DRM_IOCTL_GET_MAP(r7, 0xc0286404, &(0x7f0000000400)={&(0x7f0000ffc000/0x4000)=nil, 0x4, 0x2, 0x0, &(0x7f0000001000/0x1000)=nil, 0x1}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xc8}, 0x1, 0x0, 0x0, 0x40}, 0x4080) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000000)=""/49) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)=0x8) [ 719.513392][ T2137] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:02:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 719.690241][ T2137] device bond29 entered promiscuous mode [ 719.698169][ T2143] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 719.713389][ T2161] bond29 (unregistering): Released all slaves 13:02:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getpeername$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) 13:02:55 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000006000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:02:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x15}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 13:02:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13:02:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:02:55 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000007000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 720.380901][ T2247] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:02:56 executing program 1: exit(0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r1, r0, 0x0, 0x800000080004103) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000000)=0x7fffffff) 13:02:56 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000040)) setsockopt$inet_tcp_int(r2, 0x6, 0x24, &(0x7f0000000000)=0x7, 0xfffffffffffffdb7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000300)='sit0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0xfa74}, 0x14) socket$packet(0x11, 0x3, 0x300) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x1ffe0, 0x0) 13:02:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 720.491437][ T2247] device bond29 entered promiscuous mode [ 720.504993][ T2253] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 13:02:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000100)='rxrpc_s\x00', 0x0, &(0x7f0000000180)="d7067bd119f0ffe1", 0x8, r2) [ 720.559954][ T2247] bond29 (unregistering): Released all slaves 13:02:56 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000009000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:02:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13:02:56 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) getpeername(r0, &(0x7f0000000080)=@generic, &(0x7f0000000000)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') preadv(r1, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_TREAD(r4, 0x40045402, &(0x7f0000000140)) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000100)={r6}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000040)={r6, 0x69, 0x401}, 0x8) 13:02:56 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000840000000a000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:02:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:02:56 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000840000000e000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 721.184205][ T2363] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:02:56 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000012c0)="0a07e857c58e5b0689160ced5c1f00b7", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000006080)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001300)="ceb5049657fd28621a14e006a2bfd7b0", 0x10}], 0x1}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/4098, 0x1002}], 0x1}, 0x0) r3 = accept(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000180)=0x80) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000100)={r6}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000001c0)={r6, @in6={{0xa, 0x4e23, 0x9, @local}}}, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe, 0x1, 'ip6erspan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_FLAGS={0x8}, @IFLA_GRE_ERSPAN_INDEX={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x4c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 721.242364][ T2363] device bond29 entered promiscuous mode [ 721.275628][ T2385] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 721.350564][ T2363] bond29 (unregistering): Released all slaves 13:02:56 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000011000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:02:57 executing program 1: exit(0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='fd/4\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$RTC_AIE_OFF(r3, 0x7002) sendfile(r1, r0, 0x0, 0x800000080004103) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200, 0x0) [ 723.332474][ T0] NOHZ: local_softirq_pending 08 13:02:59 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000020000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:02:59 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 13:02:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x0, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:02:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13:02:59 executing program 1: exit(0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000040)="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") r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x8001, 0x0) ioctl$KDENABIO(r2, 0x4b36) sendfile(r1, r0, 0x0, 0x800000080004103) 13:02:59 executing program 4: connect$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0), 0xfffffffffffffd08) socket$inet(0x2, 0x3, 0x2) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x1) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) accept(0xffffffffffffffff, &(0x7f00000004c0)=@pppoe, &(0x7f0000000540)=0x80) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000980)={0x18c, 0x3, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffe00}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}]}, @CTA_NAT_SRC={0x28, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}]}, @CTA_TUPLE_REPLY={0x7c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={[], [], @local}}, {0x14, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xb4}, @CTA_LABELS={0x20, 0x16, 0x1, 0x0, [0x8, 0x9, 0x9, 0x8000002, 0x0, 0x1, 0x1]}, @CTA_PROTOINFO={0x40, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x20}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x20}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x83}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x80000001}]}}, @CTA_NAT_DST={0x50, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={[], [], @remote}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x1}, 0x15) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r3, &(0x7f00000038c0)=[{{&(0x7f0000000140)=@nl=@unspec, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000000)}}, {{&(0x7f0000000080)=@in, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000480)}}], 0x4000000000000d6, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x60242, 0x0) ioctl$KVM_SET_XCRS(r4, 0x4188aea7, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000000000200400000000000000000000000000000000000000000000000900000000000000d4b90000be000000ff01000000000000f7ffffff00000000000400000000000000040000000000000600231fad9f656668bbc0d62f1d0000000000000500794d"]) syz_mount_image$nfs(&(0x7f0000000280)='nfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000000340)="b578d2e5d4d72e5864a11c7fa6695f4d87bb6429a4dac234f7db70c8d468a9a0fb155de5e354abcfdddfd01429d43ee32bc408b46979ebdafc12815808e899d2b3d1316026c771a330c4882c3cd8bdcdbd5d5102d2b85d254981ff84d628b962a5e1ab56daa2e2b1d32b36c5b21cc08657cac0f1eebf", 0x76, 0x6}, {&(0x7f00000003c0)="b1c9a80ad745ffa280118887166b32173dcd03b071d63c88a0f403d3f08028a8688238feba64fc9f6cd447b98fbfd8405bcfa1bf757b8a67cc360686a598a2c43cc4", 0x42, 0x5}], 0x2028001, &(0x7f0000000480)='GPLmime_typebdev\\\x00') fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)=')sec\x03\xd2\xa0}p%', &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r5) fadvise64(r5, 0x1f, 0x9, 0x1) ioctl$SNDCTL_DSP_SETDUPLEX(r3, 0x5016, 0x0) [ 723.666764][ T2473] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:02:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x0, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 723.713099][ T2473] device bond29 entered promiscuous mode [ 723.744154][ T2512] device gretap52 entered promiscuous mode [ 723.752040][ T2512] bond29: (slave gretap52): Enslaving as a backup interface with an up link 13:02:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13:02:59 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000840000012c000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:02:59 executing program 3: syz_read_part_table(0x0, 0x2, &(0x7f0000000000)=[{0x0, 0x0, 0x1ff}, {&(0x7f00000001c0)="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", 0x1da, 0x5}]) [ 724.008891][ T2534] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:02:59 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.stat\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x47, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, &(0x7f0000000240)={{0xb4, 0x1}, 'port0\x00', 0x46, 0x0, 0x800, 0x101, 0x800, 0x7, 0x10000, 0x0, 0x2, 0x19}) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[], 0xda00) write$cgroup_int(r3, &(0x7f0000000200), 0x43400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000080), 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) [ 724.106798][ T2534] device bond30 entered promiscuous mode [ 724.172880][ T2560] device gretap53 entered promiscuous mode [ 724.180306][ T2560] bond30: (slave gretap53): Enslaving as a backup interface with an up link [ 724.200051][ T2580] Dev loop3: unable to read RDB block 1 [ 724.211998][ T2580] loop3: unable to read partition table 13:02:59 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000060000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:02:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x0, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 724.231075][ T2580] loop3: partition table beyond EOD, truncated [ 724.237634][ T2580] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) 13:02:59 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000264000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 724.391271][ T2580] Dev loop3: unable to read RDB block 1 [ 724.396904][ T2580] loop3: unable to read partition table [ 724.414248][ T2602] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 724.462478][ T2602] device bond31 entered promiscuous mode [ 724.468701][ T2580] loop3: partition table beyond EOD, truncated [ 724.535086][ T2580] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 724.583814][ T2636] device gretap54 entered promiscuous mode 13:03:00 executing program 4: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmsg$can_j1939(r1, &(0x7f0000001440)={&(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f00000013c0)=""/122, 0x7a}, 0x40000000) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x58, 0x0, 0x108, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfffffffe, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800e000000003000000000000000009038e15"], 0x0, 0x1b}, 0x20) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) write(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1], 0x1f000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 13:03:00 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000840000fe80000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 724.601619][ T2636] bond31: (slave gretap54): Enslaving as a backup interface with an up link 13:03:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r5}}, 0x20}}, 0x0) 13:03:00 executing program 1: exit(0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x82080, 0x0) sendfile(r1, r0, 0x0, 0x800000080004103) 13:03:00 executing program 3: pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x1000000000000}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r0, &(0x7f0000000280)={0x1a, 0x0, 0x7}, 0x10) sendmmsg(r0, &(0x7f00000001c0), 0x400000000000150, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="e70b7dd5b42a7c959be333e8b1447f6d755ca3870d484ccabdfdcc17d961086332c624cda28189176b046a66656e362ddf563611f4c83fe7196328ddbdbdd3ef083b2fbc83cb335fa22dd36f0a6cdd533a27b4a17e9b7e401c5fc6d2c050", @ANYBLOB="00002dbd7000fcdbdf"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4011) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) [ 724.855205][ T2656] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:03:00 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000840000fec0000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:03:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 724.979493][ T2656] device bond32 entered promiscuous mode [ 725.051404][ T2661] device gretap55 entered promiscuous mode [ 725.113976][ T2661] bond32: (slave gretap55): Enslaving as a backup interface with an up link 13:03:00 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000084000005dc000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:03:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r5}}, 0x20}}, 0x0) 13:03:00 executing program 3: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c80)=""/235, 0xeb}, {&(0x7f0000000580)=""/85, 0x55}], 0x2}}], 0x1, 0x0, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000002c0)=""/112, 0x70}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000340)=""/37, 0x25}, {&(0x7f0000000b80)=""/68, 0x44}, {&(0x7f0000000a40)=""/125, 0x7d}], 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000880)=@caif=@util, 0x80, &(0x7f0000000540)=[{&(0x7f0000000900)=""/128, 0x80}, {&(0x7f0000000280)=""/11, 0xb}], 0x2, &(0x7f00000006c0)=""/13, 0xd}, 0x3f}], 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x30}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(0xffffffffffffffff) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, &(0x7f0000000e40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="20000025aba084cca419cbc87f5340d3bd7000ffdbdf2508004b0013007f9b08"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x24040844) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000c00)={&(0x7f0000ffd000/0x3000)=nil, 0x7ff, 0x1, 0x115, &(0x7f0000ffd000/0x3000)=nil, 0x800}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r6, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000100)={0x30, r6, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x840) 13:03:01 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000084000003e8000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:03:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 725.508356][ T2731] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 725.607332][ T2731] device bond33 entered promiscuous mode [ 725.643494][ T2744] device gretap56 entered promiscuous mode [ 725.685779][ T2744] bond33: (slave gretap56): Enslaving as a backup interface with an up link 13:03:01 executing program 4: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000012c0)="0a07e857c58e5b0689160ced5c1f00b7", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000006080)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001300)="ceb5049657fd28621a14e006a2bfd7b0", 0x10}], 0x1}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/4098, 0x1002}], 0x1}, 0x0) fsetxattr(r2, &(0x7f0000000080)=@random={'osx.', '/dev/ttynull\x00'}, &(0x7f00000000c0)='/dev/ttynull\x00', 0xd, 0x2) 13:03:01 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000084000001f4000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:03:01 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x9) write$binfmt_elf64(r1, &(0x7f0000000980)=ANY=[], 0xa) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x80}, 0x40) socket$inet(0x10, 0x2, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 13:03:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r5}}, 0x20}}, 0x0) 13:03:01 executing program 1: exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/psched\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000012c0)="0a07e857c58e5b0689160ced5c1f00b7", 0x10) r3 = accept$alg(r2, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmmsg$alg(r9, &(0x7f0000006080)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001300)="0f6e8eb14237dd2378de9e2cbad25b8d72bb27ace9350bdcf54a1c04fbfaa7dafb3e9f4cdbab7673adb99c97696c77fe9af24d290c3c426b7b6b15376be78484de02ceb0d3f4ddf382a8d1feb72dc2d4f3aebeb3a3d37b853b77f4ccc3e07658dc0171e44e6b297bacbdbaa623b720d53b90f380048cddd77b1976b5b2723f6e6e45d0aac807ebcb30244176e3e2a47fb11d82f89186bda49a580be92d26355d21b8021b2c11d5ce2310a2171126f795edaa594e80239f1847615d6aafcd5c0c92a806159ac04cabd0eac27942", 0xcd}, {&(0x7f0000001400)="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", 0x1000}, {&(0x7f0000002400)="e3d75d7bc0f477a93077145c632f9df9e8f15b78ea392cac260b9e03ea58b1d49d6f8e59545ab91e1d3f1020ed80f2a90d9c58465234071f5b69213dbdac5139546af17685de489f385d6496f2786dcae4a84e5a21ffa3f70aa1f6b964a4d3165d8d474f917dc59a1a2c0d4eaa3b21f7b3a49bf2f46c1d8b9e98663eecb099bbd5ae7306994a46c1", 0x88}], 0x3, 0x0, 0x0, 0x4000000}], 0x1, 0x50) recvmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/150, 0x96}], 0x1, 0x1) sendfile(r1, r0, 0x0, 0x800000080004103) 13:03:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 726.400478][ T2800] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 726.436406][ T2800] device bond34 entered promiscuous mode [ 726.464393][ T2846] sp0: Synchronizing with TNC [ 726.482145][ T2844] device gretap57 entered promiscuous mode 13:03:02 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000084000000fc000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 726.508782][ T2844] bond34: (slave gretap57): Enslaving as a backup interface with an up link 13:03:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10}}, 0x20}}, 0x0) 13:03:02 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000084000080fe000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:03:02 executing program 3: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f0000000040)='./file1\x00', 0xffbfffff, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="4e66732c00dd36b94ca68c6e0e81e1c5913d287c2f20b5df5c4664f14a38b629eecd1d0982f2b90d6d7a3c4be81a9b72f39d6362c56d2275f1f3b9e362f9393da1c4e4e2975bf55aa91b8259ebb6de868ed604063afdc4169af110fbf0fb891a62fa798dea918e3201097ae67332a061ce776903e26d8dfde29c0fe35111e97a3dc5c08740be3d58493e1b75e46b51a4b9e12e32d5df09ee2fb2f4afc793ba3d965b3c59e19c786fe2b25c99edfaa2e020b90733a0a0f24fa028af56e7b936a2b20b4d2ce5674c4c72415640f5627aea58f030b9fe"]) umount2(&(0x7f0000000380)='./file1\x00', 0x0) creat(&(0x7f0000000140)='./file1\x00', 0x6cadd25792431836) 13:03:02 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000840000c0fe000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:03:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 726.749244][ T2874] FAT-fs (loop3): Unrecognized mount option "Nfs" or missing value [ 726.756429][ T2846] sp0: Synchronizing with TNC [ 726.771466][ T2873] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 726.796471][ T2874] FAT-fs (loop3): Unrecognized mount option "Nfs" or missing value [ 726.869012][ T2873] device bond35 entered promiscuous mode [ 726.906158][ T2889] device gretap58 entered promiscuous mode [ 726.933534][ T2889] bond35: (slave gretap58): Enslaving as a backup interface with an up link 13:03:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705a99a004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="840000002c00270d00"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000040008000c0001007463696e6465780054000200400006003c0001"], 0x84}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000740)={0x10}, 0x10}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x12) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f0000000300)=""/30) sendmmsg$alg(r3, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]}], 0x4924924924924b3, 0x0) 13:03:02 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000084000000ff000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:03:02 executing program 3: r0 = open(&(0x7f0000000040)='./file0\x00', 0x26080, 0x1) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)="450000002b000535a4abd32b8018007a012482c104003e372d0003800125d124000000b3e9d3dfd08304000000006000", 0x30}, {&(0x7f0000000000)="6a2a261bb49c3cf3a3d05f89b8f2818aa9859d58f4", 0x15}, {&(0x7f0000000100)="1eca57d9a4b1caa22e0e266afa1a05d3f01a5e49b3125fca230dc0906daa46b69273fd09a62c4fa082d8e9892093a17c8f3cf09f05d69a0d32a9274754700c73316fa73033a64ea0beb59a19ba8bcfb4c091f60f7b1ae43eba23b4886bc92b2e3fb5f7e17c8057227a794dc98b3a098eef9ac30dbccd976d8dff3d663c267367de545190f56c064ff001c92ad1a8d04ce13651bd1fa04898a2a89de5670c2ac6bcd2ab857bbe6df8d6c78fa746346e581517aa5bc1858137486abd02e5186edfeafa36b18dcc259eefd4", 0xca}, {&(0x7f0000000200)="1f03dd2ccd1ed2ea0d83e42695cfba961acc9005bff8edff776555a5854857ed77fb8974393c7a63723af4ba97db9d5b8fb1a1ab801af7d426ad9b7c85c1df145238a76e58b9fce9b0a4e23a7ddd0df66e3347a5a71bbccde6ab193398545f566391bbdb1700cfc0a96bf582ec76ef6a4c2cbe03152f2badbb2a760dc5408e8fbf2b9a92d3b16b6fbbbe005bfb0c4abed58083006527434a20f71bf707", 0x9d}, {&(0x7f0000000340)="7a4b0cf4d0f21f5daba00c01d7c0b1bad573bfb7dd68e1163fc0517afb797ab224210edad1f1b4f2bad929c4e2a28e0fb43f2c423ce06d40788cfe77283774ea6d47278ad26c9d9677af6981f1298920d31e00e64719b4d6a8f9b3d7a939346be9eadb6ce7dcd2c1701e37886a12d8152460c11a84165ced5ff1ef35cb4fb1e8c9f0ac99f4eeabe2af3ff910e21ca49347599801e31ceed7fd6034969bb794a58f2f5193fb2042a72b0e66d11e38cd2c41389ff3bacafa522aa5075d24d5cd3eb06d0e5d572e47736acf4f0a39bc7f7ba5f9b6ae94fa63c8f9e72b239a1d57b292ea8ca914aeed3d92b079193d26648d908a4a64eaad56", 0xf7}], 0x5}, 0x8804) syz_open_dev$media(&(0x7f00000002c0)='/dev/media#\x00', 0x9, 0x410040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x28, r3, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}]}, 0x28}}, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, r3, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xfffffffd}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x10000, 0x2}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x2}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xed, 0x1}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0xffffffffffffffff}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000600)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0xc422235bc3e7ad20}, 0x400d095) 13:03:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 727.175602][ T2948] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 13:03:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10}}, 0x20}}, 0x0) 13:03:02 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000840000ffff1f0000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 727.268759][ T2957] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 727.288544][ T2948] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 13:03:02 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="7400000030003deb0000000020f0ffffff000000600001005c0001000b000100706f6c6963650000480002803c0001"], 0x74}}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="e46095376302e8842668dd68b5", 0xd, 0x0, 0x0, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040)='wireguard\x00') r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 13:03:02 executing program 1: exit(0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000001240), &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={r2, 0xfffe}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000001340)={r3, @in={{0x2, 0x4e24, @multicast1}}, [0x1, 0x8, 0x5, 0xed, 0x8, 0x3, 0x14c00000000000, 0x101, 0x5, 0x100, 0x10000, 0x2c8, 0x5, 0x8, 0x7f]}, &(0x7f00000001c0)=0x100) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') syz_open_dev$tty1(0xc, 0x4, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000012c0)="0a07e857c58e5b0689160ced5c1f00b7", 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000006080)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001300)="ceb5049657fd28621a14e006a2bfd7b0", 0x10}], 0x1}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/4098, 0x1002}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r7) sendfile(r7, r6, 0x0, 0x100000003) [ 727.370022][ T2963] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 13:03:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 727.447597][ T2963] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 13:03:03 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000000100020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 727.503540][ T2972] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 727.633153][ T2972] device bond36 entered promiscuous mode [ 727.670191][ T2963] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 727.708851][ T2978] device gretap59 entered promiscuous mode [ 727.745614][ T2978] bond36: (slave gretap59): Enslaving as a backup interface with an up link [ 727.792415][ T2979] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 727.805751][ T2979] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 727.819818][ T2957] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 13:03:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10}}, 0x20}}, 0x0) 13:03:03 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000000200020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 727.845294][ T2957] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 13:03:03 executing program 4: clone(0x20002004bfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r3, &(0x7f0000000200)=ANY=[], 0x10) fsync(r3) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200000, 0x0) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000100)=0x54) 13:03:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 728.041975][ T3031] device bond37 entered promiscuous mode 13:03:03 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000000300020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:03:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 728.089455][ T3040] device gretap60 entered promiscuous mode [ 728.096429][ T3040] bond37: (slave gretap60): Enslaving as a backup interface with an up link [ 728.207728][ T3004] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 13:03:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:03:03 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) read$eventfd(r1, &(0x7f00000000c0), 0x8) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) chdir(&(0x7f00000002c0)='./bus\x00') r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000140)='./bus\x00', 0xffc) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r3, 0x0, 0x40d09) [ 728.253748][ T3004] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 13:03:04 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a0005020000000000000009000100000000000000180eddde0000010000000000000000000000000000000000000000000000000000000000400000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000000000000000000000002b000000ab873fed9428cd65a03e6ad63753206b00000000000000000000000000000000000000000000000000000001040d0ea8ba01909d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000a000400380000000000000014000e"], 0x4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 13:03:04 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000000400020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:03:04 executing program 1: exit(0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x104) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xdc, 0x10, 0x1}) sendfile(r1, r0, 0x0, 0x800000080004103) [ 728.506136][ T3099] device bond38 entered promiscuous mode [ 728.585451][ T3134] device gretap61 entered promiscuous mode [ 728.640589][ T3134] bond38: (slave gretap61): Enslaving as a backup interface with an up link [ 728.654368][ T3144] overlayfs: unrecognized mount option "wo" or missing value 13:03:04 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000000500020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 728.681024][ T26] audit: type=1804 audit(1589720584.145:136): pid=3126 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir539677443/syzkaller.cOpT4R/426/bus/bus" dev="sda1" ino=16299 res=1 [ 728.718967][ T3146] mip6: mip6_rthdr_init_state: state's mode is not 2: 4 13:03:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:03:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000006c0)={0x0, 0x100000}, &(0x7f0000000680)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000640), 0x4) chown(0x0, 0x0, 0x0) accept4$rose(0xffffffffffffffff, 0x0, 0x0, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYBLOB="25620031a764917be39360cd00cb87a7a738a3207c689adc510f7c24ae3b0cbe1dfec050f86c82c10cb91009ec4952ecd17f9c2c3638baa4108f3138b7fc32b041177b30673df1caed71798986c6199d2325883f2ac458bc755b042b17270bcd5eb02e22f60c1161c273089039bb334af3ce22ab90e1b450bcb5ef2ae7d2cdef5d7f92c5e768ad4b33c6b5d915f4ba54375155e7f300feaa3c88562e820b58e7bb4c094b288adcec4d3277e8ffa4703f2fd338271d417b780d006a488cb76d05959749c39727ba139129df10338cef7933c65a"], 0x26) socket$unix(0x1, 0x1, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000129bd7000fddbdf251000000008002b000100009818000900fc17b9f76c5a0000080034000000000008002c000600000005002a000100000008000b000000000008003c000400000005002d000100000008003c0007000000"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r1 = creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) lstat(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lordir=./b./file1,upperdiR=./file0\x00'/45]) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x5, 0x1f, 0x1, 0x80, 0x0, 0x8, 0x188c, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x7fff}, 0x8, 0x40, 0x80000000, 0x9, 0x3, 0xffff, 0x1}, 0x0, 0xe, r1, 0x0) rmdir(&(0x7f00000000c0)='./bus/file0\x00') ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000140)={0x399, "734a09bbf93558f01857ce632d5799fa8e32f8c41c42a6038a090f773b315857", 0x1, 0x29d1000, 0x1, 0x0, 0x10, 0x2}) 13:03:04 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000000600020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 729.004993][ T3155] validate_nla: 2 callbacks suppressed [ 729.005004][ T3155] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:03:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 729.152730][ T3155] device bond39 entered promiscuous mode [ 729.180230][ T3160] device gretap62 entered promiscuous mode [ 729.188914][ T3160] bond39: (slave gretap62): Enslaving as a backup interface with an up link [ 729.190682][ T3161] overlayfs: unrecognized mount option "lordir=./b./file1" or missing value 13:03:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:03:04 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000000700020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 729.302119][ T3204] overlayfs: unrecognized mount option "lordir=./b./file1" or missing value 13:03:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffffffc, 0x1, &(0x7f0000000140)=[{&(0x7f00000001c0)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) statfs(&(0x7f0000000040)='./bus\x00', 0x0) sysfs$1(0x1, &(0x7f00000000c0)='(**eth1!