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", 0x1000) [ 2298.488595][T20499] bond279: (slave vlan174): link status up again after 0 ms [ 2298.502272][ T91] bond282: (slave vlan177): link status up again after 0 ms [ 2298.538764][T14896] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2298.582970][T14514] bond280: (slave vlan175): link status up again after 0 ms [ 2298.594267][T14629] bond279: (slave vlan174): link status up again after 0 ms 00:54:50 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000d40)=ANY=[@ANYBLOB="9feb010018000000000000007800000078000000090000000000000000000003000000000300000002000000c1d4320f31c5fce3ec0293"], &(0x7f0000000680)=""/143, 0x99, 0x8f, 0x1}, 0x20) 00:54:50 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000000)=@raw=[@ldst], &(0x7f0000000040)='GPL\x00', 0x1ff, 0xe0, &(0x7f0000000080)=""/224, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 2298.721652][T14896] 8021q: adding VLAN 0 to HW filter on device bond221 00:54:50 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="11b76bb9d78518aaef80d2572c39958994b73a7b7c8084ad305388140e83ed578206f4dbefd650fc593a6d69d85713e07b1f53ace4a9279a33a405130e46db0dd313e9b208ddd3b94fc63396205d2276c62e36096a174f6fb259de3e651578635c56d7e5c24676c329b10ce363af2c8b1164c84c9add7fb7bee54d4151ced0e2f6951941c73eea84d8ea66cf9804cf87d33d208cbc7fd76b65758b76b76520", 0x9f) [ 2298.842656][T14629] bond280: (slave vlan175): link status up again after 0 ms [ 2298.844077][T14514] bond279: (slave vlan174): link status up again after 0 ms [ 2298.857486][ T91] bond282: (slave vlan177): link status up again after 0 ms [ 2298.901620][T14899] bond221: (slave gretap143): Enslaving as a backup interface with an up link [ 2298.910816][T20503] bond280: (slave vlan175): link status up again after 0 ms [ 2298.983390][T20503] bond221: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2299.017050][T14629] bond280: (slave vlan175): link status up again after 0 ms [ 2299.023230][ T2441] bond282: (slave vlan177): link status up again after 0 ms [ 2299.030083][T14900] bond284: (slave gretap203): Enslaving as a backup interface with an up link [ 2299.045022][T14514] bond279: (slave vlan174): link status up again after 0 ms [ 2299.094544][T14629] bond284: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2299.096588][ T91] bond280: (slave vlan175): link status up again after 0 ms [ 2299.148054][T14903] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2299.160151][ T91] bond282: (slave vlan177): link status up again after 0 ms [ 2299.173519][T14629] bond279: (slave vlan174): link status up again after 0 ms [ 2299.188949][ T9] bond280: (slave vlan175): link status up again after 0 ms [ 2299.188990][ T2441] bond221: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2299.270146][T14902] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2299.290237][ T2441] bond284: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2299.291301][ T9] bond282: (slave vlan177): link status up again after 0 ms [ 2299.307288][T14629] bond280: (slave vlan175): link status up again after 0 ms [ 2299.318136][T20503] bond279: (slave vlan174): link status up again after 0 ms [ 2299.342936][T14929] device bridge288 entered promiscuous mode [ 2299.356357][T14929] bond284: (slave vlan179): Enslaving as a backup interface with an up link [ 2299.368996][T14514] bond279: (slave vlan174): link status up again after 0 ms [ 2299.384817][ T9300] IPv6: ADDRCONF(NETDEV_CHANGE): bond284: link becomes ready 00:54:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:54:51 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x16, 0x0, 0x4, 0x9, 0x0, 0x1}, 0x40) 00:54:51 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0xe, &(0x7f0000000180)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:54:51 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendto$netrom(r0, &(0x7f0000000000)="0a60a292c8a207901ef577a20734f99822493ff85c40ce4d6d722a856ed39ae8f38a2fdd133cb99bf1d8028724b752ffcefc8c28f7d189d62ea7b3570b158ab941f6fd", 0x43, 0x8081, &(0x7f0000000080)={{0x3, @default, 0xbb13}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default]}, 0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x4}, 0x6) write(r1, &(0x7f0000000180)=' \x00\x00\x00\x00\x00', 0x6) 00:54:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffff", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2299.399172][ T9] bond280: (slave vlan175): link status up again after 0 ms [ 2299.417267][ T9300] IPv6: ADDRCONF(NETDEV_CHANGE): bond221: link becomes ready [ 2299.487919][T14514] bond284: (slave vlan179): link status up again after 0 ms [ 2299.516417][ T2441] bond282: (slave vlan177): link status up again after 0 ms [ 2299.521161][ T91] bond280: (slave vlan175): link status up again after 0 ms [ 2299.523785][ T2441] bond279: (slave vlan174): link status up again after 0 ms 00:54:51 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) [ 2299.559667][T20499] bond282: (slave vlan177): link status up again after 0 ms [ 2299.680514][T20499] bond282: (slave vlan177): link status up again after 0 ms [ 2299.681739][ T91] bond280: (slave vlan175): link status up again after 0 ms [ 2299.688274][T14514] bond284: (slave vlan179): link status up again after 0 ms 00:54:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x16, 0x0, 0x4, 0x9, 0x190a, 0x1}, 0x40) 00:54:51 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x17, 0x0, 0x0) 00:54:51 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000040)="45852e0fa6152d00f4151566fa7dada7c9b22bac6d159d741510962d3983308772bb9535976113e41ead604b07fbcd3cc96b9c3717cc46baebf3d526c01f003cc8b4eea6835266") bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4, 0x1}, 0x6) write(r0, &(0x7f0000000180)=' \x00\x00\x00\x00\x00', 