\x00') sendfile(r3, r3, &(0x7f0000000080), 0x8080fffffffe) [ 729.343456][ T3126] overlayfs: unrecognized mount option "wo" or missing value [ 729.375701][ T26] audit: type=1804 audit(1589720584.835:137): pid=3208 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir539677443/syzkaller.cOpT4R/426/bus/bus" dev="sda1" ino=16299 res=1 13:03:04 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000000080)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674047367a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, [0x8, 0x0, 0x0, 0x0, 0xd], 0x0, 0x0}, @mcast2={0xff, 0x21}, {[@fragment={0x29, 0x0, 0x40, 0x1, 0x0, 0x4, 0x64}], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @remote, @empty}}}}}}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000000)={0xc1, 0x18, 0x5, 0x87, "8a13241d42f7bfebde0fb05eeac1a32e287b60545d7c64b783907876297fdaa0"}) [ 729.441409][ T3212] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:03:05 executing program 1: exit(0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x5, 0x70, 0x0, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}}, r0, 0x0, 0xffffffffffffffff, 0xd) r1 = syz_open_procfs(r0, &(0x7f0000000000)='oom_score_adj\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r2, r1, 0x0, 0x800000080004103) [ 729.536687][ T3212] device bond40 entered promiscuous mode 13:03:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13:03:05 executing program 4: open(&(0x7f0000003440)='./bus\x00', 0x40, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x208200) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="000100bd7000fddbdf250f000d0009000b000700c4c692fdc7e354144f885200000500290001e3141469ebb908e14bf404ca7e1f145a67606dc018d1db4ffdb9f45b0315a2b4ca3f50859689131521d01614f22b9b3f616af19df4ec4c225b29c8dfea602b871c1c4a21b4aa96adb4236c590d745e4647ec47269d6182ab93413e27ee660acd4b6bd669897957f2c54fd1706a339f49815a3943347c43c2b76c17927169fdf10b3606e6730c07aa69fd6ce5de457ded6de9f9d521d2158e5b4e29313ac15bb74b3dbb6eb48e50b6e4d4fa0100000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x20000) r2 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x1200) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x222000, 0x1000}, 0x18) socket$netlink(0x10, 0x3, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r2, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00017, 0x0, 0x0, 0x0, 0x10000000002) [ 729.620795][ T3216] device gretap63 entered promiscuous mode [ 729.651301][ T3216] bond40: (slave gretap63): Enslaving as a backup interface with an up link 13:03:05 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000000800020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 729.761257][ T26] audit: type=1804 audit(1589720585.225:138): pid=3269 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir539677443/syzkaller.cOpT4R/428/bus" dev="sda1" ino=16300 res=1 13:03:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r5}}, 0x20}}, 0x0) 13:03:05 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x400, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) set_mempolicy(0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x0, 0x4f7dc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x10523) getsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000040), &(0x7f0000000100)=0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), 0xc) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000280)={0x0, 0x6, [], [@generic={0x0, 0x2e, "edde4b4c658d43ed10eaa0a0ddf8b436b8fbaa478f3651aebd95b3b60eb5880519d685941af219f42b30eb100ec0"}]}, 0x38) prctl$PR_GET_SECCOMP(0x15) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000180)) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0/file0'}, 0x13800) [ 729.913912][ T26] audit: type=1804 audit(1589720585.225:139): pid=3269 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir539677443/syzkaller.cOpT4R/428/bus" dev="sda1" ino=16300 res=1 13:03:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 729.968653][ T3280] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 730.036285][ T26] audit: type=1804 audit(1589720585.225:140): pid=3269 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir539677443/syzkaller.cOpT4R/428/bus" dev="sda1" ino=16300 res=1 [ 730.078464][ T3280] device bond41 entered promiscuous mode 13:03:05 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000000900020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 730.168219][ T3291] device gretap64 entered promiscuous mode [ 730.192677][ T26] audit: type=1804 audit(1589720585.555:141): pid=3269 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir539677443/syzkaller.cOpT4R/428/bus" dev="sda1" ino=16300 res=1 13:03:05 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="3100000012000900690006342f17e70000c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in6=@private2, 0x0, 0x0, 0x2b}, [@srcaddr={0x14, 0xd, @in6=@mcast2}]}, 0x3c}, 0x8}, 0x0) chroot(&(0x7f0000000080)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x1, &(0x7f0000000100)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 730.204549][ T3291] bond41: (slave gretap64): Enslaving as a backup interface with an up link 13:03:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13:03:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r5}}, 0x20}}, 0x0) [ 730.366744][ T26] audit: type=1804 audit(1589720585.555:142): pid=3269 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir539677443/syzkaller.cOpT4R/428/bus" dev="sda1" ino=16300 res=1 13:03:06 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000000a00020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 730.599173][ T3357] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:03:06 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000280)='net/route\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) accept4$nfc_llcp(r2, &(0x7f00000000c0), &(0x7f0000000140)=0x60, 0x0) sendfile(r3, r2, 0x0, 0x800000080004103) accept$netrom(r2, &(0x7f0000000000)={{}, [@netrom, @remote, @rose, @rose, @bcast, @default, @bcast, @null]}, &(0x7f0000000080)=0x48) fcntl$setstatus(r3, 0x4, 0xc00) 13:03:06 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ubi_ctrl\x00', 0x200, 0x0) getpeername$netlink(r0, &(0x7f0000000300), &(0x7f0000000340)=0xc) sysinfo(&(0x7f0000000000)=""/34) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x60, r2, 0x134, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x1000, 0x1, 0x7, 0x1ff]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @SEG6_ATTR_DST={0x14, 0x1, @local}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000c054}, 0x25cb70774dd5bcb9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbdff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$binfmt_script(r1, &(0x7f0000000200)={'#! ', './file0', [{0x20, 'cgroup.contr\xff\x7flers\x00'}, {0x20, '/dev/ubi_ctrl\x00'}, {}, {}, {0x20, 'SEG6\x00'}, {0x20, '/dev/ubi_ctrl\x00'}, {0x20, '/dev/ubi_ctrl\x00'}, {0x20, '/dev/ubi_ctrl\x00'}], 0xa, "91810077d7387234fad6bc5e5036dd"}, 0x72) 13:03:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13:03:06 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000000), 0x4) exit(0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') fsync(r4) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0112000000009ac70000090000003c00030014000600ff090000002e000000000000000000010800030000000000140002007663616e3000000000000000000000000800010002"], 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xcc, r5, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3d02}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xc39}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x100}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0xcc}}, 0x22040000) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) r7 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r7) sendfile(r6, r1, 0x0, 0x1f) [ 730.891756][ T3357] device bond42 entered promiscuous mode [ 730.956739][ T3362] device gretap65 entered promiscuous mode [ 731.028398][ T3362] bond42: (slave gretap65): Enslaving as a backup interface with an up link [ 731.117780][ T3431] IPVS: Error joining to the multicast group 13:03:06 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000000e00020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:03:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r5}}, 0x20}}, 0x0) 13:03:06 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)="014344303031", 0x6, 0x8000}], 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x98, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x43}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x9}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x98}, 0x1, 0x0, 0x0, 0x4001}, 0x40) 13:03:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13:03:06 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000001100020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 731.385488][ T3440] isofs_fill_super: bread failed, dev=loop4, iso_blknum=32, block=64 [ 731.410842][ T3448] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 731.536826][ T3448] device bond43 entered promiscuous mode 13:03:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 731.584359][ T3455] device gretap66 entered promiscuous mode [ 731.593657][ T3440] isofs_fill_super: bread failed, dev=loop4, iso_blknum=32, block=64 [ 731.631301][ T3455] bond43: (slave gretap66): Enslaving as a backup interface with an up link 13:03:07 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000002000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:03:07 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0xffff, 0x4) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7004500, 0x0}}], 0x400000000000085, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080)=0xfffff800, 0x4) 13:03:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, 0x0, 0x0) [ 731.787899][ T3517] IPVS: Error joining to the multicast group 13:03:07 executing program 1: exit(0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r1, r0, 0x0, 0x800000080004103) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$cgroup_int(r3, &(0x7f0000000000)=0x47a8, 0x12) 13:03:07 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000012c00020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 731.950554][ T3530] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:03:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13:03:07 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000006000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 732.138725][ T3530] device bond44 entered promiscuous mode [ 732.164924][ T3534] device gretap67 entered promiscuous mode [ 732.194438][ T3534] bond44: (slave gretap67): Enslaving as a backup interface with an up link 13:03:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, 0x0, 0x0) 13:03:07 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0xffff, 0x4) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7004500, 0x0}}], 0x400000000000085, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080)=0xfffff800, 0x4) 13:03:07 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000026400020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:03:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 732.460266][ T3599] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 732.626905][ T3599] device bond45 entered promiscuous mode [ 732.708798][ T3600] device gretap68 entered promiscuous mode [ 732.733123][ T3600] bond45: (slave gretap68): Enslaving as a backup interface with an up link 13:03:08 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000840000000005dc00020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:03:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, 0x0, 0x0) 13:03:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 733.029590][ T3677] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:03:08 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000024000b0f00"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000007000100667e17000c0002000800040000000000"], 0x38}}, 0x0) 13:03:08 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000840000000003e800020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:03:08 executing program 1: exit(0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/route\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r2, r1, 0x0, 0x800000080004103) [ 733.174261][ T3677] device bond46 entered promiscuous mode 13:03:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 733.278914][ T3682] device gretap69 entered promiscuous mode [ 733.311398][ T3682] bond46: (slave gretap69): Enslaving as a backup interface with an up link 13:03:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 13:03:08 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000840000000001f400020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 733.592298][ T3740] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 733.689573][ T3740] device bond47 entered promiscuous mode 13:03:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13:03:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000840)={'filter\x00', 0x7, 0x4, 0x408, 0x210, 0x110, 0x0, 0x320, 0x320, 0x320, 0x4, &(0x7f0000000300), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @loopback, @local, 0x2, 0xffffffff}}}, {{@arp={@multicast2, @multicast1, 0xffffffff, 0x0, 0xa, 0x5, {@mac, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xcb9e8932a439fdca]}}, {@mac=@remote, {[0x0, 0xff, 0x101]}}, 0x8, 0x0, 0x0, 0x7, 0xd4, 0x7, 'veth0\x00', 'macvlan1\x00', {0xff}, {}, 0x0, 0x3c}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "1c4410a17d351896ff175d42d811d982c4ea794eb00d5270ba02a737e237"}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @loopback, 0xf, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x458) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) sendto$inet(r3, &(0x7f00000001c0)="249bd5133dc0b9ee0cbe84d038fc46e35ce6850ada0c08bb327ee15318dc6099c9a7f760effb65b3a0dd17a6d52a389ffccc02c73eef3554a4b283f2e2ac9c0e9cc3b1e9d06e01f3ffb1cb9c4596a5ee16c0c68e13531ad5c5f77d3657405a19c61be76395852ca927b05b9cee2e3c82d3ee9644cf43f2dfc3c845da6e94dd2831b4", 0x82, 0x2090, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000280), &(0x7f00000002c0)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="24e4ceef85cb70e573ef5f11019b000086069614", @ANYRES32=r2, @ANYBLOB='\x00'/12], 0x24}, 0x1, 0x0, 0x0, 0x400c8c4}, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={r2, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x6, 0x7}}}]}, 0x78}}, 0x0) 13:03:09 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000840000000000fc00020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 733.755485][ T3748] device gretap70 entered promiscuous mode [ 733.827065][ T3748] bond47: (slave gretap70): Enslaving as a backup interface with an up link 13:03:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 13:03:09 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000840000fffffffd00020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:03:09 executing program 1: exit(0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40000, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r1, r0, 0x0, 0x800000080004103) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6}, 0x80) 13:03:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 734.164318][ T3801] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:03:09 executing program 4: socket(0x10, 0x3, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x8) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f0000000000)={0xd61, "10de814c33c7fbe82ef695292fb0c470567a00e2064362560f73d8d9e88c6e15", 0x5, 0x20, 0xfff, 0x4, 0x2, 0x2, 0x1ff, 0x4}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r5) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000240)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 734.336971][ T3801] device bond48 entered promiscuous mode 13:03:09 executing program 3: clone(0x2000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002180)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}}}]}, {0x4}}}]}]}, 0xe68}}, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB='my\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x33c}, 0x1, 0x0, 0x0, 0x20000801}, 0x80) sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x14c, r4, 0x300, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x128, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcb0c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2cc33c99}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7f8b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x32b8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd7b7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcc4c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4de4f50b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5979950b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x750a}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b5bb79d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6969cf64}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7754}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ecfd4f2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x20617261}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e904739}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcedc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x21da}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66f7f2f4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb0c6}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x724d05fa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x753e2029}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x64f9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdd84}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x23b65702}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x401e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3d31}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdb91}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa02a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x57fb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3ec6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b583337}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7785516a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5327}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3cab3db2}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x14c}}, 0x84001) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x108, 0x108, 0x0, 0x108, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ipv6={@remote, @local, [], [], 'bond_slave_0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00', [], 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x8}}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a], 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) [ 734.416535][ T3804] device gretap71 entered promiscuous mode 13:03:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x102800) syz_open_pts(r0, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = dup(r2) lseek(r1, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup3(r4, r0, 0x0) [ 734.466118][ T3804] bond48: (slave gretap71): Enslaving as a backup interface with an up link 13:03:10 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000840000000080fe00020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:03:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) [ 734.529960][ T3858] xt_HMARK: spi-set and port-set can't be combined 13:03:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13:03:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}, 0x1e0) connect$pppoe(r0, &(0x7f00000002c0)={0x18, 0x0, {0x3, @broadcast, 'bridge0\x00'}}, 0x1e) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') fstat(r2, &(0x7f0000000340)) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 734.728852][ T3871] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 734.816184][ T3871] device bond49 entered promiscuous mode 13:03:10 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000c0fe00020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 734.959782][ T3873] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 734.977579][ T3885] device gretap72 entered promiscuous mode 13:03:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13:03:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x8001a0, 0x1c, 0x5ac484bb51fa106a, &(0x7f0000000380)="4d50b441e692763513ef874588a8ffffffff00000004122e25d30806", 0x0, 0x403, 0x0, 0x22d}, 0x28) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000140)={0x1a, "a19e5eee020ede0d51cb831c1788186cd2292d1943167a61a370"}) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="300000004d1d63ec0200000000000500000000000000000000000000000002000000000000002127ffffffbafffff700cae9166ac1da2327191056b654efdac21cdf0c8ba9442115fa3fabe9679225a97684a6bbe43524a7177defd040ba233fd364a13d7c168ad2722a87c5f1b50c9a4333bca5b7737b71a6d37d6ee98b87a983eae1fb5d6cd1a856fcc9f5cc16c6f41bd67648c620da23a4dec96c8d6630246db153f8ea08478fa0f729641072e80a96b6b980a92a1d7366f24a516a707c331d1da5f159769f8d6edd032e49573114b42f772f0919b2d7bfc8035ee538834ab928a1cd5e777db8da25ac28c33faa1d65646ee8e6e7f91d"], 0x30) [ 735.033901][ T3885] bond49: (slave gretap72): Enslaving as a backup interface with an up link 13:03:10 executing program 1: exit(0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x14a00, 0x0) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f00000002c0)={"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"}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001340)="9c66064f27fe2ee5fe6c826fea39b6f0b83f02b89ff801b51462c73768351ea3129b2b8d8d56731fc925fd188756ebb6b0048f8ce837c4c48dcaf92e8cccd17ca390f3efd3c767c2f057c7719c82e893a73da9124a28bf538a819a5077c624e9eaf85ffda66d322539ff337a3d7a2a2e80e372fd1f64df54a9ba6c91ed3ad628b376c61606b93204c0cb6d2bc70d49016220d559d286265eca88dd0d7da78a310dc91c85168f44276ff9eeddd8226098baba0baaac8ce9b03f98e4535277cd4327dc799bfde2f3ca824c74765d3135ba60e0a5ba1084975bc427aa03d14e8df50ac232a6c0c335864a2f63f278b9f9613f7eafa6e5cb836d6e2f802095c9d55b10ae2a4116be2966dbd0f88f1f1268a1f5f578a187cd5c3845bed8db5eeb405ed5fac1bd7078a82ef1613ee5847bb56908f65c97f43b378d4cf620d31322bf37a383efef45bbb36aeb3bef316d5a2d811e2c48a11d1eacf487251778c3d7f0e48b7249536bd794574f4a43e0b3e5d243819704e687be88fcfbbfc220c09d73d669d729bdf38782b46357e6a1461725021f1e32e3505077df9622124b6422fccda5df98cfbc453db74e06c07deecad79ffe409228df0b103b77992f41c2d910eacbb33bd2e3930130c2e87cd1dc748a8286393b044cda2902623208d64d659bf79e33c35d8bbbbdf9d321834b885aba79a4432c82d9b8357dcd4555c3bc6a1f4841b764a6b985f5b67f1e5d8a69340bf9c7ec4157046bed6a6b23d9af987c4cb5d35dc5e51a7571567ceed6e27b7364f3b8b209e7daac2dca5d01e72bff456aa3f76377974e3d59c1f2dcd3f7a6998b2ae79212b30bcaf0bbe4aaad4fbbc2b8cae7257c6f9f4b03aa600a9401b179c7a9238e2be84c6d8ca8b91782ab16d189e5dead24923cfade5122f8d74976ac5424dbf96412f5b74c0f7e5c86736d1893c893130e06aab71268375d93aecd4db6a40b4ef2e3f77b99c839e857374312b4c1985e3d39961231493aab146dbcec0790ce3eb05b37c3e7abea2f79690bb29c3ef84d5041bd7fdee9ced05ed0e49767fd18748d95e4b1198781b12f01f3138bc743c1c843111edfa477bb222de51d02d9034d621033a336354e6372b002367732d541883f3af83570b7df9a37e1ce37ad957818d569b2d1357e27f2a83008686eb6ea59caab0f3278f9c0f45fe4f8a7aa21a70a5c62d2aac7f172fc69c17bf59bd912d428713530cb8bdc39cc622464adbf60c6033cfc84486939e5f3edf1d89da3e44b9b61f49b7d0af7fc0727cb3a92db3b4418cd73882b4843cceb6c36e3f7a7cae9aacda822374b6d8ef4ce9b99b2f4dbb42c2456ab9a8d4ed55785be31411754a15eba8bd3e8137cc90a1d165636589c44c5f71e0f2c09fdccd50b2fc27168f7fba4e2b9784a03d1d1bf8031b4bc5c2b30a092355f750be01cc3f3e1650cddb14349db2169678e412e1dcccab28a07d5e9a84e2259573ea7fde407f507ce8d3f1f45a335d3f91dcb344e258db9fe6b1145d51a63fa98a2c0b6e89d7cc5d6e058d6a39126aba45701727a02eb820db2e36d3282e08cffbd4f83b0ca0341e961854ec3e2588929e64ffd659dcc75bc881b6ad9945f9f9bef658cd249aed9370b8446e179ad520137401b606651e49150adcc25478fbef97ef223fc4d916e32f652d2935627357a071b3b7284f861cb89b97df475bd6406e1f8bd49b6866580d7714a547827010ca4225086d14d6754cf423deecc46348c009628e0dba7fb35e37d2f81c0d66f3125e14643815f549d6acd09f05c2ec8f6a789443ed714fa47cf6b31da57a49e96d29f8fea10a985705ad0943bc574e9a250e5797130808c4ae8450e7fbb7f6b93035214b9d00e86d50c3e9a56098be0be2896354000c2cbb24bbc530354f84dc96901909a7f0479dd4a6eeeba54aaae2c558603658e8db2c5cf7b267e50628404bbe07c69cecddd4436c4958167188dd78d5800ff9c14fe4bfd105ba4d1c9cf567b899d6da0815c6fb0235aaf934ae3d02829e84c69cfc09a7ca97777347a07b8ba735107f5f43b90d900af356600ef26ec0484fcee7a943bde5ee2ef29a588f0e31bc5206e1a3425e19d748751fc706a4589153d78aaeb0b391bdd9fe267c43e84fd9d4fab1639d7712895fdf54801b875f1ccb3796556fb685477d7997e661364357e13da70c7ef2384985531033f2ce5a8f715a842eb9cc4fc2e4fc7985cfc1f1aef968787b6e5e72c0b069dcaab7590cf2720e9937feecd08e37d1081d6e390f955b671b57e28de7c5ce539b36e59a985c5847be411578e8db7c9dcbe113c6e83a4cf304017ba9bb82374a0aab9c2abb8c4845ed59b6b83560939b63b12aaa2c1a7258d56136a5c43e57507cc62721631713ae966573cc886c6ebd63fee3bd29ba4ea38ebdd727de9dcfa58c179c5073e241c0b37de9d1527c4918def2ad575ea6a22c863361d564837764ec941775570ed0ecf47523fa9277fed35a3fda7ab61e97c8f5c3b3bb90640252ea1614330a7f9eae11a48302a43bbec242ac309d3b06351acdb31e0b5e549ec95fd85470c227f34993ff19e606ed9107d3210e34e352fc8621096bbde02eafa96fb255d9347facb3e83bd9a6216adcbdd0dfcd156d712a9803d31eabcd7f93facd9787d6dd5382dcb6cfd4e930f57b48ad74940f8386fd52d01546c2723c87c3dc5606221e7f5d550bd8b0000aa38def30c3dbc15c0729592e4aba8a91ead13c597fa3a41d802a7e758085f26af463a6e5495cb74a7ccf13f6344a1abb6411b95846c44c1d6013278ebb1aceda3672d5cdcc535a584a7f2e9e97c1562aba92caa1bc7b72e75ea0736c7ae342eb2ec09401e1fbc01f3dd8e902bb7026204d71338197426d193ae534b50f7b7e4317e75a036591bb682afefdf1daa2230d97922ec1351b00e58ad52cb40160f3f97d572921dee6963d142ed4fcd64d33cd4f52a0ced9d556d6472a7734d1cd0d6bca1cd625a3aa95a3097a6e2785a2ec2f813a314dfc671c2228b8c0ed739993f34ae92be12edddb3ebe8129d925b20d22c6588b7c9042ee8f04d1818199d1969567390159ac2807c117e7d5d07a2722c0bb1d6a89f81ce8c3de05c2912d378b18c9bbe949b7b8a34968e745d6680e6db82947feddcad3f51392c47d551bbd32f627f1dd9a7c0dac866a5327390a54c64111808d7159f70ee6a0806c88554ff6c6be45f67bcc66a79d59b775d4a320b771427f4d5a29036ed732ec7f4e8687f8929efad52275447c1757ee63e28c275a1c12bd6361afc605ada9fbb26bdbbc049f56a071217e9c69a787a75b5025d6d58760e233cd49544d950e01235a10d0efabcc22acd0a9548b757e00204ae89d6d616e2d06ec39d6b51541b78c12aa884717ee438cdd7e89922267437683fb8ee7f88214390445af9ff322081528f31bb8eab3ce2bbc7ac536418b8b029afd47c1c5451098c3af755c877ddbc001aa10589dad68ee4a570d8a69ee6619a5afd8f4faacc47970d18e85f6dc359e05bb514f633371e57371da678c10f5a482abde3f6f8dfbde33a0ae2c2bd3bf5effe90a5f79df00c1515d2b53160009bea732efd1e197faaf662f607427b7d82cf66a959babe4e95496b6e04deb9656e2b388a1336ca448532be6b151dc3a8f6d1f0d4b01909ee87b3fc4fa2e502cc88a4a2d31d6bf2211422d9cf183c847fb13d64368b1f45804e415b909737b7de703deda47013d1cffa43423166db65aa2c52fb666e07548b8207c7df53ee0143fa956c4cd95deba0d14c1e87f7f2cf783f787e4ff78554fbb3617eadbdca42206f4fb7626d9084d649d0591d19b7d7bf2cfe457faa38be21b363c6e352865f1ebf345b4863fd9d7dea6daa1633fb322bf538d3f43cc4fe3d8b5a84eacbd4478061eb3b7b87405bbceee85b660696c6d92773e64426396a88f457a5ba86f4403b98fd9271bdb1a87399ab97e45ef212bd29adbeecdf8ab9d8134572ec2b9dd0efdbe94f4d85db4f3e3c71f7aabf3d0a013abfe60cb975b5e71e2df299337bc3f51b87773c39c23111c59d536d3d0ced08950ef8a23f89505289d1e84348eed7fbddfb6f6fae9f473955f1d2927e0b667ed359a56c2d99037f2122978af3dc5a4be8541570082f332bc29c04283a2e8dbc6ab8502c96cec8f2b2e835e521706c452e41d5eca76e94783788f7c2860daa5455115dc65d2953aea45365a2d47198d9c3db871c56c11a8e8f77013235a7a1d7dfe9dddfbae2e2d64bc25644395a6f6a9334f0c174c5e541ced0b47eeafef4c9d3f11df70a337c3e78b694afca1e4f7603d64762607a8a73142e4ffb82fed1fd3bb29e97fb978837573e1c6f8bfdd8735784ab4e3c8a57016f215e5a4c986129d0369e6343b8136e96738e9e22814c644a657cca03b25572cb5837d55bf1b7b8e51a171d34d6b23d26db6f089e9e0c89f3093cf6c05908fa49ebc8ef85c46c5aca43a5c82a6deedc83c060d6713870d4aa0ce3b9a2f7de89b1e08dada7b685501dd829c589111dbbdebeeba60e3cfa16600c8c6d9889f0dd148cb84e21a5ef1e829278610cedeee3ba93188efa3dec1b9242b5cdd92ff94ef2e684cc7d391bc42bbf41f523ab4d9c965757542036ea9c6c4b36b63da583b4226a494d3608d2afe21284e847c9c099a24d7d71482c1e64188a538b888e09c50fd1d3ae67a1dd7b754955f19a1e9b3ed7db12a181e21c903297fb0295991573a50255506abd28cdac2a79e8123ac7e35bf40b2a2f9318c3150bb226a39f740156f2da9534e95b74d730a9a3036d3a49ca7113bec99c2c4fb5778cd4cedd4a4ce9bdbfcefab05b3637b1f51c817a311c40bbd8f38d56b4474319902aa479ac2a4e7a6b20147b3aab9390189c2e58dffcb6a479c1296aaba0d794156288bb22e358312c29b3fb44902458afcbf6e9db79aefdcf003cf8a0cd1af2012700532643d48c25979a60bcc07438afe267ddae1a708a7177a9d785031940304a2557d60f399a809182aef35554bd78cd840698359d574f6abda34d00f1b7ff2c56db41f7219910047ff38174757551b1b4db3dae197473a81fff7ba156fd65acb2b5ad2bb6d80d484823b9fb7a0f77b5e4786f6035fb468eaada27bb029decedadf77c96b31072f528245decb43203bc5a20deecb8eba1a5b384605e4a1f93091e8ee04f78196c96bd9b996802540f876c5614a28a062d4acbd224b3bae2ff32a6d87ca03d9e16248cef80847de27dd4e2b7e8429edd188ea161e08410105a1b4e84cbab55ee79d5b2e02390bbefb24a393bf849bfc839cac7c0853799604f6f25ffe3256576ec55c5a8536b11bfbb2b95ef30aa04356296cf0a3466cc57f152da466660fbfd38182e2e28a3dc4206ba5b4312b4ce24418ece7dc45361e12b105675e4acc255a67110adc1d0926a190b1944bffb8b39280a426c0f14b62b432be0ae2930949e41f1e23bc4a66098f38957ff5244830d2d2e7e33bf2647b1c5b55b672c91ca7e497c977c8909ce868533b66e901ee33182bb224789767608bd8b4b64e6edbd8c9a08479000d5a7a0102e28bacdb72b8abbee78d92cccfffd56a52081c9b9a4e0569708f4a0d0dd33cb116d6ebcd89548c845b8a5b295903008217457b93e3478724d77fcd5b8b5bab35e8889ce951c68ad4371df2fd90847c480278387e2077e97337b23f6bce88f7cd0ea561b23e03e6a7aab79f09684a1e95fa541197e24705577120ab6c8f7e5f420aaba431d0474bf6183dacf0038f2a58f757e276be6fa4ef58a120ee9ac10ac21fa", 