0x6) [ 2299.737323][T20499] bond282: (slave vlan177): failed to get link speed/duplex [ 2299.766006][ T2441] bond284: (slave vlan179): link status up again after 0 ms [ 2299.773389][ T2441] bond279: (slave vlan174): link status up again after 0 ms [ 2299.860943][T15005] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2299.880468][ T2441] bond280: (slave vlan175): link status up again after 0 ms [ 2299.885116][ T91] bond284: (slave vlan179): link status up again after 0 ms [ 2299.891731][T14629] bond279: (slave vlan174): link status up again after 0 ms [ 2299.955089][T20499] bond284: (slave vlan179): link status up again after 0 ms [ 2299.987309][T15005] 8021q: adding VLAN 0 to HW filter on device bond222 [ 2299.995506][ T9] bond279: (slave vlan174): link status up again after 0 ms 00:54:52 executing program 1: bpf$BPF_BTF_GET_FD_BY_ID(0x18, 0x0, 0x0) [ 2300.039911][ T2441] bond279: (slave vlan174): link status up again after 0 ms [ 2300.099892][T14285] bond280: (slave vlan175): link status up again after 0 ms [ 2300.111420][T20499] bond284: (slave vlan179): link status up again after 0 ms [ 2300.144337][T14285] bond280: (slave vlan175): link status up again after 0 ms 00:54:52 executing program 1: ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0) pipe(&(0x7f0000001600)) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000003f40), 0xffffffffffffffff) [ 2300.198485][T14514] bond284: (slave vlan179): link status up again after 0 ms [ 2300.207138][T14285] bond279: (slave vlan174): link status up again after 0 ms [ 2300.226506][T15010] bond222: (slave gretap144): Enslaving as a backup interface with an up link [ 2300.239957][ T2441] bond280: (slave vlan175): link status up again after 0 ms [ 2300.269403][T20499] bond284: (slave vlan179): link status up again after 0 ms [ 2300.270781][ T9] bond279: (slave vlan174): link status up again after 0 ms 00:54:52 executing program 3: bpf$BPF_BTF_GET_FD_BY_ID(0x21, &(0x7f0000001440)=0xffffffffffffffff, 0x4) [ 2300.310209][T15012] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2300.350054][ T2441] bond284: (slave vlan179): link status up again after 0 ms [ 2300.359746][T20499] bond280: (slave vlan175): link status up again after 0 ms [ 2300.362419][ T9] bond279: (slave vlan174): link status up again after 0 ms [ 2300.404784][T20499] bond284: (slave vlan179): link status up again after 0 ms [ 2300.426607][T14514] bond280: (slave vlan175): link status up again after 0 ms [ 2300.435792][ T2441] bond279: (slave vlan174): link status up again after 0 ms [ 2300.443565][T15012] 8021q: adding VLAN 0 to HW filter on device bond285 [ 2300.466538][ T9] bond284: (slave vlan179): link status up again after 0 ms [ 2300.500739][T15014] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2300.514581][T14514] bond284: (slave vlan179): link status up again after 0 ms [ 2300.634138][T20499] bond280: (slave vlan175): link status up again after 0 ms [ 2300.635374][ T9] bond279: (slave vlan174): link status up again after 0 ms [ 2300.642642][ T91] bond284: (slave vlan179): link status up again after 0 ms [ 2300.689392][T15016] bond285: (slave gretap204): Enslaving as a backup interface with an up link [ 2300.696227][ T91] bond279: (slave vlan174): link status up again after 0 ms [ 2300.706127][ T9] bond280: (slave vlan175): link status up again after 0 ms [ 2300.718652][T14285] bond284: (slave vlan179): link status up again after 0 ms [ 2300.754034][ T91] bond280: (slave vlan175): link status up again after 0 ms [ 2300.756395][T14629] bond279: (slave vlan174): link status up again after 0 ms [ 2300.776076][ T9] bond280: (slave vlan175): link status up again after 0 ms [ 2300.794604][T15022] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2300.805453][ T91] bond284: (slave vlan179): link status up again after 0 ms [ 2300.823270][ T2441] bond280: (slave vlan175): link status up again after 0 ms [ 2300.841082][ T2441] bond284: (slave vlan179): link status up again after 0 ms [ 2300.858006][T14514] bond279: (slave vlan174): link status up again after 0 ms [ 2300.887554][ T91] bond280: (slave vlan175): link status up again after 0 ms [ 2300.915389][T20499] bond284: (slave vlan179): link status up again after 0 ms [ 2300.922953][T14285] bond279: (slave vlan174): link status up again after 0 ms [ 2300.928139][T15046] device bridge289 entered promiscuous mode [ 2300.954851][ T2441] bond284: (slave vlan179): link status up again after 0 ms [ 2300.977640][T14629] bond280: (slave vlan175): link status up again after 0 ms [ 2300.977650][ T91] bond279: (slave vlan174): link status up again after 0 ms [ 2300.981349][T15046] bond285: (slave vlan180): Enslaving as a backup interface with an up link [ 2301.011837][T14285] bond284: (slave vlan179): link status up again after 0 ms [ 2301.016059][ T2441] bond279: (slave vlan174): link status up again after 0 ms [ 2301.038463][T25832] IPv6: ADDRCONF(NETDEV_CHANGE): bond222: link becomes ready [ 2301.050393][T20499] bond280: (slave vlan175): link status up again after 0 ms [ 2301.053019][T25832] IPv6: ADDRCONF(NETDEV_CHANGE): bond285: link becomes ready [ 2301.067890][T14514] bond284: (slave vlan179): link status up again after 0 ms [ 2301.069048][ T2441] bond279: (slave vlan174): link status up again after 0 ms [ 2301.114897][ T2441] bond284: (slave vlan179): link status up again after 0 ms [ 2301.126038][T14514] bond280: (slave vlan175): link status up again after 0 ms [ 2301.134066][T14285] bond279: (slave vlan174): link status up again after 0 ms 00:54:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:54:53 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000180)=' \x00\x00\x00\x00\x00', 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002e80)='cpuacct.usage_user\x00', 0x0, 0x0) write$bt_hci(r2, &(0x7f0000002ec0)={0x1, @write_ssp_mode={{0xc56, 0x1}, {0xff}}}, 0x5) bind$bt_hci(r1, &(0x7f0000001840)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 00:54:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000500)=ANY=[@ANYBLOB="fc1a0000650001002cbd7000fcdbdf", @ANYRES32, @ANYBLOB="0e000700f3ff0b00090004000600050002dc"], 0x1afc}}, 0x0) 00:54:53 executing program 1: socketpair(0xb, 0x0, 0x0, &(0x7f0000000200)) 00:54:53 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x2}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:54:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffff", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2301.160780][T20499] bond284: (slave vlan179): link status up again after 0 ms [ 2301.191575][T20503] bond285: (slave vlan180): link status up again after 0 ms [ 2301.247250][T20499] bond285: (slave vlan180): link status up again after 0 ms [ 2301.261499][ T2441] bond284: (slave vlan179): link status up again after 0 ms [ 2301.318349][T15122] netlink: 6652 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2301.329058][T14629] bond285: (slave vlan180): link status up again after 0 ms [ 2301.336462][T15120] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2301.348380][ T2441] bond284: (slave vlan179): link status up again after 0 ms [ 2301.434982][T14629] bond284: (slave vlan179): link status up again after 0 ms 00:54:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={0x0}}, 0x4000001) 00:54:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8912, &(0x7f0000000180)={'gre0\x00', 0x0}) 00:54:53 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x7fff, 0x3}, 0x6) write(r0, &(0x7f0000000180)=' \x00\x00\x00\x00\x00', 0x6) [ 2301.599472][T15120] 8021q: adding VLAN 0 to HW filter on device bond223 [ 2301.682761][T14629] bond285: (slave vlan180): link status up again after 0 ms [ 2301.690270][T20499] bond284: (slave vlan179): link status up again after 0 ms [ 2301.770232][T14629] bond285: (slave vlan180): link status up again after 0 ms [ 2301.770262][ T2441] bond284: (slave vlan179): link status up again after 0 ms 00:54:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) 00:54:53 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000180)=' \x00\x00\x00\x00\x00', 0x6) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x1}, 0x4) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000280)={r1, 0x2ab, 0xff, "c654405cd4287ee2d0c7f29c4a081b985bdb7f644590f6ba3bb3cc1e33c8b803d9a2ea442be8748bf10bafd0d6c086b17e860252c117dc66fa14ca99deebc6c67c42e11dd6fe9b7f54f4d632819f2824ad6db4256aac52b663e2738b53b89610dda58cce3c66dee8f335d8e8cc24924920b9756f60e41b"}) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000000)=""/12, &(0x7f0000000040)=0xc) 00:54:53 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x3}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) [ 2301.912078][T15128] bond223: (slave gretap145): Enslaving as a backup interface with an up link [ 2301.913045][T20503] bond284: (slave vlan179): link status up again after 0 ms [ 2301.927710][T14629] bond285: (slave vlan180): link status up again after 0 ms [ 2302.001179][T15130] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2302.013928][T20503] bond284: (slave vlan179): link status up again after 0 ms [ 2302.021906][ T2441] bond285: (slave vlan180): link status up again after 0 ms [ 2302.035224][T15154] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2302.175539][T15154] 8021q: adding VLAN 0 to HW filter on device bond286 [ 2302.229554][T20499] bond284: (slave vlan179): link status up again after 0 ms [ 2302.229554][ T2441] bond285: (slave vlan180): link status up again after 0 ms [ 2302.245214][T14285] bond284: (slave vlan179): link status up again after 0 ms [ 2302.275011][T14285] bond284: (slave vlan179): link status up again after 0 ms [ 2302.294473][ T9] bond284: (slave vlan179): link status up again after 0 ms [ 2302.308167][T15168] bond286: (slave gretap205): Enslaving as a backup interface with an up link [ 2302.323119][T15171] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2302.402355][T14629] bond284: (slave vlan179): link status up again after 0 ms [ 2302.403511][ T9] bond285: (slave vlan180): link status up again after 0 ms [ 2302.450418][T15177] device bridge290 entered promiscuous mode [ 2302.461652][T15177] bond286: (slave vlan181): Enslaving as a backup interface with an up link [ 2302.465035][T14629] bond284: (slave vlan179): link status up again after 0 ms [ 2302.471759][ T9302] IPv6: ADDRCONF(NETDEV_CHANGE): bond223: link becomes ready 00:54:54 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'geneve0\x00', {0x2, 0x0, @remote}}) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000280)={0x9, 0x8000}, 0xc) sendto$inet6(r1, &(0x7f0000000040)="480eb0a559ed799941c929463abb5175e3c02b25e68bf04d5e8c9b1909cbf41dc9d715f433decb7d4ee0244002e4ac192f64c2f224942f982d573b10df9946552b09bc58f3a2100e0bbbc2eb0aa03dd6cf3780fb94d29412e1397c0da5ad5c9ac0e02b798b0b8b94bba83818eb0e888df5ea3077319d97138aa82f53cb27bca5ce421dd113e567b97a494e0dad6991464eddfaf3078df6f7ee148ff1035af3ba65d1388d76c8bc4e17e4ecc366eb91d8801febca72cf403137acd6e195c4f1ea13b5930eabf5ba014b763a0d2d115165a6e69893ca065a4849f291a64983", 0xde, 0x40000, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @empty, 0x6}, 0x1c) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) write(r0, &(0x7f0000000180)=' \x00\x00\x00\x00\x00', 0x6) 00:54:54 executing program 1: syz_genetlink_get_family_id$tipc(&(0x7f0000003f40), 0xffffffffffffffff) 00:54:54 executing program 3: socketpair(0x28, 0x0, 0x0, &(0x7f0000003700)) 