0x1000) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000012c0)="0a07e857c58e5b0689160ced5c1f00b7", 0x10) r5 = accept$alg(r4, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000006080)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001300)="ceb5049657fd28621a14e006a2bfd7b0", 0x10}, {&(0x7f0000001240)="fa265fcaf2664fe078e5f713a02a3211b02e0a499e41246cdc932cc2542f40044809b7085d394c3168d06c79eea4fa43a9180a9f1479b359dc0f251c3bb4222f1085ec1ac1eeed", 0x47}], 0x2}], 0x1, 0x0) recvmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/4098, 0x1002}], 0x1}, 0x0) dup2(r2, r5) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r6, r0, 0x0, 0x800000080004103) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000040)={0x10000, 0x1, 0x4, 0x0, 0x7, {r7, r8/1000+60000}, {0x2, 0xc, 0x0, 0x1, 0x8, 0x1f, "382611f8"}, 0x1000, 0x6, @userptr=0x6b4, 0xca5e, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r9, 0xc01064ab, &(0x7f00000000c0)={0x8, 0x6, 0x1bf}) ioctl$SIOCRSGCAUSE(r3, 0x89e0, &(0x7f0000000180)) 13:03:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) [ 735.282243][ T3939] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:03:10 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x7}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x36c}, 0x48) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_udp_int(r2, 0x11, 0xb, &(0x7f0000000140)=0xfffffff9, 0x4) 13:03:10 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000840000000000ff00020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 735.350007][ T3939] device bond50 entered promiscuous mode [ 735.394239][ T3975] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 735.435702][ T3961] device gretap73 entered promiscuous mode [ 735.490877][ T3961] bond50: (slave gretap73): Enslaving as a backup interface with an up link 13:03:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13:03:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 13:03:11 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000840000001fffff00020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:03:11 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x48}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r4, &(0x7f0000000200)=[{0x2, 0xfe00}], 0x1, &(0x7f0000000240)) semctl$SEM_STAT(r4, 0x1, 0x12, &(0x7f0000000200)=""/207) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="9f82000000000000000012000000"], 0x14}}, 0x0) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x94, r5, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4de1cb87}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_team\x00'}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x880}, 0x40) 13:03:11 executing program 4: sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="78000000da7f7c016a8f2badf65e58b3e9fd1af5eed5d42cc5b7fb96d25e8543baaf98123d3deabc394eb11bfd331962e5fb6f1abddb9c7aeb4f2de12eeb9f20ff6ef5d099ced0873cddfdf14b169e96e1995fa9f6000002218adffb0ddb682b647d2e66a276feddd6bbbb62118719ddd542cc33411ce1cf0c43bb0a69f9138d1841e385e36c9c6cf59740109c0f02c9b29d33f8559be6288d78d864d9d2ac6389a222a0532f1755d872a2410d7ff14463e132660365f0", @ANYRES16=0x0, @ANYBLOB="00000000000000000000040000005c0004801300010062726f6164636173742d6c696e6b000004000780040007800900010073797a30000000000c00078008000200060000000c00078008000400030000000900010073797a30000000000c00078008000300000000000800028004000400"], 0x78}}, 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144e800000000030006000720000002004000e0000000000000f5000000000800120002000100000000000000000030006c000203009f7eae02000000adb20200000000152c000000000000000001020014bb00000000000000000000000003000500000000000200ed00e000121a"], 0x80}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) mount$fuseblk(&(0x7f0000000400)='/dev/loop0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='fuseblk\x00', 0x88000, &(0x7f0000000500)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}], [{@fowner_eq={'fowner', 0x3d, r3}}, {@smackfsroot={'smackfsroot', 0x3d, 'md5sum-\'}cpusetvboxnet1:!md5sum]vboxnet0'}}]}}) r4 = socket$key(0xf, 0x3, 0x2) sendmmsg(r4, &(0x7f00000000c0), 0x4000676, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socket$unix(0x1, 0x2, 0x0) sendmsg$AUDIT_GET(r6, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0x10, 0x3e8, 0x10, 0x70bd25, 0x25dfdbfe, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x404c0d1}, 0x2000808c) [ 735.741264][ T4001] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:03:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 735.789255][ T3998] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 735.883105][ T4001] device bond51 entered promiscuous mode 13:03:11 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000840000fdffffff00020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 735.928711][ T4006] device gretap74 entered promiscuous mode [ 735.935526][ T4006] bond51: (slave gretap74): Enslaving as a backup interface with an up link 13:03:11 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000012c0)="0a07e857c58e5b0689160ced5c1f00b7", 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000012c0)="0a07e857c58e5b0689160ced5c1f00b7", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000006080)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001300)="ceb5049657fd28621a14e006a2bfd7b0", 0x10}], 0x1}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/4098, 0x1002}], 0x1}, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa7}, 0x20) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) listen(r1, 0x0) 13:03:11 executing program 1: exit(0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/route\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) syz_mount_image$cifs(&(0x7f0000000000)='cifs\x00', &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f00000002c0)=[{&(0x7f0000000080)="d1c26bff2d834c660eab088fc99abb0516eac9673edee790e218e02e0f8bde039fb0dd728814e4c07e4abbf39dc9e91ae90720e57d7bc1cdb3db0ff866b1b8f33501aea4bbffecc8ba72678912ff623134ba08c23257d20d4cc3e3d5e5838f39d2031232d5a7db77b33b1e90e2ffb5ea6e007230afa26dc9217908e9046fe8073ef16a159167c893ec63415243712ad51e25d2d75a1fd748c4d2ed69d946ae89fe6adf0b48322d18cf31d73b2512e834", 0xb0, 0x1a8}, {&(0x7f0000000140)="a966f758c2f762f6692bfd6e790276cb178d83b75c3dfef6d8f38fc7d9520043a47565", 0x23, 0x82ec}, {&(0x7f0000000180)="3cdeca6ec7e6331fc516b50f4aa74afc80d120dd57540a96e71b8bbd1c8c9a7ebf260990ea8dc9eb47a1cda065f9db3db8e8f16eefc498f31e4418f20b1b20ee4a3e5bf2e2ddb020916d2ea2c6eaf50fd1d5c0a0a05f1f8f8bfab5e2b510e5dbd8cc1fcef4f1ebe1fe786ebdb8722a2ff49a2191baa79ea32216f5cc6992f0c596a4c335196990bd675137d2581d59a12c0ea34a21ad7dfe67067dfc3a7d29f3fdd8e79908e7a16ac26138f38c086f861f38c7273f01fdc4de65b6d2ac02bfe877ec8cba2004d1697877440bd7472f84bdf0b2a1f5c9f23eccd156a66fb4e56af92e91653e8ca18b3d1b", 0xea, 0x1}], 0x800000, &(0x7f0000000340)='mime_type+selfrselinuxeth0[keyring(vmnet0\x00') sendfile(r1, r0, 0x0, 0x800000080004103) 13:03:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 13:03:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13:03:11 executing program 4: sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="78000000da7f7c016a8f2badf65e58b3e9fd1af5eed5d42cc5b7fb96d25e8543baaf98123d3deabc394eb11bfd331962e5fb6f1abddb9c7aeb4f2de12eeb9f20ff6ef5d099ced0873cddfdf14b169e96e1995fa9f6000002218adffb0ddb682b647d2e66a276feddd6bbbb62118719ddd542cc33411ce1cf0c43bb0a69f9138d1841e385e36c9c6cf59740109c0f02c9b29d33f8559be6288d78d864d9d2ac6389a222a0532f1755d872a2410d7ff14463e132660365f0", @ANYRES16=0x0, @ANYBLOB="00000000000000000000040000005c0004801300010062726f6164636173742d6c696e6b000004000780040007800900010073797a30000000000c00078008000200060000000c00078008000400030000000900010073797a30000000000c00078008000300000000000800028004000400"], 0x78}}, 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x193}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144e800000000030006000720000002004000e0000000000000f5000000000800120002000100000000000000000030006c000203009f7eae02000000adb20200000000152c000000000000000001020014bb00000000000000000000000003000500000000000200ed00e000121a"], 0x80}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) mount$fuseblk(&(0x7f0000000400)='/dev/loop0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='fuseblk\x00', 0x88000, &(0x7f0000000500)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}], [{@fowner_eq={'fowner', 0x3d, r3}}, {@smackfsroot={'smackfsroot', 0x3d, 'md5sum-\'}cpusetvboxnet1:!md5sum]vboxnet0'}}]}}) r4 = socket$key(0xf, 0x3, 0x2) sendmmsg(r4, &(0x7f00000000c0), 0x4000676, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socket$unix(0x1, 0x2, 0x0) sendmsg$AUDIT_GET(r6, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0x10, 0x3e8, 0x10, 0x70bd25, 0x25dfdbfe, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x404c0d1}, 0x2000808c) 13:03:11 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000002000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 736.407446][ T4083] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 736.491926][ T4083] device bond52 entered promiscuous mode [ 736.554666][ T4090] device gretap75 entered promiscuous mode 13:03:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 736.608590][ T4090] bond52: (slave gretap75): Enslaving as a backup interface with an up link [ 736.616719][ T4118] CIFS: Attempting to mount /dev/loop1 [ 736.631610][ T4118] CIFS VFS: Malformed UNC in devname. 13:03:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x0, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:03:12 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000003000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:03:12 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x200) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000280)=""/138) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) open_by_handle_at(r3, &(0x7f0000000640)={0x90, 0x800, "be5195d5715ed6d0b66cf2fbc9c6e8d36ce8892574e8a9c701cd0a47e95d80873d5075f87c47afb3cb256f84d662b49a9909cc43fa5c57525389f8c2571d2512fe42ace8e96c59c2bd2e87c47f0a25b504ad651523192d794532156184466d9b4f689faa490c7cc0977333fa09daa73344e7f7371bb90a6750a1ba4cecbdbb787e470d635c97e68f"}, 0x800) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x4100c1, 0x0) ioctl$FBIOPUTCMAP(r4, 0x4605, &(0x7f00000001c0)={0xffff, 0x2, &(0x7f0000000040)=[0x6, 0x2], &(0x7f0000000100)=[0x7fff, 0xe97b, 0x7ff, 0x6, 0x8001], &(0x7f0000000140)=[0x7, 0xdd, 0x200, 0x8, 0x6, 0x2], &(0x7f0000000180)=[0xf8, 0x0, 0x1000]}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f00000005c0)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], 0x2, 0x4, 0x4, 0x0, 0xd1}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in=@empty}, {}, {0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0xa, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0xe8) socket$bt_bnep(0x1f, 0x3, 0x4) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snapshot\x00', 0x109400, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000170a02020000000000000000050000040800074000000000cfab03382e3f83693f2e3beb44ada50a6889fca85ab213a892f9da4f650e469ae0de7827dba05071c9f4bf"], 0x1c}, 0x1, 0x0, 0x0, 0x40440c0}, 0xf5b5f24bd5743225) [ 736.862370][ T4146] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:03:12 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000004000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 736.930095][ T4146] device bond53 entered promiscuous mode [ 736.946064][ T4171] device gretap76 entered promiscuous mode [ 736.956155][ T4171] bond53: (slave gretap76): Enslaving as a backup interface with an up link 13:03:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 13:03:12 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000012c0)="0a07e857c58e5b0689160ced5c1f00b7", 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000012c0)="0a07e857c58e5b0689160ced5c1f00b7", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000006080)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001300)="ceb5049657fd28621a14e006a2bfd7b0", 0x10}], 0x1}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/4098, 0x1002}], 0x1}, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa7}, 0x20) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) listen(r1, 0x0) [ 737.308562][ T4121] CIFS: Attempting to mount /dev/loop1 [ 737.314150][ T4121] CIFS VFS: Malformed UNC in devname. 13:03:12 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000012c0)="0a07e857c58e5b0689160ced5c1f00b7", 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000012c0)="0a07e857c58e5b0689160ced5c1f00b7", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000006080)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001300)="ceb5049657fd28621a14e006a2bfd7b0", 0x10}], 0x1}], 0x1, 0x0) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/4098, 0x1002}], 0x1}, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa7}, 0x20) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) listen(r1, 0x0) 13:03:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x0, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:03:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCFLSH(r3, 0x540b, 0x2) r4 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 13:03:12 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000005000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:03:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 737.542859][ T4219] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 737.616760][ T4219] device bond54 entered promiscuous mode [ 737.654060][ T4226] device gretap77 entered promiscuous mode [ 737.697604][ T4226] bond54: (slave gretap77): Enslaving as a backup interface with an up link 13:03:13 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000006000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:03:13 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x4, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg$can_bcm(r2, &(0x7f00000004c0)={&(0x7f0000000100)=@alg, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/181, 0xb5}, {&(0x7f0000000240)=""/49, 0x31}, {&(0x7f0000000280)=""/196, 0xc4}, {&(0x7f0000000380)=""/20, 0x14}, {&(0x7f00000003c0)=""/52, 0x34}], 0x5, &(0x7f0000000480)}, 0x40000003) listen(r0, 0x4d) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r3, 0x10d, 0xf, &(0x7f00000000c0), &(0x7f0000000080)=0x4) 13:03:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x0, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:03:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 13:03:13 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000007000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:03:13 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) open_tree(r5, &(0x7f00000000c0)='./file0\x00', 0x40000) r6 = dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x8340, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400000000000) r7 = socket(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r8, 0x29, 0x39, &(0x7f0000000100)="ff0204000000000000000000008000000000000000000080b4c474b459edb90b00ee8d0013d4bf746d5f9bf296a51e902d4fc36d18273eb631f547385ad00e3dfda49da86e5d5937da57b3179fa1bbb960bf4ab5df6ae807a8e8caf021923eb3e232b8000078db49ee90af4f84763c00244804a0a2d5fa97822250475ca5c41ebfd71c3aff744f12e638fbf3c4e3014e0163df63c7e952fa7c419934c73dc1a9666dd73d", 0xa4) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) sendmmsg$inet_sctp(r7, &(0x7f0000000100), 0xa0, 0x0) ioctl$VIDIOC_G_CROP(r6, 0xc014563b, &(0x7f0000000000)={0x9, {0x7, 0x1ff, 0x9, 0x1}}) 13:03:13 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4340, 0x10) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000080)={0x6, 0x0, {0x56, 0x2, 0x1000, {0x6, 0x81}, {0x4, 0x9}, @rumble={0x5, 0x5}}, {0x55, 0x2252, 0x9, {0x0, 0x9}, {0x5, 0x4}, @period={0x0, 0x200, 0x5, 0x0, 0x200, {0x7fff, 0x3, 0x70c, 0x101}, 0xa, &(0x7f0000000040)=[0xffff, 0x0, 0xfff, 0x5, 0xc000, 0xffff, 0xd8, 0x3, 0xf000, 0x8]}}}) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24}, 0x10, 0x0}, 0x0) [ 738.172879][ T4282] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 738.311307][ T4282] device bond55 entered promiscuous mode [ 738.329315][ T26] audit: type=1800 audit(1589720593.795:143): pid=4313 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16343 res=0 13:03:13 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usbmon(0x0, 0x45, 0x0) getpgid(0x0) r3 = perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7f, 0x580, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, @perf_bp={&(0x7f0000000240), 0x1d}, 0x6100, 0x2, 0x3, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000740)='./file1\x00', 0x0) r4 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r4, 0xd, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x100, &(0x7f0000000580)="4f3f9e966550f7a4c0e1841ac95629d74c505e8d11dca50d5e0bcfe47bf070") getsockopt$sock_cred(r5, 0x1, 0x24, 0x0, &(0x7f0000000000)) accept(r0, &(0x7f00000002c0)=@x25, &(0x7f0000000340)=0x80) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") syz_genetlink_get_family_id$nl80211(&(0x7f0000000700)='nl80211\x00') r6 = geteuid() r7 = geteuid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000001340)=ANY=[@ANYBLOB="020000000100000000000000", @ANYBLOB, @ANYBLOB="7457d3e98f30e8a7fb53f8adf3f81002abda9e0cc85b9b457a74fbffffffa1ad8fca759b6a67248bf31b082f2b7411d48cf53efcc302ffa57f636fd6", @ANYRES32=r7, @ANYBLOB="040000000700000008000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0x8, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xa014120}, 0xc, &(0x7f00000001c0)={&(0x7f0000000f00)=ANY=[@ANYRES16, @ANYRESOCT, @ANYRESHEX, @ANYRES16=r6, @ANYRESOCT=r7, @ANYBLOB="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"], 0x6}, 0x1, 0x0, 0x0, 0x40008c1}, 0x24000811) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000001600)=ANY=[@ANYBLOB="ac010000160100000000000000fd3bbd7000ffdb1a0000000000000000000000000000000000ac1414bb0000000000000000000000004e24fffd4e200a6a0800c37ffaee342f9b6d1e3043b93ccc5643ab2f93f386cc4ebcc34f5efa8173c8267277005b49ad1944cf5ffc7fbe82abe07b070f5596cd108a3f", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="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"], 0x4}, 0x1, 0x0, 0x0, 0x40}, 0x44035) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000180)=0xe8) ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0) gettid() ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x5b3, 0x5, 0x100000005}) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x0, 0x40, 0xfe, 0x3ff, 0x0, 0x6, 0x2003, 0x7, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6f, 0x73d9, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x5, 0x3, 0x0, 0x3, 0x1, 0x1, 0x401, 0x1, 0x0, 0x200, 0x0, 0x80000000, 0x2, @perf_bp={&(0x7f0000000480), 0x4}, 0x100, 0x0, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0x0, r3, 0x1) io_setup(0xfe, &(0x7f0000000200)) socket$inet(0x2, 0x7, 0x0) [ 738.393551][ T4285] device gretap78 entered promiscuous mode [ 738.410253][ T26] audit: type=1800 audit(1589720593.825:144): pid=4313 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16343 res=0 [ 738.442825][ T4285] bond55: (slave gretap78): Enslaving as a backup interface with an up link 13:03:14 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000008000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:03:14 executing program 1: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1f}, 0x21) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="0a07e857c58e5b0689160ced5c1f00b76a44f4c65c37308ee7a379c9f113e01ae8239afb4fd2f0675da2baa40af0f0631913be", 0x33) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000006080)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001300)="ceb5049657fd28621a14e006a2bfd7b0", 0x10}], 0x1}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/4098, 0x1002}], 0x1}, 0x0) close(r2) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0x2e4, 0x4) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}, 0xd000000}], 0x400000000000132, 0x4000000) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000001340)=""/113) 13:03:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10}}, 0x20}}, 0x0) 13:03:14 executing program 0 (fault-call:12 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13:03:14 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000009000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 738.755438][ T4356] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:03:14 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000008404000001007d60b7030000000000006a0a00fe000000008500000012000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x9c000, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0x69, 0x20000000, &(0x7f00000004c0)="b95b03b700030000009e40f008001fff060000000000002f77fbac141412e0000001c699da153f08a0e6e380f60108f683317585d7473f1cab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0xfd, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x301040, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f0000000140)) 13:03:14 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfefd}}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x0, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x4924924924926d3, 0x0) connect$x25(r2, &(0x7f0000000080)={0x9, @null=' \x00'}, 0x12) 13:03:14 executing program 3: syz_emit_ethernet(0x56, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaa8f040000000000000086dd6000040000200600fe8000000000000000000000000000bbfe800000000000000000008043e7b653ee7280c7", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0077f895d10e63a50ec624a9baa1de538239"], 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000001c0)='/dev/snd/midiC#D#\x00', 0x800, 0x900) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, r3}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {&(0x7f0000000000), r4, 0x9}}, 0x18) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x2000, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000180)=r5, 0x4) syz_open_dev$usbfs(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0xbd6a, 0xac100) [ 738.928407][ T4356] device bond56 entered promiscuous mode [ 738.951969][ T4361] device gretap79 entered promiscuous mode 13:03:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 739.005396][ T4361] bond56: (slave gretap79): Enslaving as a backup interface with an up link 13:03:14 executing program 3: open_by_handle_at(0xffffffffffffffff, &(0x7f0000000600)={0x8}, 0x0) r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) close(0xffffffffffffffff) write(r0, &(0x7f0000000040)="0600", 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000012c0)="0a07e857c58e5b0689160ced5c1f00b7", 0x10) accept$alg(r1, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYRES64=r1, @ANYRESOCT=r2], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x8000) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setattr(0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 13:03:14 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000840000000a000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:03:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa36d, 0x0, @perf_config_ext={0x8, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xa, 0x2000) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, 0xffffffffffffffff, 0x0) r3 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0) r4 = clone3(&(0x7f0000000300)={0x40000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0), {0x13}, &(0x7f00000001c0)=""/244, 0xf4, &(0x7f0000000100)=""/9, &(0x7f00000002c0)=[0x0, r1, r2, r3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x7}, 0x50) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x3, 0x6, 0x0, 0xfffffffffffffffe, r4}) 13:03:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10}}, 0x20}}, 0x0) 13:03:14 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfefd}}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x0, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x4924924924926d3, 0x0) connect$x25(r2, &(0x7f0000000080)={0x9, @null=' \x00'}, 0x12) [ 739.300360][ T4431] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 739.535500][ T4431] device bond57 entered promiscuous mode [ 739.585269][ T4436] device gretap80 entered promiscuous mode 13:03:15 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff95, 0x10, &(0x7f0000000000), 0x10}, 