00:54:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffff", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:54:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xc4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x94, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x84, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2302.501221][ T9302] IPv6: ADDRCONF(NETDEV_CHANGE): bond286: link becomes ready [ 2302.540306][ T9] bond284: (slave vlan179): link status up again after 0 ms [ 2302.635478][T14285] bond286: (slave vlan181): link status up again after 0 ms [ 2302.635548][ T2441] bond285: (slave vlan180): link status up again after 0 ms [ 2302.643756][ T9] bond284: (slave vlan179): link status up again after 0 ms 00:54:54 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x4}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:54:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newlinkprop={0x28, 0x6c, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x28}}, 0x0) [ 2302.709926][T15236] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2302.765076][T14285] bond286: (slave vlan181): link status up again after 0 ms [ 2302.776174][T15236] 8021q: adding VLAN 0 to HW filter on device bond224 [ 2302.832033][ T9] bond285: (slave vlan180): link status up again after 0 ms [ 2302.832498][ T2441] bond284: (slave vlan179): link status up again after 0 ms [ 2302.918939][ T9] bond284: (slave vlan179): link status up again after 0 ms [ 2302.931189][T14514] bond286: (slave vlan181): link status up again after 0 ms [ 2302.939119][ T2441] bond285: (slave vlan180): link status up again after 0 ms 00:54:55 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000180)=' \x00\x00\x00\x00\x00', 0x6) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000000)="e6e852bed3963e99b40d5371c9d57d9a5c47463b59618fab501e05466c4e3e4bfa59ecabe9e21b5bbc6e0db7553599ae5ce419fb5816c360ebc923c62f32f5000000000000f33cddab5bea03e482ce0ff68da44601ae2148457366c26451cbb1876e03a93a710cdef8ca2725188961a88c24ed0739e397971ac0c8681a12a4b51cf5a79ee81950ee323dbe1df858a45cf1904a5677133534fb69918618bf98a6c733bcb60de7c2d35b7d6f8278b51d0f2896a73b562ab7988209d13ef32552ed5f") [ 2303.011845][T20503] bond285: (slave vlan180): link status up again after 0 ms [ 2303.011856][ T9] bond286: (slave vlan181): link status up again after 0 ms [ 2303.015204][T14285] bond284: (slave vlan179): link status up again after 0 ms [ 2303.027150][ T2441] bond286: (slave vlan181): link status up again after 0 ms [ 2303.074464][T15262] bond224: (slave gretap146): Enslaving as a backup interface with an up link 00:54:55 executing program 1: bpf$BPF_BTF_GET_FD_BY_ID(0x17, 0x0, 0x0) [ 2303.189099][ T2441] net_ratelimit: 11 callbacks suppressed [ 2303.189122][ T2441] bond224: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2303.189283][T14629] bond285: (slave vlan180): link status up again after 0 ms [ 2303.197591][ T9] bond286: (slave vlan181): link status up again after 0 ms [ 2303.224107][T15276] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2303.235017][ T2441] bond284: (slave vlan179): link status up again after 0 ms [ 2303.237400][T14285] bond285: (slave vlan180): link status up again after 0 ms [ 2303.290519][T15276] 8021q: adding VLAN 0 to HW filter on device bond287 [ 2303.305968][T15277] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 00:54:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf00", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2303.363081][T15281] bond287: (slave gretap206): Enslaving as a backup interface with an up link [ 2303.385692][T15287] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2303.393878][ T2441] bond285: (slave vlan180): link status up again after 0 ms [ 2303.395764][T20092] bond287: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2303.448896][T14285] bond284: (slave vlan179): link status up again after 0 ms 00:54:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x0) [ 2303.500016][T14629] bond224: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2303.500088][T20503] bond285: (slave vlan180): link status up again after 0 ms [ 2303.536791][ T9] bond286: (slave vlan181): link status up again after 0 ms 00:54:55 executing program 4: r0 = socket$unix(0x1, 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/141, 0x8d}, {&(0x7f00000000c0)=""/63, 0x3f}], 0x2, 0x4ab, 0xffff7fff) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000180)=' \x00\x00\x00\x00\x00', 0x6) 00:54:55 executing program 1: bpf$OBJ_GET_MAP(0x12, &(0x7f0000000300)={0x0, 0x0, 0x18}, 0x10) [ 2303.587101][T14285] bond284: (slave vlan179): link status up again after 0 ms [ 2303.612225][T20499] bond286: (slave vlan181): link status up again after 0 ms [ 2303.634885][T15289] device bridge291 entered promiscuous mode [ 2303.699805][T20499] bond286: (slave vlan181): link status up again after 0 ms [ 2303.703470][T15289] bond287: (slave vlan182): Enslaving as a backup interface with a down link [ 2303.707846][T14629] bond285: (slave vlan180): link status up again after 0 ms [ 2303.716353][T14622] bond287: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2303.716461][T14622] bond284: (slave vlan179): link status up again after 0 ms [ 2303.761903][ T9300] IPv6: ADDRCONF(NETDEV_CHANGE): bond224: link becomes ready [ 2303.775238][T20503] bond286: (slave vlan181): link status up again after 0 ms [ 2303.788093][ T9300] IPv6: ADDRCONF(NETDEV_CHANGE): bond287: link becomes ready 00:54:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000380)="aa7a941d3c29fb505b74edf30e452a721a7102f1ec6fc1e95f5734743a331301f2a0c50b588f890ec2c65d0699a12a5ac94a624ca72dfb1550ade544cf9cc51c9c40934813d602711ce0998ac297473e2ec977ab23f66b5d801bb73eb08638fb0d60e1434b628dcbca8aff2add381d9a9890df58247af0a334961f2a401eb5c1b3a1da6d224246e2a86e57c4fbe3a2d37719f4083d1c10a2f59ab6c0e09a9e42928c043c81d8342e869078ea8894f848454e79fe5a73885577d5051f3315f378f739de921a010ab7288b906c0799099320c40fd7430e4e86", 