0x78) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0xa, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={&(0x7f0000000040)="061ac30929907334138e51453aef950770d105e7d86edaa039168432f5e10b21af13671e645e7ecde4e2523c3f67bc478707b9ae43eba2f7749a819c732dfa9a9d16a97b1bef6b8c", &(0x7f00000000c0)=""/89, &(0x7f00000007c0)="0b5cf840d58fb63f0bf6daff223336552d1d0f55ef0994dffcbcb93c347b6d6815b05cad636d98d3f0b545e277090821abf033deae21fef3ec67957cdd28fc9b76714423c778b781e5c275226abff436d78fa8fadf98493fb1185258fdcd4a9a38653fe319beb13c1e467ad74829c130a5de49edee5d70d86518c5a3ff650822dba9fb158788f89731e638a6b12f7940d44f09a470258f5345c50cbc84a81023ef9c9ff5c76d76a6fdb0909557e6712aaa7809e354bd4ce6969e4d4d7b17cefb1a99d1a463af5daaf211a9c96419b5140aa879a3bf0063ba704806a2916a2c0a9df5e3f8ddc621957bc7aa4d762c8e1b6fd25985979a76cb2c4442d9c10be1e41885bb607bc51ebd8cc18da7cf9db2f6d4438c8627780880311ed7f4e846ce32a4ff0e76b292c439eaedac1c55483ae94150cd80256c4ccf4ee5707f6fa32d388d6595a46bfa4015b9f9133641b1fe16de2f45afb7e77fd474a3a4fa9b7b53a558f250a877388070db6ad6bedb72c88d3fddfe4f2ceb45e36ad362677f848b8ff4ca09a751eda79b13d378e302699f199ea24056e5c1f1ebd72f7a95fb1f67eb9736f0d5454c9ecd9a2653d849905e32a592d35460c086bd69ef1197bbe41af566005b5450f3f39c0970b53c819ada919d580bcfbef9bc7b53779a729d46952d3fb5a68be78e642a949793124fdcdbdcc0d9524c5bc4e2948349b4dd5aeb5e5dd813bd99394f32fdaa98f97594d3e1692d1ea07f6aa45591f29f50deec0a8c47fd4514926e00e6e3216a355c26dd28d9545413759417f14307cecfff5895b0f630c957862f6958efc6c27ff21ce3d127d32b7c3f1f87eaaca2ad5d6cf471290973d6701a3f6e278bcb4fa3c62ed1d180c2674840b20c187d2c95a70b3948dadd3d9c8a61bdc4be3699b0b6da7087a5378028a9b8c850e19303a850550bfe04168ae3c507ce9d42d7ad4c52e555f0563e7b3f31d06d8f8c4fe6ec7e50a6942b9797e476ec1312fca504e4c659c07c15bfd4afee49b1c1cc58b4cf14b5a28abcb63b986e9258b791ee618c1d4ba11786697d495917b077e1aaf0a15417bb60ffca7960ce19bad26bdf4513de0cc3cb1609d6e1f711578636c89cf7e6758d62cffc03ffc3032ec74f47a39c69b4f8a21e97ef76e8d492d1ba572b270cc6c653e7c5cf374cf03cb6ac6d0ab11b462be6b01fc98a4eef20a6348433099b41fdfdc7e9ad8e8cf7043e45776d2f542d09a667fd4d005d979348ee58aaa2438b0dfc04767fd1defad37746026ad9b1fc5473311b2e0a1cb0cd09930d1b0a30257d9ebf329d16cc15b209659b8d16df92060a15e346d0937def4e72b77b5147ed61a895ae31cbe8a808eeff67babcaa59c36e216a749533a2d858f56778674b46dd4c0c0a8add563f37585ddf2c2cb3171e42a35b597bee535349a2681edc22196b09021da06e1e9f634f457cd0437a9ea71a92a45d4cb52fd9408fd4ce56aa99f1dec07c0a313648054a2240395234670f67f36c540ece82fceb42a2be3d0e07fa8dcf5e4c9601cf62f7fb4fefbe3a5ca3a12fa89f2184a8b51e4a2fb6bf8f76328a4488338623883e52a4df1d2d7e2f15de67f5084d0df69b5acf3717bd0e403796ee64426192cc987a2b0fc3e0fe6a6935d558cb92477311c4ba4dd13ad80a92046a61e486914c1a25f85acf9bfc4c084fc5925e1955ec9c9db50848eb82d303301489bab6ead2eb16da3d071e1875bf32285816790c9bb5206b2bfd61c8e4a29d4c5f07fff7f066978e8f172e41bcce82838d3233951f9018ec60887c81bf1623582e3f1e83bdf096214fb470c17709c2477e5dd13e8c2eef9e2b684f942032d3b12a88d439c841d6e593b995b06b16079d942bf87ae709d1a3d60f4d07d6f2cc1e2f05c2a026398ddaa42edc89b01e81f74da7a6adb24744a1ebf043d5f5bca26ca9086e3a3e7a20fd904395cc534148941a6a2a987b0e751b40d703a20c91e4db6bf4cc503cbdeaa173d4807206e2552ddddb2a35259d53d15736d0a6c5be51fba48f17838329be31c5ffed8004f1422433eb3375b2f24ea92c636bdcf94ad0387321ea10592ae21423379c188c796b2d6189184e7e1ad96e84e04aaa2571c3a9a829f474df13fc23d505ae5e1c58d4b97a6a23b0c4fafaa4aa994854be5a8eb520a3ff484829f6b47a76670f88c92b069efed29b720c634e9ca1fb5d22209e707949457a467b2d5758e813a8578f543e26c0bc761121373e5dfb04dc8db7231128728238b24066b1cf02c2642619952877aaf316f470dbf5f88150f6f5ba209e98bbc64511018cc1722f6be27d0f4e46caf5bd9d147e0af5cce6ee2ebd3102c49e4ba0729ec531b555920b6bb27385503079c34e4d28008d60b0e3886d94b2b37974ddfa981c99a2c015702c4a67eef99ac514bf39a174eee7858e63b28f35cb57ba0fbcb404962dc759e29af1d8b1c641c02fe0acb4fa192be146dd4f2267cf6fc21be4e6f846e83164deb5135b461c743b716786a3cd49f50fddb8f021c3369e00fb70caeaf254744695945c0e2021133af9ebe5e5defefc65f93a12b8ddb4c154e8a48688e6a055bbba711c5549f786f356e13067e65954bab0f84bf5dbb44525b7addda9afc6568c3cc0ab103ab0435b08a2c8cb2dc7394c84817a4971c367962eb1078b912baa6842c800b8029ffc69f9537400a0b72ac1c38b1550c179cf9e2e86dfeb639eae62965945c4cf96f097c6887c706807c4a29ae25d7e91b456f31aea87da02a4bb3d3a94a6ef8cff5b20228f42ddbe859304eb66e8ecd397020800523a5a9f04317d51e1a4fb24503681538bcb2920d704cafcee2cd6b31cba0d116c9e97556deeac544cc0a44f45ab9af8408239c99d1f020ba4736556ebac8bbff59044d49348e290e2a93345f622d276ad6218941fb8df228fde2d469343fe4a5315c7f90236987d85b47de63e3dd9a367bf60f76b80a065e0e2e0fef2217b6735f42c8bbc5e0318cd501faf561e69d57ca7d74d5a5f9ee0fb1a39c55b5443a450cbbf7fa83da05b0d4ba65010c23931a0be6ad92ecda6c565e89e297be942e440cea158f99f3d6a1b1a698fe7398c1540a71629c199b33f241168d6f70972d079c9e321380a8707c1fbf3a6085f4a090f5a63d0fa250c33304ec78d24bb21653391ce9e31b4fee6687637339e8dc0a615d0444f6ceb20ab0f13a6c0c39cd7f4f150fcde756a1036ae62b227e4967e5b5f949e24b61ed134c2e17258c9ba8894915d1bdc8ab2902e550b615ef0b1c04bf8970433bc19d7464372dffe9cb1318e2ab2f9465b789b79146790f3875372def60710e125e37c76cca71b4d550059be895f054829d05f56793b29fc722d92e2eed8c27680cc3cbb08ef13554d561ad99f679a2cc1a0f5333d093a5bd9954d2e8a36aabd7b0d36db6ec6285b1165aadeb829a40b2ee98717e2ba3296b06e3f2314a8b5fbacb35035b510f61ed40df139f2e957dd7f4dd573ea354c19195311149944f7aa5b848f09810a6db70e9e8dfb119aec8f7b6268d433e850668a8eb574da333186c9f2788afbb937b0023dbb46850034e2fecf827af1d4e23db05a63607161b904a31804f3932df4677dd7b169e33a9643dff45965dab16d72b3eadc17d76e1ba06f8f9df61742dff961f9b2128553370964396bb8ea3e9630351e04bc5a53d3d04b26748aa6eb1badae9565de7c8e5d7dcfd138c93671f761f9f0f99a40c229a2682bdb03c9de9114a8feed887232ad56be635c1f653b340a771fccc83bb8fbb9e5a0c384116a4fce9ed8e0a0445130acf4148bbc8febac6699eb08129d19200f8bcf4f67f9c3b924b72bd6741741337159b0cc1e86d4bf4c3c3de26ee1ca37b13d1d2ed08e24fba76e5cf762df58c39fe8fcdf9d54285a7d7947d02eb97b731a5c2128cdbdd211cc4fcc72f5437b8c2b26065d93a565491fea8e52fcee9c29f67bb20ea78b5aaad946222adc2a5483f10f2a1fc5ef87d4fcc7c7e1c1c4470a9069eb2789b3a13f922ed54f0fa9a50d4c556e75066c4e757d86219fc7e3c9a3a3f585e57bcb91ff59cd0d13f60d5732493a5b5c23ec5912ff442df0c4731bb2139ca105faaaa8cac11c81858af75c9fb454f859310f2b3d82c6694ae61f77656a6f96a9a091453ad1bba9aef77b34fe5732801ad8eca15ed72111b6d7a754335590708a5864ab390267f2a99171a2624ae0eb25c8a323bf2b52490dc44ddab7b43d966bd40d992a0da3571682d57cf7f85132506bd9c97fd43dbb8b819989163fad1ed74d637d836ce3242689575e86a204e4390a88ef68c13a8eef879df87739de773c13a39b831d2cdcc845e5457aa9445025f9dcd774c42d5837c42121fede759e34a1d05d3ee29b55c3f25bb0d686f3d1c05b720408c920e34a2a43db2cd63fcdf871c0a4ff78ba426825c717aba17377ffd74faecfafb3306d8457c65bd5623f4ff051e0c090d7f696d4fe095e9207f507e0ab181b7eabf8995cf813fd0e43f2ef7173ee249e7b787bcf395681caa4db4e94df277670f0c066094b4e05497ea70bc1c3074e0c6d87f0336504d20326c839c1ca5b0d32f2618cea549b44ca75bbefeea73437682a3fd280f7fb3076179ab5d11041a4a12d701f523bd136dc9915b762d529971dac1d5ccfd3c9360a5438db66390fe41c57eb36c3a2786e1271534c33cd41131fed110307c9d16ad0e9aa95c3e863e7c05a0e4aa9101df6b7c77220b41dd77fe22124bb161ce5c1e6da553b88c92bdbb72a6c837d6dcfcb33a81b9f7d2e84d0579593d88da5cf0653dd9d619ed709c3ea070d3e56c1f10e2653811f8a31f98716d2de0d97d8dbb86a0081043e7725dd8857b8b75a1b099ac77d2f7fba81eaaa4953fb0742020660537db9f95bbfe96babc01b3f5e99dcfa764f8a561a25de80437d04b673607d983fa5dacbf71ad50793395d4b634f17186fa42cc2e469941d29b477eb8446f34f99c3cfedfe1ae4b7fed17425f1f85d659f0cc03b46174b135f4adc679a873929685db4eda3043301b92f63f50424061fc67bdf913f1173114b0f017da76605c24efe961cef568d6d6569fad550e18085a866557fa25d12708a1871912026071548ea18ddfa7e9cacbc9eaca655a033256e05b2a39e054d98bedb50f6dadbf472d018e125286c97460be6851b76861d09e4ca1ab105395b27efc6cf53249b3c9a5277797afb61a6beb46f09a32fb9d7ba2d093423d59bb50879dd1baa130bf28f8e993e8bf1bf89b3cb2d9e254b1d2edca021762abaffbf6126ed29400676457e6dee4e61a5c8f58e3474eb880e3abc52fa7ef5ca1cd8db66df89cf314a6dada92064ab0c6efc8513c9214dd4e4974402928cb24061ec3f8332764d445e4879270a7a5b551a6d8dbb0320b0e5b2e98c83a70f6875b0ab53406e401f975a08f70a468fb5a05b9b1ea604ad9bebd242abcf370aed85c3248ef697a53c7bcc4b11f79d421c2790e401b39efa37c3ccf25ce4af5da17ab32315ba59dafa7c791ed63d7aa7e118dcaee969efaa111499534907e4236415f36a80b7331ce98de448f0eef28f5fdd9968201c81fe1179634192f361c4982e98d2e188dfd92a1fbf147bbe958345bded00766d33e6609818e2d62537a939bbb9758fe1495e062ccb1b2382b93d821402c3c2a968332c7f02f7846cd1ef0dd9939f500b6013818361e9f227527b83334242b663be9740294d530875274fe3668e58a7cf67c5298fd6eaf797804b850d004b58ea434eb5acdd3a43ef7795d0757af8eed03808d6", &(0x7f0000000140)="81cc2982db609086b3e679cc8c82e6722166ae7251990af0b9475a7b981f32c692449207f8eca0a8db8cc80cca2d73", 0x39b68674}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f00000006c0)="b9ff031a000d698cb89e40f02cead5dc57ee41dea43e63a377fb7f11c72be949eb4be1977d48", 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x2c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x18a}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x76d}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4804}, 0x40080) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0x6) 13:03:15 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000840000000e000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 739.724576][ T4436] bond57: (slave gretap80): Enslaving as a backup interface with an up link 13:03:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10}}, 0x20}}, 0x0) 13:03:15 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000011000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:03:15 executing program 1: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'ipvlan0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000180)=0x2, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000000c0)=0x4, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000140)=0x300220, 0x4) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r2}, 0x10) dup3(r0, r3, 0x0) 13:03:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0x2, 0x0) 13:03:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x10}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sched_setparam(0x0, &(0x7f0000000200)=0x5) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x1c, r1, 0x3, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x811) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$CAPI_NCCI_GETUNIT(r3, 0x80044327, &(0x7f0000000280)=0x6) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000d70400000000000009000100626f6e640000000004000280"], 0x34}}, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000001400)={0x1, 0x3, 0x1000, 0x1000, &(0x7f0000000400)="66ce32a89d6b69ed8284eaa250055a7b5129d687c1fd194ad4520473f54c80def69b53542ec9afdb7f8d5a46d39fc6cd1979fda80e8aa4cc6e40a769d8cefbe83860b594fd2ec52a2e5308dc389575793a8c3713c7b973248c36ed37f0463bfb932b43cf6534c9a6f06a7eec157ca66ea4a1b17313343180b6fae078cc465a1d426c8e629ba5e9881eaf63aae1975f89fd732a7cb0762cc1db2f93ea44aeb957dd00955b86b6e63ebe9d4cb47c1057212a2a55eada6496d53032fab9020c867663f44220e538ef8a6dd69764cb2e7ff00fdabad2c1e85b2f4ded8f920d8df62303f8b21a651bb0bf6cd490f1c9abc6cdc82a7c4063ed23d763f76ba3c1d0162e800d18380f5e93a00f08e3927f7e0af22bee4e28a94267ddd05ec45bbe465549b1572c7b0420717a408c8d0f880652ec88d09f64dd98de56654856c486fbe7c679beb078f9826d61312c9438932176f36539bd33f404ba7428034c3a48cea23362de78f28f9f717ea26069edc64d5290d6103eeb14f068b7c616b2c71376a72c792f2557b54ecf29d3bdf7730592489873792b5c4f22150ca1771ed2fc15b20cc5ec4c8782831504d68b88c36b980e9a877202ba3f54c9a53e3c42abf94d9f69508879794824dbee64c8011d6a2a971888eb009f982051764b75489b70ffc6e5b2dddc10b27cb5080f209233588527435ea2ccfe95e4fb5b9939adff1db77c62075f3d00180ef93b7693325bafc6b1d824d64b38410f0180a2cf17557cfa2741052f6b747e3f6d9b188ff79a5a328c1aada9b178de04e7443b53fbeb9a0aea32af59797437fcccabe43c06221e8e51010186844757277318fe84758c141804ddc298e15a9f5df13cf813a69c3fa249f45d39663af0a9e945d0a7d45f39462b492c29646db5c4cbe745215d8566da43c0a576d833e15a1a3d697a26d041017a80f8290e298b144c4360aa545668728fec98fd001340f5a7a13ac3c3780aa793a2c6ca4267ef09fbba10bc2958279fbc440b01fb8cad7aa592e84441ce63c547da85164e9c4582a96f26af202a33cf88c459dd5a8c87de3e9137a30bd7e211dc0443f4fd53b47c22b9f8e6ee290f74d9a78c5c491864afe4296d714d3568353c14cc67f6317030996f563a34e283fcea361bc0012c5cda6eba88a822042751568f135fc316938fc45319cb44c59760d7b25d2b99dc625bd42fa250e0c7f234bdd20f19be93a5eac78320e117f50a1e0a2fcb10c18a9c063bc29abc6e65e395ecfa4c8ab46b5a622329d15eb75c658c32b319cc8d4205941a302f9ce5e3814da0bd7e56efd2b64ebc4b6afdb2baf1b8f4e0b9b65d022d45897547ace49d240aa5f1cb10ef8fb2b1744a02a4b089c55c376ab205b6565857c0c1d0c2833dcfcecc35743058b1db7ca3784fe0b84660ab5dbb53b1729dbe5a8f4ae745811d40e6db4eb1a564dc0f9ce2141cbf67766ff1ac647646ae3ca87e2260f63b91e776afdd292f06d5923c409d48f16e8fb85f004ec5ffcd078f52c1a7e5e49fd6a4e24ae19c13f7d0b3a912e27eda1bdc7a8a4e94b431df5d59fa8eeb5e8cc6ca617d13c2df129a2cb2eb5b964bc3d5ab8f8ea30ce1a85a5200a3a66b6a52383693ef315f0f5e368440c909a154529256c9986fb09aa4fd02937041a75e7ccd4a51674fbfe20d9241c53fd13fff6d36be0471d34fa143039d46f92a67bad0df89c6d2f695b6799a10fc5f1f828188ee4924406efe032a314be0389cf645f2d603eacff1a5649417726b1b233f06e32d48ea17128f71ac4c643a0cf5ba0cf276b0fa47da2b56e461dafeb20b9eeff43c9bea8fcfd3744bb1b9a4d2b73e1dd8df37711d0393722eb8ae9e46a338321c2094b98733f3e82b2b93830ce1d2868d323df37da7dad3db4d6a4c11fc31cd9405ca09746b0e3b796d845892e8a31a22e5f2bf8c6753d8a92f3312d51d48e4447aefdad557bb4f3b5cb39161cf8503bd100a14c4cbb8d9499e8bc2303c15c2a5871bb98fd9677bcf6063e01a38c42afd74977e1aeefec3f9681495233494c02ac093e1b23f021c0ea66fa3201301e24f4dfdb1382ea55ebb02974231c1ad879ce7d594e5dc2561c73b24ad039be11c3ef7532db92d684a8ddf9ca5425cc6c8a3aa32687702a5be30225977ff36546fa3c811c938b8cf0dc79b1f1a89c841240aa530a2b23cbbe40c416307443b80e59cd9d9c0f435c19e843b416c56460240c18968fdcd546e4678e40f06f6076509f5a05d63885368681984dc6e00af5a226645799d9fdb622e844eeb29a6a046191216220aef50b9c0e1de4a94f575fdbfd9895c62b038cbca1e576cdb91f87d3f20d6626689b280eb5510eeefd1ff1777724cc96a141390b8a7502ede84d722fa627b2bfd0371767b72a0140df3fcb79f45d9ee21cdaea330a357c10f240f932187f42211f4751e14b73b595bffb65ec5b8fbdc8b5545104db80e023ae89d2c00c0d27ac5c545ec84974b7beeb7a5ef34af95c1eb9c6ac70c4890730ce7e9bb4395eefb9ab836e5b25171e798493f35c2a561cc829d875a131164e21944f0831104936b029847f3347f1d3ec326c6bd09d3e6fd192ff339eccfcf1b7a084d8cf417c47438ee73b9025dea502b2a350d48373e8b747617c514b57ebee864babc4d98173fc178cb3147905e4c9d3444903b55ae01b2dac2c405719a831c4c3492d59f11fb796644abfa83ccf6b27ec92a9a5fb490e9997d9bac16e994fbd1a485a5aaaf404611efe66b06119d3fdab6a5b7002d84a06912acf0e9f7f9a6f59617d98538987a8820874c60d769972c6df3d79c77cff768b0c559706accba2a84ba1cd6c20fa1560d1f59ec44d03377fe60d187db8c0a9e2dc0bce4fb2c95267bcfeda84613dbda9b2dc0745c2697417baae50428cfaed9bb52f459c11407ac4a22840fa31305b142e51616a8a713daf2781ff9d92851dfbea8ba6fa3ca415f08e3fb012713b746973ec7cb6c755dd6cf15309e4a2deb3b9332e924b66250617fa4b0104808c32c46258dafd49847b1a5dec6f2c8baf1fe33af3e89f46590d8b42a2c142f6ff5e89c614940b306d9634e74535f080fc9ced48a23de93d2ecb9e3d3203abc18183d02e6b530f35794ab2bc7ecea244ddf21741d6abaf13a43e021cfb8ce223774f122d28ece338cef1bf356f063e19b49b353eaa5a4ccb2fb8fa9ac13aefede59aae99b1b6a5f599eba42fc2d689f2c23b4e7c5c6aa1a22550b9af8c24db3d9907c15a9335df9091f92dd1b15c69767e08a7dccd118366b4aa6d49d31da263ac424f7d0092fb21c14be0b10da7fec2e684bc28f9e2418e28fb107f238f2749eee96cc424006ea9281e64f3c9290c212b0210da486573f795c479112ab1e9ae4e6212045845a0b4fab8f96414a12ddcba54a875937f191eddd3834b7e25a5dcb5239f1672f5bc7b88c5795befe1312499ee9218830195b2d0f27ef438c18d341fd3c87d6e70e2fbefd22c72b0a5ec6308e3002169b33eedcbb4e67795f0429e5c5aa53bbaec9078e6e88705c2566cfd51237b52844285250d823adc8f5025e5a018d5f4d6d719a7e31c4ba440bc83ee877d74695b204fe5a2b4340e7a6dca8e53e139b52ccd7475afd0cb051f9efd25342a32905922a579ffeb5a9b7a04e5f12f00011ca2ca882ce97b899ac39a9a91da274e9504173fc6d47987927e69d8f8e85756a1b7ce2f54b5a8e11d979147e7e3d1c5688273c3380b8fdb63ce4d8a49eec4c4fce19e27dd6bbd8f27716d4ed49bda274159f456f13fcf6b21b51ed25e37de7309d70df99a5c8d0b153b0bb82afaa11e1acd7d3260817943a91bf2526c98f3627e8549d8fb903de3c1fe2d646be7c916e70fb9e707f1f7cc7773c5366895dd5568fc66fcc368d612c2d6b28be1be4f85a9245a22f986723b39c7155d6c5bdae98ff68f72f2cb327980128fe112728d617832c004487381497da7fc7e057257abdfbc5a55b9205570a2dd1ca2a8807b231060dbd128b3a1edb681f1b2746446575b7d4c6b646bbf10c9a1a82e9a8c644ebb76ff85b7d5e4164ac5b388702c78b1004baa0cd9a278995a69085cab3436c3b30c696054a57f487d3262ced0ffb52c589e6204553139618cb037c4084296a1921e6504ec87d8f7523513c0eb16db4727d44516283d208068d9b3e1c8d2e3f77cec188c22856cfc2e945245a7045765322b3c265a8ef67d1cd218238d7eb9ddaae3f9316eb0195f1e83d7dba2ce09dd6f2cb06ee1b0fb6bd118a1a1f0bd3e52e8d81585daa6fc1180f88c9f31154d66089ee0c5bbbeffde1b1af839e74aede37c919c4243e53a26a241afb400f64afacfe925cbe41a9ff40a23945f86f882890582fb48117e06dd06931fbb0ef325b6edfcf144c8113aa7a01cfeff1397efa8dbadf26168f6969ba029d79ddeb35259158290a778c41188570749a20feda0e20c208b8fbf8dd68703b83396b08c6debf07080ef00356074680c3f88030b2245857b33ec04408bd4db919628e31853b3545c9691ee580163cafccfb5ab0265605b4f140bfa91c4b2fec2a2acca203995bf3b1b6d41cb768a83bfec4a3978c9bff7b5ee6431da6a5a3b5a6c62025243a6cf491bd6ad2c4f30c07bc2bc678cf54b276383a1aeb12c2d10effaffe9cf303829f6c1afd257a2015c9cb0a789d223682375c141572502a8ea1d7d64c2eaad6c68b66a87d281d8fc14cfa60babda0d220a89d02dcdebe70767df59fce5644deb857c8fbea0e780d9a3b91ef1695e78ceeb382ffacb3a4c747ec56a5b4aee816faf5b10f53c9b6016ae300aea105c14ca9be596d91afa1d9f3043855f14579970ae667644b0150e8954206adc173bbf7e5ccc51a992a213270669ceb3fc59528dc2d1d6a847b361558683b030a547570f2a43e24e67c27e4c398e753fd223c365ac055bedbe733b1f1c072f4de100f3fca2189b6012c113e3ccf68ecd39fea5224e69ba43957b4bf71a632e64a4a8f3d5b5344df85e7623a165d44cadc342c42d2f7c89abeecf3184f6d4c1b3d2ddb6ad244282f4354f53c0a5bee257bbd14765836fac1bd05da21f7b02310ae37cb8584061f7d937ebe0e77ffcab58d9b5a77c5ebaf8b1eeb947b82019814aba23b736c39af26a55ad0911c220484016a6b4815dcc0ddbb9bb18679f76ff41a628d1fdf13b9d64ea66c202685df41bd05b56e4b3b1b17af3bafe17c2c4930c47a6e09f0399ae87b2c6e2051c73db79cf3ce29d7b5e1119cadd59c3440558d24bdbf23e2bc5434faeee4f117f5e118ee407a07c91baeb6b02895ac5538320752d8305cf8637850b7b94fa4ed75f9ddfca4efcf47d32f7ab9583357beffc7e91c86c343a9d8245be8421401788a09c017d085c48325bc62c505fe9ee9e3599e7b038b32f6c4388744da382305799819be41c6375d83fafd4bfabc9e78082092bd085913f1b71c3ddf63aa7dd79d764435d372387916c38a505771ca16342a912d5cf00dedfe26c97730ae668a81b096b19ea6be12d954ad4b1f7ae65be72d7c2223a1ee8072f1d5500bc63f2850cdbc22c43954aa46bb37ff6b362e6d21e59afe5dd8d616e83ef7f56eab265f72cc188708592661b83485f7f439095ce3b7544d8480bcdd5ab48dc541741c888be6093c0dd3ba1994cba7fdb0ef4fd417a4831eaf8c24c522894066520188b18d8d244dcc6f3a425fc7c45208a1e5e6f422ba50b79cd49c0deec9a5db8aa4bd5aea06aeb1ae9f70c743a8d61e576d6ab48e13158c407869c24aa2dfedeac137d13757c1b739e6f24b83", 0x77, 0x0, &(0x7f0000000340)="8c2ae3776d7629cd819159e73afb295c38f86de1f4f331a75a7dfa8d5b569493221c240a84c18ec511ce8bbdf64871b29288285bfe07c55a9ec305b599e4b66a49fdd3d79deec48d0878023a089802415c8441490da93a369af9247a34aeda2a2dbdf04b617cf4ee4abe5acac44fb6bd7aae2d38d67235"}) [ 740.125168][ T4490] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 740.290354][ T4489] debugfs: File 'dropped' in directory 'sg0' already present! [ 740.305210][ T4490] device bond58 entered promiscuous mode [ 740.305764][ T4489] debugfs: File 'msg' in directory 'sg0' already present! [ 740.392375][ T4489] debugfs: File 'trace0' in directory 'sg0' already present! [ 740.410593][ T4492] device gretap81 entered promiscuous mode 13:03:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$sock(r3, &(0x7f0000002f00)=[{{0x0, 0x0, &(0x7f00000017c0), 0x0, &(0x7f0000001840)=[@txtime={{0x18, 0x1, 0x3d, 0xffffffffffff6f48}}, @txtime={{0x18, 0x1, 0x3d, 0x7ff}}, @txtime={{0x18, 0x1, 0x3d, 0x10000}}, @mark={{0x14, 0x1, 0x24, 0x713}}, @mark={{0x14, 0x1, 0x24, 0x9c}}, @timestamping={{0x14, 0x1, 0x25, 0x72e}}], 0x90}}, {{&(0x7f0000001900)=@hci={0x1f, 0x1, 0x2}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001980)="033b756e55ffe44d", 0x8}], 0x1, &(0x7f0000001a00)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x18}}, {{&(0x7f0000001a40)=@generic={0x1e, "7e9b9af3f33aba347857191107cf8adc2b8a579e4ffc237ff97f977b7c7f67f92fc51db9da7f7c9b7b5ee1c9107f3b32feccb8540f3af52b8cac434c96f698ad98f65ba03fe461d1449f4a74757ff9ce41fcd988d19075b520565be9d9f07930469c72b5f8a2eb6d8d7e5053543fc132a41d5c0c8fbfb9d3ce66004eb5a4"}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001ac0)="5b6942c0963c427af3dfdbf3ae3d097e801bff31cf180f80da1ed718789eff1e154e59dd7b4950c7d323008f1e89", 0x2e}, {&(0x7f0000001b00)="ffd986e5521d0a25ac8d7c044940c6ff28fb2519a83f8087b840bd34f4f0750b37c73554dc88b99226a43671e8e73472dee04c640f8c8f07d1964de5bedc2e84442570c9966253b4deb5d9533b7dce85c85f8df42cd11bcba9d8e73ff6acee40572c1f4dd69c1a12e73369fc1ff3553c6238fbb7437b12d9bb4e88142b70588fed6516a5884dc26bbc5385d717dd2fadae1544d3882e69ab0f30f377557240b96ae22098876d8528263f6ef76becc801e0c7ee358c873d994c70a756a064daf3ca9c680ec81236dc412ad5b951f2f755fcb7f6ee2410915c34f472fff36341f3d575ae", 0xe3}], 0x2, &(0x7f0000001c40)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x1ff}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffff7}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0xd8}}, {{&(0x7f0000001d40)=@sco={0x1f, @none}, 0x80, &(0x7f00000022c0)=[{&(0x7f0000001dc0)="3b912083d58b4ae26b6a3e79857c68508ea214092ae1206c4c0003e8982bf03b34ae042622e1dd27e0a5118459ac59b33b83a3a7933e543c", 0x38}, {&(0x7f0000001e00)="ae55adfe41e182aff5f57884285ff11b1fa75b31ff2f93fe88636d4e398e4ac5ccee31314119e74d37b42457b4a486600cbb3aa60f98f0a08b14de4ca7b8a30fccf150f902dd29e339f7d67d67b934047113f06533f3241698f0a17e8df8b11b9a82c28a18fd0447e8b42303b918b36ad71bbe1db5724737e36ca9db465b7d5dd4860a460690f1e3839a685c2852cca20bf54e0480d73747f292133f1f3bed16c68339327dbcfd020044d72c58682b80f2a0f708604e37569d1a6e21a6bf73e248fc342d7073", 0xc6}, {&(0x7f0000001f00)="dc1b413295535a066b234d277afc275cc6507e29be5e187c8303fc8350bf722c19abbb3e446479a2e7b7403e9412294e76e9b501276fc39a55048f588dc268f6c49d6300cafd0d0fee1cac263d069c573575003c681d2510101c6768c664e8db101cff74dec5bbaeb423a40f21664c5cc4432c294bf16c1ee8e9beeb3508ba36ee67932b5c92f74a4ac0d5c2616b1e0f0a12a2273fa174fb1e0231bc601372ed350ab465c061ae3b8ed7ffed50f8bc8a64c7fdbf08a0c79647744e0b1a88edc0302f14979ae15475b2b6b7f51cd4", 0xce}, {&(0x7f0000002000)="04146c594644f87d36086e62f7d0ce5f183c655eaae481b24c3a1245aa328e88827078c80f8121577bead2fcb6451eaf504b63d1952d343af48a2a286aa3a8de6e77752607534d69ac16239c28eff026700c727042e67825302e84d030adee6f97226e8ff069fdf44f638c27a4ad481cc86967b1cb4e9bbb36b88b098d3883e9428e1465da450202ac54e8b75d8a72e27f586ba6a797aa8d786df50ada6e12bc30894c75e2ad54d9a45ed9be268c6e3ea2", 0xb1}, {&(0x7f00000020c0)="5c75c6cb419dfa6ed8b04d7542a4133323414df84802b744116113888e3b01185bc01b564f0160505e9bd65a834442b0862e9c6cc01819d59e3070afbc7ca14568ad83d0ee83e6fbbb14019e7dd6cd3aaaad46c5abb8951e000ebc422f6ccea05eb858e8e26afb937990c06fdea534177a4567443d6538178d93e7b28c3b892c33e69de074315d1a3399b2c78a97a6e12e69b33e81fb1a1c0bed3d113a97ca42c913489c6d2ded5ae31b8204658f485f87096ab257aeea82d331f2c69cef8a9910e309f5fcafb1c47d41c7b63e6e", 0xce}, {&(0x7f00000021c0)="134bd0e9a62c408e5b159e2a742367bfe1b02550d4cee4dfba51c261a816cabf231aae8afbbeb47d0787be786fceb1ee84950c1ae2f2ebe7740358f3a4917c92f7cbca5b9a2abcd7ce75ebd9426e1040322f69a46e40bee169978988cba41f3e6cd037beb8c8c53839abf35af823086b35e2c011cf3a7f21faf5b4dce5c792b287956d8fd9b8efb5f2026931a9335f32f5f7079b", 0x94}, {&(0x7f0000002280)}], 0x7, &(0x7f0000002340)=[@txtime={{0x18, 0x1, 0x3d, 0xa84}}, @mark={{0x14, 0x1, 0x24, 0xf}}, @timestamping={{0x14, 0x1, 0x25, 0x87b}}], 0x48}}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000023c0)="d317f8afaf4b4429f3ca2e112e7f4ce507f4cae2dc22328836a31b69f67618efe1769f4225a7f01087c1907fa4dc90e52a", 0x31}, {&(0x7f0000002400)="40cbeef34408bbb7ed6af395b562ba743714b89a1b323a84e0cfab67099cf11802a240bf07c84e3f5a13ce96e3363a8316a09b2bba0d4a5d3c7370f7d4cfe1c1cfd41959b037494bdd0eccee626b771fe0e6ffbf1aec79e46fa70a97982f91cbc25a555dcb2db30183e7a3b8f45ab7b779eda849554335dcbd8c269e48534c16e1f3724bb6e8f949a5b3c3a3334bf6dc7da66d06b5c00f861eea", 0x9a}, {&(0x7f00000024c0)="8f38971ee8b324087853d70b", 0xc}, {&(0x7f0000002500)="a00367440d45dc56a07fed3f0952b22b615098a80be66e083030b0265c7aef29a9ddc0491066f4edc4622294565d00546144c7b42b5091add6779a1d95157b07fa099348b9aa5ddc357c69c7228b9518fd9eb8ceaff3474fc8dfa973eaa06f0976eb225a4074e36838ab4cf91c258181299d1447b0c041ec81b912afb53deadf01bc647bafa8836f29ba07cf3b7530d984", 0x91}, {&(0x7f00000025c0)="1be1e3643e03aab78b2ace531256d347511833a0621beaa0f9c8919f205432130f6b7f0fa223e27693216b87d860e6cf3aeb35ea7017fe9ca7b028311409f9e22c9d54682a056985b08c7105589a15aebff7bd316fd1978344636840aabb096e4b4b585b8b4acc296911d575d510e82c3bb065461b", 0x75}, {&(0x7f0000002640)="7135461f6015ef40877c551d89d0e892ae4a109394f8d92173af06ad7401686ede243f286255d01b41346e6022a622336490dc214f56f8a39af3e243356ce42af64e0431fafc73c4f1ec0a8fd22d8404353c8cd128166d9d245b635da89f3ac312b5af766f3cb7469ea70aa91d0ce99024d2565598224cc392f4ea35b6afcb412f0223f2d3cb9e409ee230b9134524fd465364115024646d1c0bf16a25cf834e931b10f8058ef114133f0b78a91ed2", 0xaf}, {&(0x7f0000002700)="5e4701dac86928c7069b41dda8c2463e887524c978e8727aab3cb2bf5758b076470c684e8d1082c7c80f767463a5f8208445d5395be582d9516e68b81d74921152caac22daea544a0b7248052f3bd173a86ea566dcaa87910d3173cfd5c79615ee3a7a17cc682e30c6aa61beada61fd4e859e6e10fba14e5fbbd966d4a0d22a1c8737458314dc1af3a2420312d411ef2f1e9b188ee178c4e17ebbb8844efb33edfa4346141800ace43ab0ec06d8e57e768ed21c1be79839363948d58c6963d02de59533086c8ad9394cf0b3fa140ed2527b89a60d6781324a1c1ac51cd6056aa091efb661357eafbbf66367c0c", 0xed}], 0x7}}, {{&(0x7f0000002880)=@l2tp6={0xa, 0x0, 0x7, @rand_addr=' \x01\x00', 0x7, 0x1}, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002900)="a74323f617eefc8c6e87e41522782a69b48755548c5e00301d893288452891f5e9d4f7b98e92cde050cb2eb1c4a8f1652b0713202ceecfc674979ba880acfdb57ab3895359163c24b0721fde35e956d45aad962a7cc25c3cfb81cf8b361695bc7b7e48716c7c77be47024474faf8068298f0b0ca435d3391d940f3fc8fcfb2d2166b8e2df18f708be2732e7dc67d99190bc66fec5b9653f467c7f999b429c7f29433beff37b525fa5e3fba23a2c8fd5feccc7bf6531bd8677bfde6fbe232288a41d895f6c7a5bb7c2b40ae244bc8fc1bf3b7752e7305d1ca46760f9203706cf667d62e917bc3ae5bdc041a6f2b0444f58a9193ba8142", 0xf6}], 0x1, &(0x7f0000002a40)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x40}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x288}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000002b00)="2423f055d0c9e40ac2affc191cb7d4e531f2a0ef921fe0b4e3d051d6966fc009e0bf7a258dbd94eb082e23d25c2a64049a6bb14de7485db15c6f9b8a3fecc201e5b21f4b4874a89141f82e3d9fca1df3becab051d2847cc0cf920f6514703c7e", 0x60}], 0x1}}, {{&(0x7f0000002bc0)=@hci={0x1f, 0x1, 0x3}, 0x80, &(0x7f0000001780)=[{&(0x7f0000002c40)="681bc8a48c53cb9e", 0x8}, {&(0x7f0000002c80)="fb630c2ed6433cbbd423", 0xa}, {&(0x7f0000003140)="6dc668c92e8fd6043770747429f61e1d605e0b2782fdb0014539c2875e8aae92b327718153b8a0229727a62961cdba340824ed94bf531b90a51b203fa4e9e9c93869bfb4ecabef4523c5d64d8341a6f1111161370e25d9da78f61f3fa85e", 0x5e}, {&(0x7f00000031c0)="f116e340e604dc36c82f46426e5d8e826e6ca96a5bbc9ffa68e7555ce50cc050fa15460713f8a0b46e27fc3ec32940109498da2a589c5fa1250b7ad47acb81a024ce8766cf1be585d2fe11160fc4b572757cc74d782f0c9fa017c9f0e4798b80f62f59b23dad3c9e530c20", 0x6b}], 0x4, &(0x7f0000002d00)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x58}}], 0x30}}, {{&(0x7f0000002d40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000002dc0)="f8fefda98fbe84e1235f72802f028eff10655cf035d387a099520048d829ec03ce5537972aabd2594f5b201bd05800f7cdc549641b1a6d63ab05f14e7461e80c7c6780aaecd90fd64bbb0480eb666a421f576928b4dfca28e57926633faf5193a2a9e2a580450f9d1b2119045ec42e66a4a20dbf468a934c521ae94a27f1732250c76f6072c765e4c4ef169dedf31e6fe5a89171059e7b15efe8cb3297fe4389f861157b75e2ecd6a52f92024003f24e7257fbfc", 0xb4}], 0x1, &(0x7f0000002ec0)=[@timestamping={{0x14, 0x1, 0x25, 0xffff}}, @txtime={{0x18, 0x1, 0x3d, 0xa8}}], 0x30}}], 0x9, 0x20000004) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000100)={r9}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000380)={r9, 0xfffd, 0x70, 0x81, 0x8}, &(0x7f00000003c0)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000400)={r10, 0x4}, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x160, 0x5c, 0x160, 0x0, 0x3e0, 0x228, 0x228, 0x228, 0x228, 0x228, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x46], 0x0, 0x118, 0x160, 0x52020000, {}, [@common=@unspec=@connbytes={{0x38, 'connbytes\x00'}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) [ 740.461379][ T4492] bond58: (slave gretap81): Enslaving as a backup interface with an up link 13:03:16 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000060000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 740.531165][ T4542] __nla_validate_parse: 2 callbacks suppressed [ 740.531175][ T4542] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 13:03:16 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$ax25(r3, &(0x7f0000000080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140)='NLBL_CIPSOv4\x00') lseek(r0, 0x8000, 0x3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f00000000c0), 0x0) open(0x0, 0x105010, 0x0) socket(0x10, 0x80002, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) syz_init_net_socket$ax25(0x3, 0x0, 0x0) [ 740.633164][ T4538] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 13:03:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0x10, 0x0) 13:03:16 executing program 1: bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r0 = socket$kcm(0xa, 0x0, 0x11) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f0000000040)='./file0\x00'}, 0x10) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x44000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4010) bpf$PROG_LOAD(0x5, 0x0, 0xfffffee0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x40) socket$kcm(0x2, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, r1, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}, 0x10, 0xffffffffffffffff}, 0x78) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)=ANY=[@ANYBLOB="880000001000000826bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00400000000000002800198005000600b6000000060002002a00000014000400cf7ee568dcc62a47bfa91ef38551f8c10a000200aaaaaaaaaa1700001400030076010000005f746f5f627269646765000800290089c50000080029007b4b000008001c00", @ANYRES32=r2, @ANYBLOB='\b\x00%\x00\x00\x00\x00\x00'], 0x88}, 0x1, 0x0, 0x0, 0x8}, 0x44011) r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x7fffffff, 0x109200) ioctl$RTC_PIE_OFF(r3, 0x7006) 13:03:16 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000084000000fc000000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:03:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000140)={0x8, 0x4}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg(r4, &(0x7f0000001640)=[{{&(0x7f0000000000)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x10}}], 0x1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendto$inet6(r6, &(0x7f0000000080)="d69ebf4006cf2548b7a3b67e0ae8349f61f2e3f10b2ae542f5b025a55fc1c91250aba40bfe73c74ab98fd757b7d71a727f05e375e9f9e3c906ea488718d180bd363886cfa1bb8ff91745bc8f3239a17fe8bbbfe14a665493648a4082a783d9aaabca93448b9a5acc536a3d16627dba6e0938330cb3ec15af23f6a1841f97", 0x7e, 0x40805, &(0x7f0000000100)={0xa, 0x4e24, 0x1, @mcast1, 0x66c}, 0x1c) 13:03:16 executing program 2 (fault-call:10 fault-nth:0): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:03:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f00000000c0)={0x7}) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000100)=""/163) r2 = socket$isdn_base(0x22, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{0x4, 0x3, 0x1, 0x6}, {0xfff, 0x9, 0x4, 0x3}, {0x47fb, 0x0, 0x3, 0xa9e4}, {0x101, 0x2, 0x1, 0x5}, {0x4, 0x0, 0x7, 0x40}, {0x6, 0xfb, 0xff}, {0x7, 0xae, 0x7, 0x7fff}, {0x3, 0xfe, 0x81, 0x1}, {0x5, 0xf7, 0x3f, 0x3}, {0xad26, 0x8c, 0x7f, 0x100}]}, 0x10) ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000240)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) gettid() syz_open_dev$video4linux(0x0, 0x0, 0x0) 13:03:16 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000840000002c010000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 741.019866][ T4575] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 741.091642][ T4575] device bond59 entered promiscuous mode [ 741.118484][ T4575] FAULT_INJECTION: forcing a failure. [ 741.118484][ T4575] name failslab, interval 1, probability 0, space 0, times 0 [ 741.124809][ T4592] device gretap82 entered promiscuous mode [ 741.139200][ T4575] CPU: 1 PID: 4575 Comm: syz-executor.2 Not tainted 5.7.0-rc1-next-20200415-syzkaller #0 [ 741.149023][ T4575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 741.159077][ T4575] Call Trace: [ 741.162381][ T4575] dump_stack+0x188/0x20d [ 741.166186][ T4592] bond59: (slave gretap82): Enslaving as a backup interface with an up link [ 741.166720][ T4575] should_fail.cold+0x5/0x14 [ 741.179953][ T4575] ? lock_downgrade+0x840/0x840 [ 741.184888][ T4575] ? setup_fault_attr+0x1e0/0x1e0 [ 741.189934][ T4575] should_failslab+0x5/0xf [ 741.194358][ T4575] kmem_cache_alloc_node+0x25c/0x760 [ 741.199684][ T4575] __alloc_skb+0xba/0x5a0 [ 741.204028][ T4575] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 741.209591][ T4575] ? netlink_autobind.isra.0+0x21b/0x300 [ 741.215238][ T4575] netlink_sendmsg+0x97b/0xe10 [ 741.220030][ T4575] ? aa_af_perm+0x260/0x260 [ 741.224577][ T4575] ? netlink_unicast+0x740/0x740 [ 741.229543][ T4575] ? netlink_unicast+0x740/0x740 [ 741.234492][ T4575] sock_sendmsg+0xcf/0x120 [ 741.238920][ T4575] ____sys_sendmsg+0x6bf/0x7e0 [ 741.243862][ T4575] ? kernel_sendmsg+0x50/0x50 [ 741.248547][ T4575] ? _parse_integer+0x180/0x180 [ 741.253414][ T4575] ___sys_sendmsg+0x100/0x170 [ 741.258122][ T4575] ? sendmsg_copy_msghdr+0x70/0x70 [ 741.263248][ T4575] ? __fget_files+0x32f/0x500 [ 741.267938][ T4575] ? do_dup2+0x520/0x520 [ 741.272196][ T4575] ? __fget_light+0x20e/0x270 [ 741.276888][ T4575] __sys_sendmsg+0xec/0x1b0 [ 741.281436][ T4575] ? __sys_sendmsg_sock+0xb0/0xb0 [ 741.286468][ T4575] ? vfs_write+0x161/0x5d0 [ 741.290905][ T4575] ? trace_hardirqs_off_caller+0x55/0x230 [ 741.296637][ T4575] ? do_syscall_64+0x21/0x7d0 [ 741.301331][ T4575] do_syscall_64+0xf6/0x7d0 [ 741.305851][ T4575] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 741.311746][ T4575] RIP: 0033:0x45ca29 [ 741.315645][ T4575] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 741.335254][ T4575] RSP: 002b:00007fc060f28c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 741.343673][ T4575] RAX: ffffffffffffffda RBX: 0000000000500f40 RCX: 000000000045ca29 [ 741.351649][ T4575] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000006 [ 741.359626][ T4575] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 741.367624][ T4575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 741.367634][ T4575] R13: 0000000000000a04 R14: 00000000004ccdcc R15: 00007fc060f296d4 13:03:16 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000084000000f4010000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:03:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0x4c01, 0x0) 13:03:17 executing program 1: r0 = open(&(0x7f0000000180)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000012c0)="0a07e857c58e5b0689160ced5c1f00b7", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000006080)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001300)="ceb5049657fd28621a14e006a2bfd7b0", 0x10}], 0x1}], 0x1, 0x0) recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/4098, 0x1002}], 0x1}, 0x0) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$MON_IOCG_STATS(r5, 0x80089203, &(0x7f0000001240)) fsetxattr$security_evm(r4, &(0x7f0000000100)='security.evm\x00', &(0x7f0000000240)=@sha1={0x1, "b23ce0c3b23a1a4fdabc6276cbf77dbcd7a2fc91"}, 0x15, 0x2) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r6, &(0x7f0000000ec0)=ANY=[], 0x471) shutdown(r2, 0x1) sendfile(r6, r6, &(0x7f0000000480), 0xa198) 13:03:17 executing program 3: perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000480)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c9be17044171e1d3d7b1d6d079c4d4f58fa35d17c668a4b63e069efb29797573b8530e31ec24925095a163b9d4e76be266e31a80212240baa44e080addde36e5fdc6c49e6ef8b57b2cca24e2313091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694d1f8898b3e6"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r8, 0xc0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000040000000000000000950000000000001b"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x200000000000020e, &(0x7f0000000140)=@raw=[@generic={0x0, 0x6, 0x3, 0x1ff, 0x7}, @jmp={0x5, 0x1, 0x9, 0x7, 0x4, 0x80, 0x10}, @exit], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x35, &(0x7f0000000580)=""/53, 0x40f00, 0x0, [], r4, 0x1, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x7, 0x5}, 0x3f, 0x10, &(0x7f0000000300)={0x0, 0x10, 0x4, 0x80}, 0x10, r9}, 0x78) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000100)="a382e85aceba722f0457f9", 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2d1, 0x0, &(0x7f00000000c0)="b9ff0300000d698cb89e40f008001fffffff00004000632f77", 0x0, 0x100, 0x6000000000000000}, 0x28) [ 741.591051][ T26] audit: type=1800 audit(1589720597.055:145): pid=4636 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16356 res=0 [ 741.661364][ T4636] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 742.482816][ T7231] minix_free_inode: bit 1 already cleared 13:03:18 executing program 4: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000400)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000030000000042e33089754c8107c3cd3923dd14eaf6311bc4d7436916392f4e31d54a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188808c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce06b7ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2cca0426d058d7a422795c177308a1af0c28c8a3af06f80d55793090a99d1c3c69a210bbc5955f173bd4c3e42d7", 0xe7, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000500)="1d", 0x1, 0xfffffffffffffffd) r2 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000580), 0x0, 0xfffffffffffffffb) keyctl$set_timeout(0xf, r2, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000200)={r1, r0, r2}, &(0x7f0000000540)=""/216, 0xd8, &(0x7f0000000100)={&(0x7f0000000080)={'ghash-generic\x00'}}) 13:03:18 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000064020000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:03:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x2000000088) bind(r0, &(0x7f0000000180)=@in={0x2, 0x4e20, @remote}, 0x80) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0x1, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000080)) sendto$inet(r0, &(0x7f0000000200)='X', 0x1, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r0, &(0x7f0000000240)=[{{&(0x7f00000002c0)=@in, 0x80, &(0x7f0000000140)=[{&(0x7f0000000340)=""/231, 0xe7}, {&(0x7f0000000440)=""/239, 0xef}, {&(0x7f0000000540)=""/167, 0xa7}, {&(0x7f0000000080)}], 0x4, &(0x7f0000000600)=""/138, 0x8a}, 0x200}], 0x1, 0x10200, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x0, 0x3}, &(0x7f0000000100)=0xc) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_G_PRIORITY(r6, 0x80045643, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000040)) 13:03:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:03:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0x541b, 0x0) 13:03:18 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000100)={0x3ff, 0x2, 0x4, 0x20000, 0x5, {0x0, 0x2710}, {0x1, 0xc, 0xf8, 0xb, 0x9, 0x9, "6bb01a74"}, 0x7, 0x4, @userptr=0x1, 0x4, 0x0, r0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x4, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], r7, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed6}, 0x56) 13:03:18 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000030000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 742.845378][ T4672] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 742.948020][ T4672] device bond60 entered promiscuous mode 13:03:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000240)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast]}, 0x48) listen(r0, 0x0) 13:03:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) [ 742.991309][ T4683] device gretap83 entered promiscuous mode 13:03:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0x5421, 0x0) [ 743.046079][ T4683] bond60: (slave gretap83): Enslaving as a backup interface with an up link [ 743.080390][ T4672] bond60 (unregistering): (slave gretap83): Releasing backup interface [ 743.141876][ T4672] device gretap83 left promiscuous mode 13:03:18 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x2, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000140)=0x101) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu&\n\n-0\x00\x00\x00\xc8 \xf4\xb3\xca\f\x90|\x1ff\xf0\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-W\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x00\x00\x80T\"\x00\x00\x00\x00\x05\x00'/89) [ 743.237167][ T26] audit: type=1326 audit(1589720598.695:146): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=4732 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45f86a code=0x50000 [ 743.333938][ T26] audit: type=1326 audit(1589720598.725:147): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=4732 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 743.470414][ T26] audit: type=1326 audit(1589720598.735:148): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=4732 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 743.524681][ T4672] bond60 (unregistering): Released all slaves [ 743.553778][ T26] audit: type=1326 audit(1589720598.765:149): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=4732 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45f86a code=0x50000 [ 743.612412][ T26] audit: type=1326 audit(1589720598.785:150): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=4732 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=41 compat=0 ip=0x45ca29 code=0x50000 [ 743.637690][ T26] audit: type=1326 audit(1589720598.785:151): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=4732 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45f86a code=0x50000 [ 743.663648][ T26] audit: type=1326 audit(1589720598.795:152): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=4732 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 13:03:19 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) dup3(r0, r4, 0x0) [ 743.730059][ T26] audit: type=1326 audit(1589720598.795:153): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=4732 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45f86a code=0x50000 13:03:19 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000084000000e8030000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:03:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0x5450, 0x0) 13:03:19 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000100)='/dev/vcsu#\x00', 0x4a4b, 0x400081) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000392730e7ca150f72efa56b78daac4c9221f8a4fe9cc927185696a605a0037fe7bace88d27949b26e3dde33849a099f96e3836e0e15d769e890153c990e5bce83d145b636d60f75693ea9d8fa88bcfad2749acfa30a1e10c5dd8de541e34860d391ed3ba46c67cf4336333ddd9f6063c4ad125ff71849bf103a08d0a5020f7d6d4a979ac463acaabe595639a2fd837098f657be9e120c7c0aeff9f27341ef9ad693bea48d7d5c568136201ae80ac4a25f41e1b48c731d9a703cfdf4d87089ef86e21d893f3f146a605f53d2ae993223", @ANYRES16=0x0, @ANYBLOB="220825bd7000fcdbdf25170000000800010004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4009040}, 0x40000) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001840)={'vcan0\x00', 0x0}) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000400)={0xf3, 0xecb9, 0x5}, 0xc) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180), &(0x7f00000003c0)=0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r3}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000000c0)={&(0x7f0000000040), 0x18, &(0x7f0000000000)={&(0x7f0000000280)='Y', 0x1}, 0x1, 0xefff}, 0x0) [ 743.855427][ T26] audit: type=1326 audit(1589720598.795:154): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=4732 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=16 compat=0 ip=0x45c8f7 code=0x50000 13:03:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:03:19 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001fd) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000100)={r4}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000000)={r4, @in={{0x2, 0x4e22, @private=0xa010100}}}, 0x84) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000240)={{0x3, 0x0, 0x1, 0x20}, 'syz1\x00', 0x20}) ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000340)={0x35}) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3) shmget(0x2, 0x1000, 0x40, &(0x7f0000ffc000/0x1000)=nil) ioctl$UI_DEV_CREATE(r5, 0x5501) [ 743.972254][ T26] audit: type=1326 audit(1589720598.825:155): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=4732 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=16 compat=0 ip=0x45c8f7 code=0x50000 13:03:19 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000050000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 744.148338][ T26] audit: type=1326 audit(1589720598.835:156): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=4732 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=16 compat=0 ip=0x45c8f7 code=0x50000 [ 744.218636][ T4819] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 744.256733][ T26] audit: type=1326 audit(1589720598.845:157): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=4732 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=16 compat=0 ip=0x45c8f7 code=0x50000 13:03:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0x5451, 0x0) [ 744.325180][ T4819] device bond60 entered promiscuous mode [ 744.328371][ T4829] input: syz1 as /devices/virtual/input/input13 13:03:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) [ 744.400742][ T4824] device gretap84 entered promiscuous mode [ 744.409711][ T4824] bond60: (slave gretap84): Enslaving as a backup interface with an up link [ 744.426500][ T4860] bond60 (unregistering): (slave gretap84): Releasing backup interface [ 744.488312][ T4860] device gretap84 left promiscuous mode [ 744.515147][ T4829] input: syz1 as /devices/virtual/input/input14 13:03:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0xc0984124, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000024000b0f00"/20, @ANYRES32=r7, @ANYBLOB="000000000c00ffff00000014fc01000200080004000000000008000300"/40], 0x40}}, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r8) sendto$inet(r8, &(0x7f0000000340)="ab305fd0eeb95c793c1618d7fc510e2edbb571ff6b2984b1785d158de7ac15580a9f451f9b5c5329c9af9a7d3dc761a3dae7a727d4f7e052c872d63b99deecbae7f76e1f1887577ab4d4bedb6a18", 0x4e, 0x8004, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) [ 744.935060][ T4860] bond60 (unregistering): Released all slaves 13:03:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) [ 745.099413][ T4889] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 13:03:20 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000084000000dc050000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 745.141038][ T4819] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 745.568177][ T4887] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 13:03:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0x5452, 0x0) 13:03:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x2, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:03:21 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000060000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 745.849198][ T4945] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 745.980813][ T4945] device bond60 entered promiscuous mode [ 746.061891][ T4950] device gretap85 entered promiscuous mode [ 746.071122][ T4950] bond60: (slave gretap85): Enslaving as a backup interface with an up link [ 746.093415][ T4973] bond60 (unregistering): (slave gretap85): Releasing backup interface [ 746.158015][ T4973] device gretap85 left promiscuous mode [ 746.332528][ T4973] bond60 (unregistering): Released all slaves [ 746.616036][ T4945] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 746.791525][ T4945] device bond60 entered promiscuous mode 13:03:22 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r2 = dup(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40, 0x0, 0x6, 0x1, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x800fe) sendfile(r2, r3, 0x0, 0x8000fffffffe) 13:03:22 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) msgget(0x0, 0x108) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast1, @multicast1}, &(0x7f0000000100)=0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x29) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x6, 0x9) close(r5) open(&(0x7f0000000080)='./file1\x00', 0x143042, 0x0) splice(r3, 0x0, r5, 0x0, 0x8100000, 0x0) splice(r0, 0x0, r4, 0x0, 0x8, 0x0) 13:03:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) 13:03:22 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000070000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:03:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0x5460, 0x0) [ 747.098352][ T5037] bond60 (unregistering): Released all slaves 13:03:22 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000090000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:03:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) 13:03:22 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40000, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000000c4724863a566b110a54dc6a1c0066d7cb4a07d3ab7bfd701e3218f7463b8165c4486904000000000000ba67c86dbd082236099fd52618108283dc671d8e868669a5c0811d6bbe38fa4e2f5d40b5a5a3aa5019c384b18165feed1d83b60c69e327efb5adc216c4302902c7eeae4480e6"], 0x3c}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000012c0)="0a07e857c58e5b0689160ced5c1f00b7", 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) r5 = accept4(0xffffffffffffffff, &(0x7f00000007c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000840)=0x80, 0x800) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r7, 0x800, 0x0, 0x25dfdbfb, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8020}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="10062abd7000ffdbdf25060000000800000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) accept$alg(r3, 0x0, 0x0) pidfd_getfd(r2, r3, 0x0) openat$cgroup_ro(r2, 0x0, 0x26e1, 0x0) 13:03:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000000)="083d001000000f20e035000400000f22e0c74424000e000000c74424020b000000c7442406000000000f0114240f1e2f0f01cb0f01c2673e3e0f019e0c00b9800000c00f3235000100000f300f20e035000002000f22e0b9a90b00000f32", 0x5e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:03:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0x6364, 0x0) 13:03:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:03:23 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000084000000000a0000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 747.658869][ T5145] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 747.761123][ T5147] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 13:03:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x2, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 747.871213][ T5160] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:03:23 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000084000000000e0000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 748.015569][ T5160] device bond60 entered promiscuous mode 13:03:23 executing program 3: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x8000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000002c0)) socket$inet_sctp(0x2, 0x5, 0x84) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000140)=0x7a5, 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x98a, 0x4) sendmmsg(r0, &(0x7f00000038c0), 0x4000000000000a8, 0x0) [ 748.094755][ T5163] device gretap86 entered promiscuous mode [ 748.133904][ T5163] bond60: (slave gretap86): Enslaving as a backup interface with an up link 13:03:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0x6611, 0x0) [ 748.164425][ T5170] bond60 (unregistering): (slave gretap86): Releasing backup interface 13:03:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) [ 748.228010][ T5170] device gretap86 left promiscuous mode 13:03:24 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xfc, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, 0x0, 0xb, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_COMPAT_NAME={0x6, 0x1, '-\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x11, 0x1, '}wlan1ppp1/@\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_NAME={0x6, 0x1, '-\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x8044}, 0x20000050) write$P9_RATTACH(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x69, 0x2, {0x40, 0x3}}, 0x14) r2 = socket$kcm(0x11, 0x8000000000000003, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0x9e0000, 0x80, 0x6, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x980927, 0x4, [], @value64=0x9}}) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r3, 0x40044104, &(0x7f0000000180)) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r2, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x104, 0x3a}, 0x60, &(0x7f0000000140)=[{&(0x7f00000027c0)="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", 0x5}, {&(0x7f0000000840)="02", 0x19}], 0x2, 0x0, 0x0, 0x1a0}, 0xe869) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x105) ioctl$IOC_PR_RESERVE(r4, 0x401070c9, &(0x7f0000000080)={0x2, 0x3, 0x1}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet(0x2, 0x4000000000000003, 0x5) r7 = dup2(r5, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/88, 0x58}], 0x1}}], 0x1, 0x0, 0x0) [ 748.481519][ T26] kauditd_printk_skb: 578 callbacks suppressed [ 748.481535][ T26] audit: type=1326 audit(1589720603.946:736): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5219 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 748.561668][ T26] audit: type=1326 audit(1589720603.976:737): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5219 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45f86a code=0x50000 [ 748.583718][ T26] audit: type=1326 audit(1589720603.986:738): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5219 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=55 compat=0 ip=0x45ca29 code=0x50000 13:03:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) [ 748.607089][ T26] audit: type=1326 audit(1589720604.006:739): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5219 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45f86a code=0x50000 [ 748.713027][ T26] audit: type=1326 audit(1589720604.046:740): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5219 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 748.792003][ T26] audit: type=1326 audit(1589720604.256:741): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5234 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45f86a code=0x50000 [ 748.829756][ T5170] bond60 (unregistering): Released all slaves [ 748.864701][ T26] audit: type=1326 audit(1589720604.256:742): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5234 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 13:03:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') fcntl$setown(r1, 0x8, 0x0) [ 749.018067][ T26] audit: type=1326 audit(1589720604.266:743): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5234 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 749.075179][ T5210] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 749.158820][ T26] audit: type=1326 audit(1589720604.266:744): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5234 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45f86a code=0x50000 [ 749.264379][ T26] audit: type=1326 audit(1589720604.296:745): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5234 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=41 compat=0 ip=0x45ca29 code=0x50000 [ 749.298783][ T5212] batman_adv: Cannot find parent device 13:03:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0x8933, 0x0) [ 749.537433][ T5160] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:03:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 749.647728][ T5160] device bond60 entered promiscuous mode 13:03:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x2, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:03:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') fcntl$setown(r1, 0x8, 0x0) 13:03:25 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000110000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:03:25 executing program 3: prctl$PR_SVE_SET_VL(0x32, 0x16cac) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000000)) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000540)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x24) openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x100) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000024000b0f00"/20, @ANYRES32=r2, @ANYBLOB="000000000000000000000000b38a075e05193e09e6094e400679dc0231b14a4866e758a223b6231751f4dcf3a4a9c3ac7ca5f274"], 0x24}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000012c0)="0a07e857c58e5b0689160ced5c1f00b7", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000006080)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001300)="ceb5049657fd28621a14e006a2bfd7b0", 0x10}], 0x1}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000100)='vmnet0{posix_acl_access8@cpusetsystem\'\\selfmd5summd5sumnodev-cgroupwlan1*\x00', 0x4a) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000010010000010000007700000000000000f41b25e416d58937e7e899e0524843c9577f89f71ebddf077798b47ab44c34e16f19c694b9c13b9ef9d630dea1bc3cafb0ae41a76907477a209522adbd7e5454b7dec9d9a67305c04a8ccffca56ccbcabdb25cc94628348a24593c2fbdf200f96a8fd21716050000000178b5eb642ae48c0000003ac43b77471be914707d2c3545b812f7f58f436706f17b26ae322c65d69e51528f2436610c52b724993141a5cb7a0b9c50ca0a16787a4d0c82b7256c49aac96b000000042150e13f94be6d87fc7ed9af2300000000000000000000924c685b7ae5fb301c552d50da9f92a386afacdaca3fcf55923c1df3df70f4e1a5108af0f18042b65219bd6342bc7ab13358b32ea2d85b616dadf7d713d09cb74f7ab95410323e23987e0dff4087c20853ec003326aad11a5b8bacbf2127db48110676a2885c2f95a1496507d0da911ed1f150347cbaf9eae2a82038df1e6c25c9c6e5c7060695ba27d9b371e4caf0d8b842fd3203f2145241fd2938153fbe0fceb7cb7a6ffa4c071e7200040000000000001d78da067379a0c03c361122540a326caf3dd9d1c8cf8a7ac9f8645427b6a72d9319447ce48ded3105705f14c58afbc04e5a869b382d3d1dd0f130e8bd"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000031c0), 0x7ab, 0x2, 0x0) [ 749.895665][ T5326] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 750.088877][ T5326] device bond6 entered promiscuous mode [ 750.095209][ T5334] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:03:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae01, 0x0) [ 750.229369][ T5334] device bond61 entered promiscuous mode 13:03:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') fcntl$setown(r1, 0x8, 0x0) [ 750.338980][ T5336] device gretap1 entered promiscuous mode [ 750.428571][ T5336] bond6: (slave gretap1): Enslaving as a backup interface with an up link [ 750.507040][ T5351] device gretap87 entered promiscuous mode [ 750.545667][ T5351] bond61: (slave gretap87): Enslaving as a backup interface with an up link 13:03:26 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000200000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 750.597084][ T5352] bond6 (unregistering): (slave gretap1): Releasing backup interface [ 750.668610][ T5352] device gretap1 left promiscuous mode 13:03:26 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000000)={0x7f, 0x1f, 0x39949032, 0x403}) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x7, r4}]}}}]}, 0x3c}}, 0x0) 13:03:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) [ 751.266189][ T5352] bond6 (unregistering): Released all slaves [ 751.458095][ T5364] bond61 (unregistering): (slave gretap87): Releasing backup interface [ 751.557880][ T5364] device gretap87 left promiscuous mode 13:03:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) [ 751.904401][ T5364] bond61 (unregistering): Released all slaves [ 752.177081][ T5334] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:03:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) 13:03:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x5, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:03:28 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000084000000012c0000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:03:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0x400454ca, 0x0) 