0xd8) [ 2303.806128][T14285] bond286: (slave vlan181): link status up again after 0 ms [ 2303.816023][T14629] bond285: (slave vlan180): link status up again after 0 ms 00:54:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xc4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x94, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x84, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2303.863762][T20499] bond284: (slave vlan179): link status up again after 0 ms [ 2303.883972][T14285] bond285: (slave vlan180): link status up again after 0 ms [ 2303.891654][T20503] bond286: (slave vlan181): link status up again after 0 ms 00:54:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000400)) 00:54:55 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x3, 0x4}, 0x6) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000180)=' \x00\x00\x00\x00\x00', 0x6) [ 2303.926873][T20499] bond284: (slave vlan179): link status up again after 0 ms [ 2303.934507][T20092] bond286: (slave vlan181): link status up again after 0 ms [ 2303.997746][T20503] bond286: (slave vlan181): link status up again after 0 ms [ 2304.026151][T20503] bond285: (slave vlan180): link status up again after 0 ms [ 2304.036816][T14285] bond286: (slave vlan181): link status up again after 0 ms [ 2304.043442][T15340] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2304.054931][T14629] bond286: (slave vlan181): link status up again after 0 ms [ 2304.094483][T20503] bond286: (slave vlan181): link status up again after 0 ms [ 2304.094853][T14629] bond285: (slave vlan180): link status up again after 0 ms 00:54:56 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x5}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) [ 2304.156086][T14629] bond285: (slave vlan180): link status up again after 0 ms [ 2304.178707][ T9] bond286: (slave vlan181): link status up again after 0 ms [ 2304.198289][T15340] 8021q: adding VLAN 0 to HW filter on device bond225 [ 2304.205369][T14629] bond285: (slave vlan180): link status up again after 0 ms [ 2304.245885][ T9] bond286: (slave vlan181): link status up again after 0 ms [ 2304.277615][T20499] bond286: (slave vlan181): link status up again after 0 ms [ 2304.305736][T20092] bond285: (slave vlan180): link status up again after 0 ms [ 2304.306946][T14285] bond284: (slave vlan179): link status up again after 0 ms [ 2304.329140][T15345] bond225: (slave gretap147): Enslaving as a backup interface with an up link 00:54:56 executing program 3: bpf$OBJ_GET_MAP(0xd, &(0x7f0000000040)={&(0x7f0000000000)='.\x00'}, 0x10) 00:54:56 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x2b, 0x6, 0x1f) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x1, 0x97a94e7e02f018df}, 0x6) write(r0, &(0x7f0000000180)=' \x00\x00\x00\x00\x00', 0x6) 00:54:56 executing program 1: bpf$OBJ_GET_MAP(0x8, 0x0, 0x0) [ 2304.423355][T14622] bond225: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2304.439321][T20092] bond285: (slave vlan180): link status up again after 0 ms [ 2304.517682][T15346] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2304.578518][T15354] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2304.587787][T14622] bond225: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2304.668109][T20499] bond286: (slave vlan181): link status up again after 0 ms [ 2304.668636][T14622] bond285: (slave vlan180): link status up again after 0 ms [ 2304.675779][T20503] bond284: (slave vlan179): link status up again after 0 ms 00:54:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf00", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:54:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) 00:54:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {0x13}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x2c}}, 0x0) [ 2304.753059][T15354] 8021q: adding VLAN 0 to HW filter on device bond288 [ 2304.784291][T20503] bond285: (slave vlan180): link status up again after 0 ms 00:54:56 executing program 1: socket(0xa, 0x0, 0xe3eb) 00:54:56 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000180)=' \x00\x00\x00\x00\x00', 0x6) write(0xffffffffffffffff, &(0x7f0000000000)="d58f9c9e3de0a46773e97060094608eff4ce2f409322f1d8eae2285347461fea9dad9b9e1e515675e1ff4f06484c4be177477f3edcefde5b341a6607979cf5f8a9b595c0a4789841b0611c8797251589008d0df3322d3fd891ca867083318f510b6c05a90bab8f65cbed73c40f396eb0e1331797f1054cc5e2082f7cfb5557562b1436f833", 0x85) [ 2304.865192][T14622] bond285: (slave vlan180): link status up again after 0 ms [ 2304.921947][T20499] bond284: (slave vlan179): link status up again after 0 ms [ 2304.933272][T20092] bond286: (slave vlan181): link status up again after 0 ms [ 2304.940812][T14629] bond285: (slave vlan180): link status up again after 0 ms [ 2304.950782][T15387] bond288: (slave gretap207): Enslaving as a backup interface with an up link [ 2305.048066][T20503] bond281: (slave vlan176): failed to get link speed/duplex [ 2305.063542][T14622] bond285: (slave vlan180): link status up again after 0 ms [ 2305.065664][T14629] bond288: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2305.076280][T14285] bond286: (slave vlan181): link status up again after 0 ms [ 2305.082342][T20092] bond284: (slave vlan179): link status up again after 0 ms [ 2305.109655][T15393] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2305.124914][T14622] bond285: (slave vlan180): link status up again after 0 ms [ 2305.154264][T20092] bond285: (slave vlan180): link status up again after 0 ms [ 2305.154664][T14622] bond286: (slave vlan181): link status up again after 0 ms [ 2305.222165][T15397] device bridge292 entered promiscuous mode [ 2305.233073][ T9] bond286: (slave vlan181): link status up again after 0 ms [ 2305.291372][T14629] bond284: (slave vlan179): link status up again after 0 ms [ 2305.292516][T14285] bond285: (slave vlan180): link status up again after 0 ms [ 2305.298988][T20092] bond288: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2305.319183][T15397] bond288: (slave vlan183): Enslaving as a backup interface with a down link [ 2305.325502][T14629] bond284: (slave vlan179): failed to get link speed/duplex [ 2305.344910][T14285] bond286: (slave vlan181): link status up again after 0 ms [ 2305.355791][ T5665] IPv6: ADDRCONF(NETDEV_CHANGE): bond225: link becomes ready [ 2305.367208][T14285] bond286: (slave vlan181): link status up again after 0 ms [ 2305.378530][ T5665] IPv6: ADDRCONF(NETDEV_CHANGE): bond288: link becomes ready 00:54:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xc4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x94, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x84, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:54:57 executing program 1: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='.\x00'}, 0x10) 00:54:57 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)=' \x00\x00\x00\x00\x00', 0x6) [ 2305.393225][T14622] bond285: (slave vlan180): link status up again after 0 ms [ 2305.436874][T14285] bond285: (slave vlan180): link status up again after 0 ms [ 2305.445234][T14622] bond286: (slave vlan181): link status up again after 0 ms [ 2305.521421][T15453] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2305.621049][T20092] bond285: (slave vlan180): link status up again after 0 ms [ 2305.637930][T14285] bond286: (slave vlan181): link status up again after 0 ms [ 2305.706623][T14622] bond285: (slave vlan180): link status up again after 0 ms [ 2305.742662][T15453] 8021q: adding VLAN 0 to HW filter on device bond226 [ 2305.851284][T15456] bond226: (slave gretap148): Enslaving as a backup interface with an up link [ 2305.866478][T20499] bond285: (slave vlan180): link status up again after 0 ms [ 2305.866507][T20503] bond286: (slave vlan181): link status up again after 0 ms [ 2305.894377][T15457] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2305.904974][T14285] bond286: (slave vlan181): link status up again after 0 ms [ 2305.922736][T20499] bond285: (slave vlan180): link status up again after 0 ms [ 2305.951955][ T9] bond286: (slave vlan181): link status up again after 0 ms 00:54:58 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x6}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:54:58 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x1, &(0x7f0000000040)=@raw=[@func], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:54:58 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='io.weight\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x1, 0x12) write(r0, &(0x7f0000000180)=' \x00\x00\x00\x00\x00', 0x6) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x60, 0x2) 00:54:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf00", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2306.026146][T20503] bond286: (slave vlan181): link status up again after 0 ms [ 2306.050805][T15498] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2306.104121][T20092] bond286: (slave vlan181): link status up again after 0 ms [ 2306.215675][T20092] bond286: (slave vlan181): link status up again after 0 ms 00:54:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@nat={'nat\x00', 0x1b, 0x5, 0x530, 0x300, 0x0, 0xffffffff, 0x300, 0x300, 0x460, 0x460, 0xffffffff, 0x460, 0x460, 0x5, 0x0, {[{{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@ah={{0x30}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@remote, @ipv4=@loopback, @port, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@dev, @ipv6=@private2, @port, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@private0, @ipv4=@multicast1, @port, @gre_key}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth0_to_hsr\x00', 'vcan0\x00'}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @private0, @private1, @ipv4={'\x00', '\xff\xff', @empty}}}]}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) [ 2306.334854][T14285] bond286: (slave vlan181): link status up again after 0 ms [ 2306.336203][T15498] 8021q: adding VLAN 0 to HW filter on device bond289 [ 2306.354813][T14285] bond286: (slave vlan181): link status up again after 0 ms 00:54:58 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000700)={{{@in=@multicast2, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x514, 0x0, 0xb, 0x201, 0x70bd2d, 0x25dfdbfb, {0x3}, [@generic="8a72512bfd81b72cc99678c2c336dab81e6e233c0e812fe378910848a7f701821051100ea67fb646e7dbf253dd9cd03d9ea1f167ddef384abdfcf79f794becd87e58fd42269119522467e9752c8460ac74f4841aff66632648633de8d5e52a9eb241446b6af57cf5cfaa3c1ff6940a0b4d01fe388162425b228a095514543de6180191634d0f91f26703f27a9e3b48e5e2687ee1ca7f3e3a4b01965f127e892527da48dc7e9b64c88c0658276a5b1b060fa4a1ac10aabaec6dc3582a", @nested={0xd0, 0x8f, 0x0, 0x1, [@typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3f}}, @generic="c4cf3b5b1e2afdb01cecd057a6c373d9616c44c2338add8a680a61aeba81bb2ee2ad8dd725799c51c627cb7216c5", @generic="45063eae9ea715d1b85e13f930149ca21414529ff78c835892ffacbe03c0b058ee329f9e6bea26a357048bd5837a3034820444260f02faade5de2d19ed3c8bc16b24d7bba6ac4488467bb700c00507c683fa41abc4facc674b47db6dc8a11ad8b4405fb91949dc0860ed25aa646ae1978ed6ba6c6988965d96eb42e8307d3c83542dceb09e711595dc60"]}, @typed={0x3d, 0x7e, 0x0, 