13:03:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x2, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:03:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) 13:03:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) [ 752.703877][ T5539] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 752.880096][ T5539] device bond6 entered promiscuous mode [ 753.081028][ T5545] device gretap2 entered promiscuous mode 13:03:28 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000600000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 753.125102][ T5545] bond6: (slave gretap2): Enslaving as a backup interface with an up link [ 753.134756][ T5548] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:03:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) 13:03:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) [ 753.332313][ T5548] device bond61 entered promiscuous mode [ 753.453421][ T5574] bond6 (unregistering): (slave gretap2): Releasing backup interface [ 753.493675][ T26] kauditd_printk_skb: 420 callbacks suppressed [ 753.493692][ T26] audit: type=1326 audit(1589720608.936:1166): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5639 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45f86a code=0x50000 [ 753.607797][ T5574] device gretap2 left promiscuous mode [ 753.636686][ T26] audit: type=1326 audit(1589720608.936:1167): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5645 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45f86a code=0x50000 [ 753.658041][ T26] audit: type=1326 audit(1589720608.946:1168): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5639 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 753.689969][ T26] audit: type=1326 audit(1589720608.946:1170): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5639 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 753.717930][ T26] audit: type=1326 audit(1589720608.946:1169): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5645 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 753.741255][ T26] audit: type=1326 audit(1589720608.946:1171): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5639 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 753.764166][ T26] audit: type=1326 audit(1589720608.946:1173): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5639 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 753.790805][ T26] audit: type=1326 audit(1589720608.946:1172): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5645 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 753.833951][ T26] audit: type=1326 audit(1589720608.946:1174): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5639 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 753.859140][ T26] audit: type=1326 audit(1589720608.946:1175): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5645 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 13:03:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) [ 753.902295][ T5574] bond6 (unregistering): Released all slaves 13:03:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) [ 754.071019][ T5579] device gretap88 entered promiscuous mode [ 754.093154][ T5579] bond61: (slave gretap88): Enslaving as a backup interface with an up link [ 754.150258][ T5591] bond61 (unregistering): (slave gretap88): Releasing backup interface [ 754.227943][ T5591] device gretap88 left promiscuous mode 13:03:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) [ 754.702437][ T5591] bond61 (unregistering): Released all slaves [ 754.819772][ T5548] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:03:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x6, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:03:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) 13:03:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0x40049409, 0x0) 13:03:30 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000002640000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:03:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) 13:03:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) 13:03:31 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000084000000fe800000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 755.616531][ T5751] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:03:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0x4004ae8b, 0x0) 13:03:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) [ 755.979275][ T5751] device bond61 entered promiscuous mode [ 755.996035][ T5756] device gretap89 entered promiscuous mode [ 756.112893][ T5756] bond61: (slave gretap89): Enslaving as a backup interface with an up link [ 756.269901][ T5758] bond61 (unregistering): (slave gretap89): Releasing backup interface [ 756.349837][ T5758] device gretap89 left promiscuous mode 13:03:32 executing program 4: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xed03, 0x1, &(0x7f0000000180)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020401000200027400f8", 0x16, 0x1ff}], 0x3a010, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x604081, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001340)="0a073367c58e5b06649d200d80d0fb9500d7c2128800b72f16057db08ad1e14b6f8247b24721a591db8ab23a21c3e9193765252ebba4d4c8ad7aa34ba4ec8ab3693c3f00b4afc739357fd4560fd1f0ee5e40d9938f5bde7394e095ba6369e32c940fe3460fcf05fa53c3e3e32db234680a891ac43969f13c5ca0560947", 0x7d) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000006080)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001300)="ceb5049657fd28621a14e006a2bfd7b0", 0x10}], 0x1}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/4098, 0x1002}], 0x1}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) fchdir(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0xa, 0x12) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vcsn(&(0x7f0000001280)='/dev/vcs#\x00', 0x1, 0x240203) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4001ff) write$cgroup_int(r4, &(0x7f0000000200), 0xe00) 13:03:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) 13:03:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) [ 757.084914][ T5758] bond61 (unregistering): Released all slaves [ 757.454926][ T5751] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:03:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x7, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:03:33 executing program 4: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @dev}, 0x6c) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffe, 0x1f4, 0x0, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) 13:03:33 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000084000000fec00000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:03:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0x4004ae99, 0x0) 13:03:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(0xffffffffffffffff) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r3) 13:03:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) [ 757.958923][ T5895] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 758.143459][ T5895] device bond61 entered promiscuous mode 13:03:33 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000005dc0000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 758.312538][ T5901] device gretap90 entered promiscuous mode 13:03:33 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000006000/0x3000)=nil, &(0x7f0000007000/0x1000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000009000/0x3000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0}, 0x68) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x8a0000, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@deltclass={0x58, 0x29, 0x800, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x8, 0x2}, {0x0, 0x5}}, [@tclass_kind_options=@c_qfq={{0x8, 0x1, 'qfq\x00'}, {0xc, 0x2, [@TCA_QFQ_LMAX={0x8}]}}, @tclass_kind_options=@c_prio={0x9, 0x1, 'prio\x00'}, @tclass_kind_options=@c_mq={0x7, 0x1, 'mq\x00'}, @tclass_kind_options=@c_skbprio={0xc, 0x1, 'skbprio\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') preadv(r3, &(0x7f0000000440)=[{&(0x7f00000010c0)=""/4080, 0xff0}], 0x1, 0x0) [ 758.392806][ T5901] bond61: (slave gretap90): Enslaving as a backup interface with an up link 13:03:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(0xffffffffffffffff) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r3) [ 758.483888][ T5921] bond61 (unregistering): (slave gretap90): Releasing backup interface [ 758.499350][ T26] kauditd_printk_skb: 954 callbacks suppressed [ 758.499364][ T26] audit: type=1326 audit(1589720613.966:2130): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5940 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=16 compat=0 ip=0x45c8f7 code=0x50000 [ 758.568119][ T5921] device gretap90 left promiscuous mode [ 758.694645][ T26] audit: type=1326 audit(1589720614.006:2131): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5940 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=16 compat=0 ip=0x45c8f7 code=0x50000 13:03:34 executing program 4: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000072b2cccd00000f00000008000300", @ANYRES32=r2, @ANYBLOB="080034000000000005002e000100"], 0x2c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) setregid(0x0, 0x0) [ 758.826246][ T26] audit: type=1326 audit(1589720614.006:2132): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5940 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=16 compat=0 ip=0x45c8f7 code=0x50000 [ 758.933847][ T26] audit: type=1326 audit(1589720614.016:2133): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5940 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=16 compat=0 ip=0x45c8f7 code=0x50000 [ 758.994476][ T26] audit: type=1326 audit(1589720614.026:2134): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5940 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=16 compat=0 ip=0x45c8f7 code=0x50000 [ 759.028422][ T5921] bond61 (unregistering): Released all slaves [ 759.053529][ T26] audit: type=1326 audit(1589720614.026:2135): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5940 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=16 compat=0 ip=0x45c8f7 code=0x50000 [ 759.091287][ T26] audit: type=1326 audit(1589720614.036:2136): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5940 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=2 compat=0 ip=0x416821 code=0x50000 [ 759.137657][ T26] audit: type=1326 audit(1589720614.046:2137): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5940 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=16 compat=0 ip=0x45c8f7 code=0x50000 13:03:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0x40186366, 0x0) [ 759.186589][ T5895] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 759.233562][ T26] audit: type=1326 audit(1589720614.056:2138): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5940 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=16 compat=0 ip=0x45c8f7 code=0x50000 [ 759.271139][ T26] audit: type=1326 audit(1589720614.066:2139): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=5940 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=3 compat=0 ip=0x416621 code=0x50000 13:03:34 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={r2, 0x3, 0x6}, &(0x7f0000000100)=0x8) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e4800002b000505d25a80308c63940d0124fc6010000a400a000000053582c137153e370948018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 13:03:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:03:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002380)=@newtfilter={0x50, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x20, 0x2, [@TCA_CGROUP_ACT={0x1c, 0x1, [@m_skbedit={0x18, 0x0, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x4}, {0x4}}}]}]}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r10, 0x0, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_SET(r9, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x3e9, 0x200, 0x70bd26, 0x25dfdbfb, {0x20, 0x1, 0x1, r10, 0x401, 0xbd, 0x9, 0x0, 0x12}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x2008010}, 0x20000000) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 13:03:35 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000003e80000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:03:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(0xffffffffffffffff) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r3) [ 759.689712][ T6017] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 759.715989][ T6022] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 13:03:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0x4020940d, 0x0) 13:03:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x7, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 759.847472][ T6030] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 760.024699][ T6030] device bond61 entered promiscuous mode [ 760.103966][ T6039] device gretap91 entered promiscuous mode [ 760.168063][ T6039] bond61: (slave gretap91): Enslaving as a backup interface with an up link 13:03:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(0xffffffffffffffff, 0x8, r3) 13:03:35 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000001f40000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 760.266122][ T6043] bond61 (unregistering): (slave gretap91): Releasing backup interface [ 760.327797][ T6043] device gretap91 left promiscuous mode 13:03:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(0xffffffffffffffff, 0x8, r3) [ 760.724697][ T6043] bond61 (unregistering): Released all slaves [ 760.822816][ T6070] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 760.903879][ T6082] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 13:03:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(0xffffffffffffffff, 0x8, r3) 13:03:36 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000fc0000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 761.149143][ T6087] batman_adv: Cannot find parent device [ 761.182645][ T6036] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 761.262969][ T6030] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:03:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) 13:03:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0xa, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:03:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:03:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(0xffffffffffffffff, 0x8, r3) 13:03:37 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000080fe0000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:03:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0x4048ae9b, 0x0) [ 761.851827][ T6177] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 762.008082][ T6177] device bond61 entered promiscuous mode [ 762.086510][ T6182] device gretap92 entered promiscuous mode 13:03:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) [ 762.159065][ T6182] bond61: (slave gretap92): Enslaving as a backup interface with an up link 13:03:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(0xffffffffffffffff, 0x8, r3) [ 762.233712][ T6184] bond61 (unregistering): (slave gretap92): Releasing backup interface [ 762.317515][ T6184] device gretap92 left promiscuous mode 13:03:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) 13:03:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) [ 763.036107][ T6184] bond61 (unregistering): Released all slaves [ 763.259727][ T6235] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 763.451326][ T6236] batman_adv: Cannot find parent device 13:03:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) [ 763.500390][ T6177] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 763.515878][ T26] kauditd_printk_skb: 635 callbacks suppressed [ 763.515891][ T26] audit: type=1326 audit(1589720618.976:2775): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=6257 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 13:03:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(0xffffffffffffffff, 0x8, r3) [ 763.642094][ T26] audit: type=1326 audit(1589720619.016:2776): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=6257 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 763.677872][ T26] audit: type=1326 audit(1589720619.026:2777): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=6257 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 763.709626][ T26] audit: type=1326 audit(1589720619.036:2778): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=6257 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 763.767561][ T26] audit: type=1326 audit(1589720619.046:2779): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=6257 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 763.888388][ T26] audit: type=1326 audit(1589720619.046:2780): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=6257 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 13:03:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 763.922138][ T26] audit: type=1326 audit(1589720619.166:2781): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=6302 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45f86a code=0x50000 13:03:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:03:39 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000084000000c0fe0000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:03:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0x4090ae82, 0x0) [ 763.960843][ T26] audit: type=1326 audit(1589720619.176:2782): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=6302 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 764.070605][ T6314] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 764.084683][ T26] audit: type=1326 audit(1589720619.176:2783): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=6302 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 764.137312][ T26] audit: type=1326 audit(1589720619.186:2784): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=6302 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 764.155358][ T6314] device bond6 entered promiscuous mode [ 764.172977][ T6317] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 764.330572][ T6317] device bond61 entered promiscuous mode 13:03:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(0xffffffffffffffff, 0x8, r3) 13:03:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) 13:03:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0x4138ae84, 0x0) [ 764.459631][ T6324] device gretap3 entered promiscuous mode [ 764.485797][ T6324] bond6: (slave gretap3): Enslaving as a backup interface with an up link 13:03:40 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000ff0000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 764.535094][ T6355] device gretap93 entered promiscuous mode [ 764.585711][ T6355] bond61: (slave gretap93): Enslaving as a backup interface with an up link [ 764.637128][ T6358] bond61 (unregistering): (slave gretap93): Releasing backup interface [ 764.718432][ T6358] device gretap93 left promiscuous mode 13:03:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) 13:03:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) [ 765.345875][ T6358] bond61 (unregistering): Released all slaves [ 765.524293][ T6314] bond6 (unregistering): (slave gretap3): Releasing backup interface [ 765.597401][ T6314] device gretap3 left promiscuous mode 13:03:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) 13:03:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) [ 766.106735][ T6314] bond6 (unregistering): Released all slaves [ 766.437967][ T6317] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:03:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:03:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0x41a0ae8d, 0x0) 13:03:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) 13:03:42 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000084000000ffff1f00020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:03:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0xe, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:03:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 766.837829][ T6519] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:03:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0x8004ae98, 0x0) 13:03:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) [ 767.060392][ T6519] device bond61 entered promiscuous mode 13:03:42 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000000001020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 767.110023][ T6522] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 767.176647][ T6522] device bond1 entered promiscuous mode [ 767.192100][ T6523] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 767.372332][ T6523] device bond6 entered promiscuous mode [ 767.498354][ T6524] device gretap94 entered promiscuous mode [ 767.550340][ T6524] bond61: (slave gretap94): Enslaving as a backup interface with an up link 13:03:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) [ 767.605685][ T6532] bond61 (unregistering): (slave gretap94): Releasing backup interface [ 767.687659][ T6532] device gretap94 left promiscuous mode 13:03:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) [ 768.197359][ T6532] bond61 (unregistering): Released all slaves [ 768.392662][ T6529] device gretap2 entered promiscuous mode [ 768.449884][ T6529] bond1: (slave gretap2): Enslaving as a backup interface with an up link 13:03:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) [ 768.515886][ T6531] device gretap4 entered promiscuous mode [ 768.578923][ T6531] bond6: (slave gretap4): Enslaving as a backup interface with an up link [ 768.623097][ T6552] bond6 (unregistering): (slave gretap4): Releasing backup interface [ 768.680669][ T26] kauditd_printk_skb: 648 callbacks suppressed [ 768.680684][ T26] audit: type=1326 audit(1589720624.136:3433): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=6710 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45f86a code=0x50000 [ 768.729264][ T6552] device gretap4 left promiscuous mode [ 768.833671][ T26] audit: type=1326 audit(1589720624.146:3434): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=6710 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 768.972196][ T26] audit: type=1326 audit(1589720624.166:3435): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=6710 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45f86a code=0x50000 [ 769.036347][ T26] audit: type=1326 audit(1589720624.166:3436): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=6710 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=41 compat=0 ip=0x45ca29 code=0x50000 [ 769.058437][ T26] audit: type=1326 audit(1589720624.166:3437): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=6710 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45f86a code=0x50000 [ 769.102367][ T26] audit: type=1326 audit(1589720624.176:3438): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=6710 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 769.143798][ T26] audit: type=1326 audit(1589720624.176:3439): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=6710 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 769.183621][ T6552] bond6 (unregistering): Released all slaves [ 769.193717][ T26] audit: type=1326 audit(1589720624.176:3440): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=6710 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 769.225412][ T26] audit: type=1326 audit(1589720624.186:3441): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=6710 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 769.259223][ T26] audit: type=1326 audit(1589720624.186:3442): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=6710 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 769.342033][ T6545] bond1 (unregistering): (slave gretap2): Releasing backup interface [ 769.397199][ T6545] device gretap2 left promiscuous mode [ 769.554986][ T6545] bond1 (unregistering): Released all slaves [ 769.648939][ T6519] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:03:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) 13:03:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) 13:03:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x10, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:03:45 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000000002020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:03:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0x80086301, 0x0) 13:03:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) [ 770.157752][ T6794] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:03:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) [ 770.544406][ T6794] device bond61 entered promiscuous mode 13:03:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0x8090ae81, 0x0) [ 770.603492][ T6798] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 770.780709][ T6798] device bond6 entered promiscuous mode 13:03:46 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000000003020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 770.823266][ T6803] device gretap5 entered promiscuous mode 13:03:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) [ 770.870120][ T6803] bond6: (slave gretap5): Enslaving as a backup interface with an up link [ 770.993436][ T6801] device gretap95 entered promiscuous mode 13:03:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) [ 771.085766][ T6801] bond61: (slave gretap95): Enslaving as a backup interface with an up link [ 771.201345][ T6805] bond61 (unregistering): (slave gretap95): Releasing backup interface [ 771.297796][ T6805] device gretap95 left promiscuous mode 13:03:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) 13:03:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r1, 0x8, r3) [ 771.983410][ T6805] bond61 (unregistering): Released all slaves 13:03:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r1, 0x8, r3) [ 772.153104][ T6893] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 772.565877][ T6908] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 772.743884][ T6909] batman_adv: Cannot find parent device 13:03:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x48, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:03:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) 13:03:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r1, 0x8, r3) 13:03:48 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000000004020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:03:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0x8138ae83, 0x0) 13:03:48 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000000005020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 773.051749][ T6990] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:03:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) [ 773.180793][ T6990] device bond61 entered promiscuous mode [ 773.205102][ T6998] device gretap96 entered promiscuous mode [ 773.261561][ T6998] bond61: (slave gretap96): Enslaving as a backup interface with an up link [ 773.320876][ T7018] bond61 (unregistering): (slave gretap96): Releasing backup interface [ 773.408590][ T7018] device gretap96 left promiscuous mode 13:03:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r1, 0x8, r3) 13:03:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0x81a0ae8c, 0x0) [ 773.686381][ T26] kauditd_printk_skb: 587 callbacks suppressed [ 773.686395][ T26] audit: type=1326 audit(1589720629.147:4030): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=7053 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 773.800687][ T26] audit: type=1326 audit(1589720629.157:4031): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=6973 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 773.832100][ T26] audit: type=1326 audit(1589720629.157:4032): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=6973 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 13:03:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) [ 773.938945][ T26] audit: type=1326 audit(1589720629.157:4033): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=6973 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 774.061070][ T7018] bond61 (unregistering): Released all slaves [ 774.071104][ T26] audit: type=1326 audit(1589720629.167:4034): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=6973 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 774.162902][ T26] audit: type=1326 audit(1589720629.167:4035): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=6973 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 774.231136][ T7046] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 774.273779][ T26] audit: type=1326 audit(1589720629.177:4036): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=6973 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 774.301115][ T26] audit: type=1326 audit(1589720629.177:4037): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=6973 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 774.355969][ T26] audit: type=1326 audit(1589720629.187:4038): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=6973 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 774.395195][ T26] audit: type=1326 audit(1589720629.187:4039): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=7053 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45f86a code=0x50000 13:03:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r1, 0x8, r3) 13:03:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) [ 774.475997][ T7049] batman_adv: Cannot find parent device [ 774.675295][ T6990] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:03:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x4c, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:03:50 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000000006020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:03:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) 13:03:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xc0045878, 0x0) 13:03:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r1, 0x8, r3) [ 775.162650][ T7148] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 775.230372][ T7148] device bond61 entered promiscuous mode 13:03:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(0xffffffffffffffff) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r3) [ 775.318586][ T7162] device gretap97 entered promiscuous mode [ 775.383003][ T7162] bond61: (slave gretap97): Enslaving as a backup interface with an up link [ 775.474502][ T7179] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 13:03:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r1, 0x8, r3) [ 775.598137][ T7179] device bond7 entered promiscuous mode [ 775.703412][ T7148] bond61 (unregistering): (slave gretap97): Releasing backup interface [ 775.807780][ T7148] device gretap97 left promiscuous mode 13:03:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r1, 0x8, r3) 13:03:51 executing program 3: r0 = memfd_create(&(0x7f0000000280)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa2Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bcc\xad\x89\x9ck\xde\xc5\xe96\xdfUE\xc98M\xcd\xc2\x1f!