0x0, @binary="2f1f6e629888645e436b2e57574332d6f28fdcc3fe8c9550a433e0070718fdc6b1a8b0f9806b94d1913cd56f4211b1bee47974ccfded574510"}, @generic="b6c0a19fa4104b29477bdbc7618039dd297e63ae62a8d854d26b6f3f4db717952aa07647edcd7698ca1aeaef33f13022c1e3786159a98a35edece8d0315a6c812504fad80f8d94f3e1fda06a56a0941c3c96d81334b88db4672a56724fd582272c45670cc0091c5297f47cae9d24a906a20f17675c843f833528ae490cd2a9c64072454d7882c93ea13b18b0ce01094e972ebf6c75114911da3751b0c927f05bbea6d4019db8487e68cc745c5ed0668595e0a93ee0cff787702dac27ade098a6ae2f850348e2d98385d9160857", @typed={0xc, 0x45, 0x0, 0x0, @u64=0x3}, @typed={0x8, 0x24, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x20b, 0x90, 0x0, 0x1, [@typed={0xc, 0x8e, 0x0, 0x0, @u64=0x8}, @typed={0xf, 0x6c, 0x0, 0x0, @binary="f10ba2360422c9b26ca2b6"}, @typed={0x9, 0x28, 0x0, 0x0, @str=']\\*}\x00'}, @typed={0xc, 0x49, 0x0, 0x0, @u64=0x6}, @typed={0x4, 0x66}, @generic="6806bc80ec943c9c860d19f9f92a5ee050d93e8c88da00e8c7efecc9e06f1af54aeeebd1d11426dc11ac0e848974d64cf121a46124536c76611424dd52f3db0f3c51599c4d44edc32d2669374479d5bd9bf0ca4760497c587bcdecca82acf3835e597e4b64c2fa977b6b9163ab47e853d4f269de22652f450850a95c7dc784da0224d9783a58cc4024c62423aeeeb60ff64fca2225d57626a5fa7a83f65ac85bbd759c1e67820a04b0f6d3e8ee9f6748af7c676c81df0fb929666bc8cab4fe497bb536a2bf2a5f6e3bbe69", @typed={0xd1, 0x6d, 0x0, 0x0, @binary="ce68931f63d8a3b9831bfaf78d73f8c707b90bab7ee8833828933a7dbe930bf7f0ae904ebd3dd88e3fa57b802b482c91aa0bb86798de0a037d4ca2e4e5ff50429f445f62eb65686aac97686e692cfe21edb53d88b6e3ca5e4ee77b11acb54a7580869ce1fb71724408a75da3c9651e2c7b03f50806daf35d31afd16e96322657217bbadbd1629aec24931d17f68dc8553d62972083bffe5a90a8085f215b7b29561bbaefc68b5991f5267db8a95167b2a8c8d18e4a98967753dc0c7270a6fac542526dd8fe5a009f7f36e6ab88"}, @typed={0xc, 0x72, 0x0, 0x0, @u64=0x7}, @typed={0x1a, 0x38, 0x0, 0x0, @binary="9b07e3579c02e9f1a2e0bc56baa8a8b40138ac0cbaaa"}, @typed={0x8, 0x35, 0x0, 0x0, @uid=r1}]}, @generic="2b81574ecb7c3592c19ffa225ac06fdf885e3649b9efe83027b65b0e0c8b1c53cfc7af2e821a0581c013bc4b7726d60abb4a295893d2c4e17c4ba65f2abe803a38c1046294cf18"]}, 0x514}, 0x1, 0x0, 0x0, 0x1}, 0x40) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000180)=' \x00\x00\x00\x00\x00', 0x6) [ 2306.454267][T15563] x_tables: duplicate underflow at hook 1 [ 2306.477938][T15511] bond289: (slave gretap208): Enslaving as a backup interface with an up link [ 2306.524053][T15515] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:54:58 executing program 3: bpf$OBJ_GET_MAP(0x9, &(0x7f0000000300)={0x0, 0x0, 0x18}, 0x10) 00:54:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) [ 2306.582582][T14622] bond286: (slave vlan181): link status up again after 0 ms [ 2306.643829][T14622] bond286: (slave vlan181): link status up again after 0 ms 00:54:58 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f00000000c0)=@raw=[@initr0], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 2306.684403][ T9] bond286: (slave vlan181): link status up again after 0 ms [ 2306.729420][ T9] bond286: (slave vlan181): link status up again after 0 ms [ 2306.749198][T15517] device bridge293 entered promiscuous mode [ 2306.784663][T14622] bond286: (slave vlan181): link status up again after 0 ms [ 2306.819349][T15517] bond289: (slave vlan184): Enslaving as a backup interface with a down link [ 2306.836286][ T9] bond286: (slave vlan181): link status up again after 0 ms [ 2306.863167][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): bond226: link becomes ready [ 2306.883879][ T9] bond286: (slave vlan181): link status up again after 0 ms [ 2306.886432][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): bond289: link becomes ready 00:54:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:54:59 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 00:54:59 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001040)=@bpf_ext={0x1c, 0x1, &(0x7f0000000e40)=@raw=[@exit], &(0x7f0000000ec0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 2306.960729][T14622] bond286: (slave vlan181): link status up again after 0 ms [ 2307.040091][ T9] bond286: (slave vlan181): link status up again after 0 ms [ 2307.110855][T15562] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2307.133289][ T9] bond286: (slave vlan181): link status up again after 0 ms [ 2307.214742][ T9] bond286: (slave vlan181): link status up again after 0 ms [ 2307.278964][T15562] 8021q: adding VLAN 0 to HW filter on device bond227 [ 2307.327644][T14629] bond286: (slave vlan181): link status up again after 0 ms 00:54:59 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x7}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:54:59 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x1, &(0x7f0000000000)=@raw=[@jmp], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:54:59 executing program 1: r0 = socket(0x11, 0xa, 0x0) sendmsg$xdp(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)=[{0x0}, {0x0}], 0x2}, 0x0) [ 2307.421088][T14622] bond286: (slave vlan181): link status up again after 0 ms [ 2307.432130][T15569] bond227: (slave gretap149): Enslaving as a backup interface with an up link [ 2307.478042][T15572] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2307.517165][T15592] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2307.534587][T14622] bond286: (slave vlan181): link status up again after 0 ms [ 2307.573451][T14629] bond286: (slave vlan181): link status up again after 0 ms 00:54:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf0000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2307.725022][T14622] bond286: (slave vlan181): link status up again after 0 ms [ 2307.803980][T14622] bond286: (slave vlan181): link status up again after 0 ms [ 2307.831344][T15592] 8021q: adding VLAN 0 to HW filter on device bond290 00:54:59 executing program 3: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)={0x0, 0x0, 0x18}, 0x10) 00:54:59 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14}, 0x14}}, 0x8060) 