\x8e\v\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\x00\xa5\xc24\xd6\xfe7\x0f', 0x0) write$cgroup_pid(r0, &(0x7f0000000040), 0x12) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000007, 0x110, r0, 0x0) sendfile(r0, r0, &(0x7f0000000140), 0xfa3) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') [ 776.240810][ T7148] bond61 (unregistering): Released all slaves 13:03:51 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r5) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f0000000180)={'nat\x00', 0x3, [{}, {}, {}]}, 0x58) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x1c, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8}, @TCA_HHF_HH_FLOWS_LIMIT={0x8}, @TCA_HHF_RESET_TIMEOUT={0x8}]}}]}, 0x48}}, 0x0) 13:03:51 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000000007020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 776.434613][ T7194] device gretap6 entered promiscuous mode [ 776.526363][ T7194] bond7: (slave gretap6): Enslaving as a backup interface with an up link 13:03:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r1, 0x8, r3) [ 776.586012][ T7162] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 776.814068][ T7162] device bond61 entered promiscuous mode 13:03:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x60, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:03:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xc0045878, 0x0) 13:03:52 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) 13:03:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) 13:03:52 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000000008020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 777.038552][ T7302] lo: Caught tx_queue_len zero misconfig 13:03:52 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x5) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x15) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x93, &(0x7f0000000540)="f71559c89acbd61caef13ff7703cc78eab95f7374f1f3be594abe41d4dd62efc6d308bb84e211e48073e62cb06babfabd090607d9ea81b316aecf1aca14973384156de6c22c407829537d08802eec6e7f5a915d1f575f1bbc644d6d5f9ec0407a33d000000000000000000007a9f295c0a7abd39afede3cc2ee6d49ca4db8b3e94456b1944ce67da070ed92c1431dbdbee73b3"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 777.222621][ T7352] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 13:03:52 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000000009020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 777.494139][ T7352] device bond8 entered promiscuous mode [ 777.527688][ T7360] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:03:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xc0189436, 0x0) 13:03:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) [ 777.565399][ T7360] device bond62 entered promiscuous mode [ 777.583381][ T7363] device gretap7 entered promiscuous mode [ 777.590953][ T7363] bond8: (slave gretap7): Enslaving as a backup interface with an up link 13:03:53 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 777.639962][ T7369] device gretap98 entered promiscuous mode [ 777.649167][ T7369] bond62: (slave gretap98): Enslaving as a backup interface with an up link [ 777.665988][ T7385] bond62 (unregistering): (slave gretap98): Releasing backup interface [ 777.707098][ T7385] device gretap98 left promiscuous mode 13:03:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) [ 778.093917][ T7385] bond62 (unregistering): Released all slaves 13:03:53 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000840000000000000a020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 778.226540][ T7458] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 778.454569][ T7458] device bond9 entered promiscuous mode [ 778.512617][ T7463] device gretap8 entered promiscuous mode [ 778.528334][ T7463] bond9: (slave gretap8): Enslaving as a backup interface with an up link [ 778.545738][ T7360] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:03:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x68, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:03:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) 13:03:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) 13:03:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xc018ae85, 0x0) 13:03:54 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000840000000000000e020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 779.029420][ T7567] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 779.133510][ T7567] device bond10 entered promiscuous mode [ 779.142013][ T7572] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 779.245056][ T7572] device bond62 entered promiscuous mode [ 779.283925][ T7575] device gretap9 entered promiscuous mode [ 779.332301][ T7575] bond10: (slave gretap9): Enslaving as a backup interface with an up link [ 779.388835][ T7593] device gretap99 entered promiscuous mode [ 779.436786][ T7593] bond62: (slave gretap99): Enslaving as a backup interface with an up link [ 779.831954][ T7653] bond62 (unregistering): (slave gretap99): Releasing backup interface [ 779.943745][ T7653] device gretap99 left promiscuous mode [ 780.057575][ T7653] bond62 (unregistering): Released all slaves 13:03:55 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000000011020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:03:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) 13:03:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r2, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r2], 0x4c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) 13:03:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xc020660b, 0x0) 13:03:55 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snapshot\x00', 0x541000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4704}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x105000, 0x0) mkdirat(r2, &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x26, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x20, 0x100, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x3a}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @multicast}, @NL80211_ATTR_MAC={0xa, 0x6, @local}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008000}, 0x4008800) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000080)={0xa20000, 0x8000, 0x4, r0, 0x0, &(0x7f0000000040)={0x9b0972, 0x1f, [], @value64=0xffffffffffffffe0}}) renameat2(r2, &(0x7f0000000540)='./file0\x00', r7, &(0x7f0000000000)='./file0\x00', 0x0) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r8, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r8, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) [ 780.344407][ T7717] batman_adv: Cannot find parent device 13:03:55 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000000020020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:03:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x6c, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:03:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) 13:03:56 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000840000000000012c020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:03:56 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r2, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r2], 0x4c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) 13:03:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x2) [ 780.656574][ T7748] validate_nla: 1 callbacks suppressed [ 780.656584][ T7748] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 780.814279][ T7748] device bond62 entered promiscuous mode [ 780.854722][ T7750] device gretap100 entered promiscuous mode 13:03:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) 13:03:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x3) [ 780.987379][ T7750] bond62: (slave gretap100): Enslaving as a backup interface with an up link [ 781.027927][ T7768] bond62 (unregistering): (slave gretap100): Releasing backup interface [ 781.081454][ T7768] device gretap100 left promiscuous mode 13:03:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) [ 781.324938][ T26] kauditd_printk_skb: 651 callbacks suppressed [ 781.324954][ T26] audit: type=1326 audit(1589720636.787:4691): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=7808 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45f86a code=0x50000 [ 781.439292][ T26] audit: type=1326 audit(1589720636.787:4692): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=7808 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 781.496988][ T26] audit: type=1326 audit(1589720636.957:4693): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=7826 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45f86a code=0x50000 [ 781.540438][ T7768] bond62 (unregistering): Released all slaves [ 781.571338][ T26] audit: type=1326 audit(1589720636.967:4694): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=7826 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 781.620284][ T26] audit: type=1326 audit(1589720636.967:4695): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=7826 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 781.702854][ T26] audit: type=1326 audit(1589720636.977:4696): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=7826 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45f86a code=0x50000 [ 781.758751][ T26] audit: type=1326 audit(1589720636.977:4697): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=7826 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=41 compat=0 ip=0x45ca29 code=0x50000 [ 781.847348][ T26] audit: type=1326 audit(1589720636.987:4698): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=7826 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45f86a code=0x50000 [ 781.901064][ T7769] batman_adv: Cannot find parent device 13:03:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) [ 781.963253][ T7748] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 781.970055][ T26] audit: type=1326 audit(1589720636.987:4699): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=7826 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 782.054965][ T26] audit: type=1326 audit(1589720636.997:4700): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=7826 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 13:03:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r2, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r2], 0x4c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 782.491756][ T7888] batman_adv: Cannot find parent device 13:03:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) 13:03:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x74, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:03:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x4) 13:03:58 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000000060020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:03:58 executing program 1: pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) 13:03:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32], 0x4c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 782.798806][ T7900] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 782.972760][ T7900] device bond62 entered promiscuous mode 13:03:58 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000000264020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 783.093242][ T7906] device gretap101 entered promiscuous mode [ 783.127800][ T7906] bond62: (slave gretap101): Enslaving as a backup interface with an up link 13:03:58 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x20000004e20, @local}, 0x10) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = socket(0x2c, 0x800, 0x6) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x7) readv(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, 0x0, 0x0) sendto$inet(r0, 0x0, 0xfffffffffffffe58, 0x24000000, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, &(0x7f00000001c0)="83", 0x1, 0x4081, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x78, 0x21, 0x0, 0x0) [ 783.178836][ T7913] bond62 (unregistering): (slave gretap101): Releasing backup interface [ 783.266944][ T7913] device gretap101 left promiscuous mode 13:03:59 executing program 1: pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) [ 783.728566][ T7913] bond62 (unregistering): Released all slaves [ 783.859418][ T7956] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 13:03:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x5) [ 784.050764][ T7959] bridge1: port 2(gretap10) entered blocking state [ 784.088248][ T7959] bridge1: port 2(gretap10) entered disabled state [ 784.130372][ T7959] device gretap10 entered promiscuous mode [ 784.171812][ T7900] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:03:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32], 0x4c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) 13:03:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, [], 0x1}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xedc0) 13:04:00 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000084000000000005dc020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:04:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x7a, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 784.536232][ T8031] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 13:04:00 executing program 1: pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) [ 784.579855][ T8031] bond11 (uninitialized): Released all slaves 13:04:00 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newneigh={0x1c, 0x1c, 0x111, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000100)) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x24) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r2, r1, 0x0, 0x100000001) 13:04:00 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000084000000000003e8020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:04:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32], 0x4c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 784.975521][ T8052] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:04:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x6) [ 785.167778][ T8052] device bond62 entered promiscuous mode [ 785.215156][ T8057] device gretap102 entered promiscuous mode [ 785.223060][ T8057] bond62: (slave gretap102): Enslaving as a backup interface with an up link [ 785.241414][ T8058] bond62 (unregistering): (slave gretap102): Releasing backup interface [ 785.296647][ T8058] device gretap102 left promiscuous mode 13:04:01 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) [ 785.584200][ T8058] bond62 (unregistering): Released all slaves [ 785.738128][ T8060] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 785.766393][ T8096] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 785.793802][ T8096] bond11 (uninitialized): Released all slaves 13:04:01 executing program 3: setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @multicast2=0xe000000f, 0x0, 0x0, 'sh\x00'}, 0x2c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SIOCGETLINKNAME(r4, 0x89e0, &(0x7f0000000100)={0x1, 0x3}) ioctl$TCGETX(0xffffffffffffffff, 0x5432, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000280), 0x0) socket$nl_crypto(0x10, 0x3, 0x15) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) splice(r0, 0x0, r1, 0x0, 0x100000002, 0x0) 13:04:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x7) 13:04:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 786.146841][ T8052] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 786.325535][ T26] kauditd_printk_skb: 3365 callbacks suppressed [ 786.325549][ T26] audit: type=1326 audit(1589720641.787:8066): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8116 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 786.427108][ T26] audit: type=1326 audit(1589720641.827:8067): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8116 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 786.497269][ T26] audit: type=1326 audit(1589720641.827:8068): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8116 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 786.530604][ T8167] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 13:04:02 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000084000000000001f4020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:04:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0xf0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:04:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x8) [ 786.661596][ T8167] device bond11 entered promiscuous mode [ 786.668494][ T26] audit: type=1326 audit(1589720641.827:8069): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8116 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 13:04:02 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x11, 0x3, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x400) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x49, @private2={0xfc, 0x2, [], 0x1}, 0x1c2f}}, 0x3, 0x7c8e, 0xffffff00, 0x8000, 0x6}, &(0x7f0000000100)=0x98) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x40}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000380)={r3, 0x45, 0x81, 0x401, 0x5, 0xd4f, 0x3f, 0x9, {r6, @in6={{0xa, 0x4e24, 0x2, @private1, 0x800}}, 0xfffffffe, 0x8, 0xd6, 0x7, 0xff}}, &(0x7f0000000240)=0xb0) sendmsg(r2, &(0x7f0000000180)={&(0x7f0000000000)=@nfc={0x103, 0x14, 0x0, 0x2}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000280)="9cabbf0400080000009b80008100501d88ca", 0x12}], 0x1}, 0x0) 13:04:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) 13:04:02 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000084000000000000fc020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 786.786809][ T8217] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 786.806984][ T26] audit: type=1326 audit(1589720641.827:8070): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8116 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 786.890532][ T26] audit: type=1326 audit(1589720641.827:8071): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8116 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 786.955893][ T26] audit: type=1326 audit(1589720641.827:8072): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8116 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 13:04:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x9) [ 787.086967][ T8217] device bond62 entered promiscuous mode [ 787.101130][ T26] audit: type=1326 audit(1589720641.827:8073): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8116 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 787.128294][ T8224] bond62 (unregistering): Released all slaves [ 787.189987][ T26] audit: type=1326 audit(1589720641.827:8074): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8116 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 13:04:02 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000084000000fffffffd020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 787.242489][ T8266] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 787.327699][ T26] audit: type=1326 audit(1589720641.827:8075): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8116 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 787.358740][ T8266] device bond12 entered promiscuous mode 13:04:02 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) 13:04:03 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f00000002c0)) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000000c0)=0xea) syz_open_dev$vcsn(0x0, 0x5, 0x181c00) syz_open_dev$loop(0x0, 0x4000000, 0x183e22) lseek(r1, 0x0, 0x2) r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) sendfile(r1, r3, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe) 13:04:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) 13:04:03 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000084000000000080fe020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 787.675902][ T8217] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 787.865380][ T8356] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 13:04:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:04:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0xa) [ 788.077162][ T8356] device bond13 entered promiscuous mode [ 788.286752][ T8403] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:04:03 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r2, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r2], 0x4c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) 13:04:03 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000840000000000c0fe020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:04:04 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) 13:04:04 executing program 3: ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"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"}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/ocfs2_control\x00', 0x80140, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001ac0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="04002abd7000ffdbdf250800000008000500e0000002"], 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000884) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_DEASSIGN_DEV_IRQ(r5, 0x4040ae75, &(0x7f0000000500)={0x8, 0x100, 0x8, 0x204}) r6 = socket$inet(0x10, 0x5, 0x8) sendmsg(r6, &(0x7f0000000080)={0x0, 0x1ef, &(0x7f00000000c0)=[{&(0x7f0000000000)="24000000180007041dfffd946f6105000a0000001f0000000400080008001e000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 788.567020][ T8403] device bond62 entered promiscuous mode [ 788.650938][ T8406] device gretap103 entered promiscuous mode [ 788.688276][ T8406] bond62: (slave gretap103): Enslaving as a backup interface with an up link [ 788.737446][ T8408] bond62 (unregistering): (slave gretap103): Releasing backup interface [ 788.806758][ T8408] device gretap103 left promiscuous mode [ 789.193985][ T8408] bond62 (unregistering): Released all slaves 13:04:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0xb) [ 789.299613][ T8454] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 13:04:04 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000084000000000000ff020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 789.351080][ T8454] bond14 (uninitialized): Released all slaves 13:04:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) 13:04:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r2, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r2], 0x4c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 789.746345][ T8403] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:04:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x500, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:04:05 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) fchmod(r0, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x34f, &(0x7f0000000440)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A'}, 0xffffffffffffffc0) syz_mount_image$ceph(&(0x7f0000000000)='ceph\x00', &(0x7f0000000080)='./file0\x00', 0x7, 0x4, &(0x7f0000000100)=[{&(0x7f00000001c0)="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", 0xff, 0x4}, {&(0x7f0000000700)="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", 0x1000, 0x3}, {&(0x7f00000002c0)="97bf4095a88331434a52028ea7f4442488722aa2091880a9c88f113bb3bee4c9684c0f01dfed713c7dd38673f17c331ee69401bea92cd1ced881c605e45acaf6d8864408ec777e6ea68c91ac67b7a9b09e88de1eef156b45baca0eff003162748654dd8ac913047e11b4b6c8a03868b855959fe8d959fcef0c47861a8eb839817e1d9b0688af70cd8be416287f0f8029a4d858fb9eec8b40b2392eabd4566fe029e4b9f8753c5f6cd83f5f8e37fd5b61a1fd22fa5ba8fec3dee62c34b9af7f67895e0d85310b42", 0xc7, 0xff}, {&(0x7f00000000c0)="cc4887639a1a0ebbc1c9ce1614f9aed0481b569812afe2cf18db7010be7fa9d3266be0dcf960f6c0b1a159dbd346d944cc9c6e718d8ba2d3", 0x38, 0x800}], 0x6, &(0x7f0000001700)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) 13:04:05 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000084000000001fffff020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 790.112301][ T8522] bond14 (uninitialized): Released all slaves 13:04:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) [ 790.392612][ T8538] ceph: No path or : separator in source 13:04:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0xc) 13:04:06 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000084000000fdffffff020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:04:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r2, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r2], 0x4c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 790.698617][ T8539] device bond62 entered promiscuous mode 13:04:06 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0xff, 0x2}, 0x8) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f00000000c0)=r2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0xe0, 0x900, &(0x7f00000006c0)="b9ff0300000d698cb89e40f088a8d501890600de0500000077fb7f11c72be9", 0x0, 0x100}, 0x28) [ 790.765930][ T8543] device gretap104 entered promiscuous mode [ 790.803307][ T8543] bond62: (slave gretap104): Enslaving as a backup interface with an up link [ 790.859803][ T8544] bond62 (unregistering): (slave gretap104): Releasing backup interface [ 790.956419][ T8544] device gretap104 left promiscuous mode 13:04:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) [ 791.438534][ T8544] bond62 (unregistering): Released all slaves [ 791.491358][ T26] kauditd_printk_skb: 4790 callbacks suppressed [ 791.491373][ T26] audit: type=1326 audit(1589720646.957:12866): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8608 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45f86a code=0x50000 13:04:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0xd) [ 791.589831][ T26] audit: type=1326 audit(1589720646.957:12867): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8608 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 791.614030][ T8591] validate_nla: 2 callbacks suppressed [ 791.614045][ T8591] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 791.704640][ T26] audit: type=1326 audit(1589720646.957:12868): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8608 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 791.793754][ T26] audit: type=1326 audit(1589720646.957:12869): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8608 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 791.864921][ T26] audit: type=1326 audit(1589720646.957:12870): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8608 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 791.930481][ T26] audit: type=1326 audit(1589720646.957:12871): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8608 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 791.974406][ T26] audit: type=1326 audit(1589720646.957:12872): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8608 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 13:04:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r2, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r2], 0x4c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 792.033107][ T26] audit: type=1326 audit(1589720646.957:12873): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8608 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 792.144975][ T26] audit: type=1326 audit(1589720646.957:12874): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8608 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 792.198601][ T26] audit: type=1326 audit(1589720646.957:12875): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8608 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 792.248387][ T8539] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:04:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) 13:04:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x600, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:04:07 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000000000010000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:04:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x4, 0x17, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x2}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x1) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_tcp(&(0x7f00000003c0)='127.0.0.1\x00', 0x0, &(0x7f0000000480)='9p\x00', 0x18a8001, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x14c) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275735b21b7af6b6469723d2e2f66696c65312c75707065726469723d2e2f66696c6530"]) rmdir(&(0x7f00000000c0)='./bus/file0\x00') [ 792.459290][ T8661] batman_adv: Cannot find parent device 13:04:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0xe) [ 792.673685][ T8678] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 792.739628][ T8677] overlayfs: missing 'workdir' [ 792.830771][ T8706] overlayfs: missing 'workdir' 13:04:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x30}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x44}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 792.883549][ T8678] device bond62 entered promiscuous mode 13:04:08 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000020000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:04:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r2, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r2], 0x4c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 792.974806][ T8681] device gretap105 entered promiscuous mode [ 793.046999][ T8681] bond62: (slave gretap105): Enslaving as a backup interface with an up link [ 793.097354][ T8698] bond62 (unregistering): (slave gretap105): Releasing backup interface [ 793.176667][ T8698] device gretap105 left promiscuous mode 13:04:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) [ 793.585196][ T8698] bond62 (unregistering): Released all slaves 13:04:09 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000030000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:04:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0xf) [ 793.759598][ T8734] batman_adv: Cannot find parent device 13:04:09 executing program 3: r0 = socket$inet6(0xa, 0x401000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r3 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000009f00"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) socket$kcm(0x2b, 0x1, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x208200) sendfile(r0, r3, 0x0, 0x8000fffffffe) socketpair$unix(0x1, 0x0, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f0000000140)={0x4, 0x70, 0x9, 0x6, 0x3, 0x0, 0x0, 0x5, 0x22010, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x7, 0x4}, 0x4004, 0x6, 0x5, 0x6, 0x3ff}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f00000000c0)) [ 794.003750][ T8678] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:04:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) 13:04:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x700, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:04:09 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000040000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:04:09 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r2, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r2], 0x4c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) 13:04:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x10) [ 794.544279][ T8810] batman_adv: Cannot find parent device [ 794.634669][ T8811] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 794.785790][ T8811] device bond62 entered promiscuous mode 13:04:10 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000050000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 794.874725][ T8816] device gretap106 entered promiscuous mode [ 794.958029][ T8816] bond62: (slave gretap106): Enslaving as a backup interface with an up link [ 795.006868][ T8817] bond62 (unregistering): (slave gretap106): Releasing backup interface [ 795.076658][ T8817] device gretap106 left promiscuous mode 13:04:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) [ 795.473917][ T8817] bond62 (unregistering): Released all slaves 13:04:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r2, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r2], 0x4c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 795.647321][ T8811] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:04:11 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000060000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:04:11 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="1a07e857c58e5b068b160ced5c1f00b7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) r3 = dup3(r1, r2, 0x0) accept$phonet_pipe(r3, 0x0, 0x0) [ 796.085217][ T8919] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 13:04:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x732, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:04:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x11) 13:04:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) 13:04:11 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x0, 0x0) mremap(&(0x7f0000115000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000048c000/0x1000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f00000000c0)={0x8, "e88f304c293caceeeab81f25dbbf14a845a9f48a90f776c7f4aa87e8a7710500", 0x2}) add_key(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) [ 796.269528][ T8919] device bond14 entered promiscuous mode 13:04:11 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000070000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:04:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r2, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r2], 0x4c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 796.434241][ T8973] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:04:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x12) [ 796.496553][ T26] kauditd_printk_skb: 3543 callbacks suppressed [ 796.496567][ T26] audit: type=1326 audit(1589720651.967:16419): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8970 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45f86a code=0x50000 [ 796.582925][ T8973] device bond62 entered promiscuous mode [ 796.692420][ T8981] device gretap107 entered promiscuous mode [ 796.723481][ T8981] bond62: (slave gretap107): Enslaving as a backup interface with an up link [ 796.734158][ T26] audit: type=1326 audit(1589720651.997:16420): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8970 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 796.779763][ T8984] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 13:04:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r2, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r2], 0x4c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) 13:04:12 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000080000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 796.849090][ T8984] device bond15 entered promiscuous mode [ 796.903029][ T26] audit: type=1326 audit(1589720651.997:16421): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8970 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 796.906564][ T8986] bond62 (unregistering): (slave gretap107): Releasing backup interface [ 796.996083][ T8986] device gretap107 left promiscuous mode [ 797.076578][ T26] audit: type=1326 audit(1589720651.997:16422): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8970 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 797.159616][ T26] audit: type=1326 audit(1589720651.997:16423): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8970 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 13:04:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x64, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x38, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x24, 0x2, 'cpuset\\securityposix_acl_access\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}]}, 0x64}}, 0x0) ioctl$VIDIOC_S_MODULATOR(0xffffffffffffffff, 0x40445637, &(0x7f0000000140)={0x7, "6615e6202e02f37ea4454a05b6a644b0f41493cb03b3510cea2749e6e26308f5", 0x820, 0x0, 0x7f, 0x4, 0x1}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x4, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x17b444) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc0a85322, &(0x7f0000000500)) [ 797.253387][ T26] audit: type=1326 audit(1589720651.997:16424): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8970 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 797.349983][ T26] audit: type=1326 audit(1589720651.997:16425): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8970 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 797.397793][ T8986] bond62 (unregistering): Released all slaves [ 797.430223][ T26] audit: type=1326 audit(1589720651.997:16426): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8970 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 [ 797.488966][ T26] audit: type=1326 audit(1589720651.997:16427): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8970 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 13:04:13 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000090000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 797.556740][ T9075] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 797.649788][ T26] audit: type=1326 audit(1589720651.997:16428): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=8970 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45ca29 code=0x50000 13:04:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 797.729679][ T9075] device bond16 entered promiscuous mode [ 797.757647][ T8973] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:04:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0xa00, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:04:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) 13:04:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x13) 13:04:13 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000084000000000a0000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 798.164943][ T9160] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 798.192086][ T9160] bond17 (uninitialized): Released all slaves 13:04:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) 13:04:14 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x35, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000000)={0x0, 0xfffffffff6f526e4}) [ 798.534948][ T9174] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 798.670734][ T9174] device bond62 entered promiscuous mode 13:04:14 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000084000000000e0000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 798.757533][ T9179] device gretap108 entered promiscuous mode [ 798.807277][ T9179] bond62: (slave gretap108): Enslaving as a backup interface with an up link [ 798.882576][ T9184] bond62 (unregistering): (slave gretap108): Releasing backup interface [ 798.977208][ T9184] device gretap108 left promiscuous mode 13:04:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) [ 799.338767][ T9184] bond62 (unregistering): Released all slaves 13:04:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x14) [ 799.476173][ T9226] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 799.509948][ T9226] bond17 (uninitialized): Released all slaves 13:04:15 executing program 3: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812}) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f00000000c0)='\x00', 0x1}]) r5 = socket(0x10, 0x2, 0x0) dup3(r5, r3, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x15) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000080)={@mcast1, r7}, 0x14) 13:04:15 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 799.945983][ T9174] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:04:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) 13:04:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0xc00, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:04:15 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000110000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 800.274382][ T9297] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 800.317643][ T9297] bond17 (uninitialized): Released all slaves 13:04:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x15) 13:04:16 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000600000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 800.660831][ T9315] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:04:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 800.864424][ T9315] device bond62 entered promiscuous mode 13:04:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) [ 800.970412][ T9317] device gretap109 entered promiscuous mode [ 801.023958][ T9317] bond62: (slave gretap109): Enslaving as a backup interface with an up link [ 801.170017][ T9318] bond62 (unregistering): (slave gretap109): Releasing backup interface [ 801.276140][ T9318] device gretap109 left promiscuous mode 13:04:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) [ 801.850878][ T9318] bond62 (unregistering): Released all slaves 13:04:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x16) 13:04:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) [ 802.035045][ T9361] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 802.340486][ T9315] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:04:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) 13:04:18 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) 13:04:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) 13:04:18 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000fc0000020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:04:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0xe00, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:04:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x17) [ 803.052132][ T9449] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 803.105737][ T9449] bond17 (uninitialized): Released all slaves 13:04:18 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000084000000002c0100020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 803.285703][ T9453] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:04:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x0, 0x0}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) [ 803.467732][ T9453] device bond62 entered promiscuous mode 13:04:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 803.665358][ T9462] device gretap110 entered promiscuous mode 13:04:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x0, 0x0}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) [ 803.708000][ T9462] bond62: (slave gretap110): Enslaving as a backup interface with an up link [ 803.753332][ T9468] bond62 (unregistering): (slave gretap110): Releasing backup interface [ 803.806269][ T9468] device gretap110 left promiscuous mode 13:04:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) 13:04:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x0, 0x0}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) [ 804.327760][ T9468] bond62 (unregistering): Released all slaves 13:04:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) 13:04:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x18) [ 804.525154][ T9528] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 804.562341][ T9528] bond17 (uninitialized): Released all slaves 13:04:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) [ 804.805389][ T9453] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:04:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) 13:04:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x2000, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:04:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) 13:04:20 executing program 3: r0 = socket(0x22, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x9}], 0x10}}], 0x2, 0x0) 13:04:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) 13:04:20 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000f40100020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) 13:04:21 executing program 3: socket$nl_route(0x10, 0x3, 0x0) 13:04:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x19) [ 805.550862][ T9632] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 805.663779][ T9632] device bond17 entered promiscuous mode 13:04:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) 13:04:21 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) prctl$PR_SET_PTRACER(0x59616d61, r2) r3 = syz_open_dev$vcsn(0x0, 0x5, 0x0) syz_open_dev$loop(0x0, 0x4000000, 0x183e22) lseek(r1, 0x1, 0x1) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r4, 0x2008002) sendfile(0xffffffffffffffff, r3, 0x0, 0xfffffffffffffffe) ioctl$sock_bt_bnep_BNEPCONNDEL(r4, 0x400442c9, &(0x7f00000002c0)={0x0, @remote}) r5 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r5, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe) [ 805.834779][ T9636] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:04:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 806.015585][ T9636] device bond62 entered promiscuous mode [ 806.033385][ T9682] device gretap111 entered promiscuous mode 13:04:21 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000640200020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 806.096304][ T9682] bond62: (slave gretap111): Enslaving as a backup interface with an up link [ 806.097536][ T26] kauditd_printk_skb: 1160 callbacks suppressed [ 806.097550][ T26] audit: type=1804 audit(1589720661.568:17589): pid=9723 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir362459442/syzkaller.5zt4aj/638/file0/bus" dev="loop3" ino=57 res=1 [ 806.201851][ T9683] bond62 (unregistering): (slave gretap111): Releasing backup interface 13:04:21 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r2 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[], 0xfffffecc) splice(r3, 0x0, r1, 0x0, 0x10000, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xffffffffffffff7f, 0x0) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000140)={0x4, 0x7, 0x1}) close(r5) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000100)={r8}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r8, 0xd}, 0x8) close(r2) socket(0x1000000010, 0x80002, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffdc, 0x0) [ 806.266070][ T9683] device gretap111 left promiscuous mode [ 806.285042][ T26] audit: type=1804 audit(1589720661.618:17590): pid=9723 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir362459442/syzkaller.5zt4aj/638/file0/bus" dev="loop3" ino=57 res=1 [ 806.326581][ T26] audit: type=1804 audit(1589720661.688:17591): pid=9723 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir362459442/syzkaller.5zt4aj/638/file0/bus" dev="loop3" ino=57 res=1 [ 806.409092][ T26] audit: type=1800 audit(1589720661.688:17592): pid=9723 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=57 res=0 [ 806.507069][ T26] audit: type=1804 audit(1589720661.688:17593): pid=9741 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir362459442/syzkaller.5zt4aj/638/file0/bus" dev="loop3" ino=57 res=1 [ 806.606755][ T9683] bond62 (unregistering): Released all slaves [ 806.708828][ T9732] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 806.789396][ T9732] device bond18 entered promiscuous mode [ 806.946764][ T9636] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 807.369866][ T9795] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.3'. 13:04:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x3207, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 13:04:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) 13:04:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) 13:04:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x1a) 13:04:23 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000000300020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 807.601882][ T9843] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 807.807492][ T9843] device bond19 entered promiscuous mode 13:04:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x50000}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) 13:04:23 executing program 5: r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000000e80300020000780292ec23e2609242cc318161000000cbe839726d178febdea9c4edbad6aa92987b9427b36095f373aa"], 0x18}, 0xfc) [ 807.994981][ T9882] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 13:04:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0af70000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) [ 808.203062][ T9882] device bond62 entered promiscuous mode [ 808.285064][ T9896] device gretap112 entered promiscuous mode 13:04:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) [ 808.329005][ T9896] bond62: (slave gretap112): Enslaving as a backup interface with an up link [ 808.387626][ T9897] bond62 (unregistering): (slave gretap112): Releasing backup interface [ 808.436000][ T9897] device gretap112 left promiscuous mode [ 808.830704][ T26] audit: type=1326 audit(1589720664.298:17594): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=9957 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45f86a code=0x0 [ 809.012756][ T9897] bond62 (unregistering): Released all slaves 13:04:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0xe0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67f6a848]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x4000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x1b) [ 809.163958][ T9947] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 13:04:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r2, 0x8, r4) [ 809.505492][ T26] audit: type=1326 audit(1589720664.968:17595): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10008 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45f86a code=0x0 [ 809.714990][ T9882] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 866.520610][T14873] block nbd3: shutting down sockets [ 869.245683][ T0] NOHZ: local_softirq_pending 08 [ 964.599294][ T1169] INFO: task syz-executor.3:9837 can't die for more than 143 seconds. [ 964.607915][ T1169] syz-executor.3 R running task 29024 9837 7299 0x00004006 [ 964.633194][ T1169] Call Trace: [ 964.636603][ T1169] ? lock_acquire+0x1f2/0x8f0 [ 964.645780][ T1169] ? pipe_double_lock+0x1a0/0x1e0 [ 964.656636][ T1169] ? lock_release+0x800/0x800 [ 964.664689][ T1169] ? __mutex_lock+0xc5/0x13c0 [ 964.675310][ T1169] ? lock_downgrade+0x840/0x840 [ 964.686453][ T1169] ? mark_held_locks+0x9f/0xe0 [ 964.696913][ T1169] ? mutex_trylock+0x2c0/0x2c0 [ 964.705921][ T1169] ? lockdep_hardirqs_on+0x463/0x620 [ 964.718779][ T1169] ? __mutex_unlock_slowpath+0xe2/0x660 [ 964.727831][ T1169] ? smp_apic_timer_interrupt+0x1b6/0x600 [ 964.741713][ T1169] ? retint_kernel+0x2b/0x2b [ 964.746356][ T1169] ? wait_for_completion+0x270/0x270 [ 964.757888][ T1169] ? pipe_double_lock+0x185/0x1e0 [ 964.773621][ T1169] ? do_splice+0xdee/0x1560 [ 964.778188][ T1169] ? default_file_splice_write+0x90/0x90 [ 964.787614][ T1169] ? __x64_sys_splice+0x2c1/0x330 [ 964.798569][ T1169] ? do_syscall_64+0xf6/0x7d0 [ 964.807158][ T1169] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 964.822175][ T1169] [ 964.822175][ T1169] Showing all locks held in the system: [ 964.836475][ T1169] 1 lock held by khungtaskd/1169: [ 964.860751][ T1169] #0: ffffffff899befc0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 964.871932][ T1169] 1 lock held by in:imklog/6764: [ 964.876925][ T1169] #0: ffff88809a3c9b70 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 964.895112][ T1169] 2 locks held by agetty/6989: [ 964.903161][ T1169] #0: ffff8880a2fae098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 [ 964.923559][ T1169] #1: ffffc90000f942e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x220/0x1b30 [ 964.941990][ T1169] 1 lock held by syz-executor.3/9837: [ 964.947455][ T1169] [ 964.954540][ T1169] ============================================= [ 964.954540][ T1169] [ 964.968264][ T1169] NMI backtrace for cpu 0 [ 964.972913][ T1169] CPU: 0 PID: 1169 Comm: khungtaskd Not tainted 5.7.0-rc1-next-20200415-syzkaller #0 [ 964.982363][ T1169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 964.992417][ T1169] Call Trace: [ 964.996008][ T1169] dump_stack+0x188/0x20d [ 965.000404][ T1169] nmi_cpu_backtrace.cold+0x70/0xb1 [ 965.005790][ T1169] ? lapic_can_unplug_cpu.cold+0x3b/0x3b [ 965.011449][ T1169] nmi_trigger_cpumask_backtrace+0x231/0x27e [ 965.017998][ T1169] watchdog+0xde3/0x14e0 [ 965.022268][ T1169] ? reset_hung_task_detector+0x30/0x30 [ 965.027905][ T1169] kthread+0x388/0x470 [ 965.031985][ T1169] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 965.037723][ T1169] ret_from_fork+0x24/0x30 [ 965.042240][ T1169] Sending NMI from CPU 0 to CPUs 1: [ 965.047879][ C1] NMI backtrace for cpu 1 [ 965.047886][ C1] CPU: 1 PID: 9837 Comm: syz-executor.3 Not tainted 5.7.0-rc1-next-20200415-syzkaller #0 [ 965.047892][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 965.047896][ C1] RIP: 0010:lock_is_held_type+0x251/0x350 [ 965.047907][ C1] Code: 00 00 83 ab cc 08 00 00 01 75 5d 48 c7 c0 e0 c4 94 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 0f 85 c2 00 00 00 <48> 83 3d 37 1a 3c 08 00 74 32 48 8b 7c 24 10 57 9d 0f 1f 44 00 00 [ 965.047911][ C1] RSP: 0018:ffffc90001927b90 EFLAGS: 00000046 [ 965.047919][ C1] RAX: 1ffffffff132989c RBX: ffff888092c3a5c0 RCX: 0000000000000000 [ 965.047923][ C1] RDX: dffffc0000000000 RSI: 1ffff110125875d1 RDI: ffff888092c3ae8c [ 965.047928][ C1] RBP: ffff888092c3a5c0 R08: ffffffff81be5df0 R09: ffffed1011eca081 [ 965.047933][ C1] R10: ffffc90001927d98 R11: ffffed1011eca080 R12: 0000000000000000 [ 965.047938][ C1] R13: dffffc0000000000 R14: ffff888092c3ae88 R15: ffffffff899bef00 [ 965.047943][ C1] FS: 00007f60aa639700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 965.047947][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 965.047952][ C1] CR2: 00007f9a4f69d000 CR3: 000000002afd4000 CR4: 00000000001426e0 [ 965.047956][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 965.047961][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 965.047963][ C1] Call Trace: [ 965.047967][ C1] ___might_sleep+0x1fc/0x2b0 [ 965.047970][ C1] __mutex_lock+0xc5/0x13c0 [ 965.047973][ C1] ? pipe_double_lock+0x1a0/0x1e0 [ 965.047977][ C1] ? lock_downgrade+0x840/0x840 [ 965.047980][ C1] ? mutex_trylock+0x2c0/0x2c0 [ 965.047983][ C1] ? __mutex_unlock_slowpath+0xe2/0x660 [ 965.047987][ C1] ? __mutex_unlock_slowpath+0xe2/0x660 [ 965.047991][ C1] ? wait_for_completion+0x270/0x270 [ 965.047994][ C1] ? pipe_double_lock+0x1a0/0x1e0 [ 965.047997][ C1] pipe_double_lock+0x1a0/0x1e0 [ 965.048000][ C1] do_splice+0x377/0x1560 [ 965.048004][ C1] ? default_file_splice_write+0x90/0x90 [ 965.048007][ C1] __x64_sys_splice+0x2c1/0x330 [ 965.048010][ C1] do_syscall_64+0xf6/0x7d0 [ 965.048014][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 965.048017][ C1] RIP: 0033:0x45ca29 [ 965.048027][ C1] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 965.048031][ C1] RSP: 002b:00007f60aa638c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 965.048039][ C1] RAX: ffffffffffffffda RBX: 00000000005079c0 RCX: 000000000045ca29 [ 965.048044][ C1] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006 [ 965.048049][ C1] RBP: 000000000078c220 R08: 0000000000010000 R09: 0000000000000000 [ 965.048054][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 965.048059][ C1] R13: 0000000000000bae R14: 00000000004ce9f7 R15: 00007f60aa6396d4 [ 965.049958][ T1169] Kernel panic - not syncing: hung_task: blocked tasks [ 965.340824][ T1169] CPU: 0 PID: 1169 Comm: khungtaskd Not tainted 5.7.0-rc1-next-20200415-syzkaller #0 [ 965.350269][ T1169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 965.360336][ T1169] Call Trace: [ 965.363630][ T1169] dump_stack+0x188/0x20d [ 965.367960][ T1169] panic+0x2e3/0x75c [ 965.371880][ T1169] ? add_taint.cold+0x16/0x16 [ 965.376552][ T1169] ? lapic_can_unplug_cpu.cold+0x3b/0x3b [ 965.382179][ T1169] ? preempt_schedule_thunk+0x16/0x18 [ 965.387545][ T1169] ? watchdog+0xde3/0x14e0 [ 965.391956][ T1169] ? nmi_trigger_cpumask_backtrace+0x214/0x27e [ 965.398123][ T1169] watchdog+0xdf4/0x14e0 [ 965.402366][ T1169] ? reset_hung_task_detector+0x30/0x30 [ 965.407905][ T1169] kthread+0x388/0x470 [ 965.411983][ T1169] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 965.417714][ T1169] ret_from_fork+0x24/0x30 [ 965.423968][ T1169] Kernel Offset: disabled [ 965.428316][ T1169] Rebooting in 86400 seconds..