00:54:59 executing program 4: epoll_create(0x1000) 00:54:59 executing program 3: bpf$OBJ_GET_MAP(0x9, 0x0, 0x0) [ 2307.973753][ T9] bond286: (slave vlan181): link status up again after 0 ms [ 2308.019797][T15612] bond290: (slave gretap209): Enslaving as a backup interface with an up link [ 2308.044716][ T9] bond286: (slave vlan181): link status up again after 0 ms 00:55:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 2308.137865][T15628] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2308.242421][T14622] net_ratelimit: 8 callbacks suppressed [ 2308.242442][T14622] bond290: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2308.287117][T14629] bond286: (slave vlan181): link status up again after 0 ms [ 2308.338983][T15630] device bridge294 entered promiscuous mode [ 2308.387921][T15630] bond290: (slave vlan185): Enslaving as a backup interface with a down link 00:55:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2308.434081][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): bond227: link becomes ready [ 2308.450502][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): bond290: link becomes ready 00:55:00 executing program 4: bpf$OBJ_GET_MAP(0x14, 0x0, 0x0) 00:55:00 executing program 3: syz_emit_ethernet(0x2ca, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa008100000086dd6016bc9f0290060000000000000000000000000000000000fe80"], 0x0) [ 2308.588434][T14622] bond286: (slave vlan181): link status up again after 0 ms [ 2308.625617][T15683] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2308.675936][T20092] bond286: (slave vlan181): link status up again after 0 ms [ 2308.773313][T15683] 8021q: adding VLAN 0 to HW filter on device bond228 [ 2308.890243][T14514] bond286: (slave vlan181): link status up again after 0 ms [ 2308.939141][T14514] bond286: (slave vlan181): link status up again after 0 ms [ 2308.947655][T15684] bond228: (slave gretap150): Enslaving as a backup interface with an up link [ 2308.974735][T20092] bond286: (slave vlan181): link status up again after 0 ms [ 2308.982200][T15687] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2309.027784][T14629] bond228: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2309.070263][ T9] bond286: (slave vlan181): link status up again after 0 ms [ 2309.098238][T15705] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:55:01 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000005dc0)={0x0, 0x0, 0x0, &(0x7f0000004d00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:55:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf0000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:01 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x8}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:55:01 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x54}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) 00:55:01 executing program 1: bpf$OBJ_GET_MAP(0x19, 0x0, 0x0) [ 2309.214159][T20092] bond228: Warning: No 802.3ad response from the link partner for any adapters in the bond 00:55:01 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, &(0x7f0000000300)) [ 2309.298928][T15705] 8021q: adding VLAN 0 to HW filter on device bond291 00:55:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) 00:55:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000280)={&(0x7f0000000140), 0xc, 0x0}, 0x0) [ 2309.409037][T15736] bond291: (slave gretap210): Enslaving as a backup interface with an up link [ 2309.452891][T14622] bond291: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2309.478396][T20503] bond286: (slave vlan181): link status up again after 0 ms 00:55:01 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) [ 2309.513205][T15739] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2309.590903][T15742] device bridge295 entered promiscuous mode [ 2309.630401][T15742] bond291: (slave vlan186): Enslaving as a backup interface with a down link [ 2309.650050][T20092] bond286: (slave vlan181): link status up again after 0 ms [ 2309.706465][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): bond228: link becomes ready [ 2309.739209][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): bond291: link becomes ready [ 2309.739483][T14622] bond291: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2309.764654][T20092] bond286: (slave vlan181): link status up again after 0 ms 00:55:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:01 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) 00:55:01 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)) [ 2309.849960][T20092] bond286: (slave vlan181): link status up again after 0 ms [ 2309.893186][T15792] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2310.012698][T15792] 8021q: adding VLAN 0 to HW filter on device bond229 [ 2310.046687][T20503] bond286: (slave vlan181): link status up again after 0 ms [ 2310.073828][T14514] bond286: (slave vlan181): link status up again after 0 ms [ 2310.190258][T15796] bond229: (slave gretap151): Enslaving as a backup interface with an up link [ 2310.212956][ T9] bond286: (slave vlan181): link status up again after 0 ms [ 2310.228307][ T9] bond229: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2310.245178][T14622] bond286: (slave vlan181): link status up again after 0 ms [ 2310.259195][T14622] bond286: (slave vlan181): failed to get link speed/duplex [ 2310.292900][T15798] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2310.416660][T14514] bond229: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2310.433135][T15849] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:55:02 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x9}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:55:02 executing program 3: bpf$OBJ_GET_MAP(0xc, 0x0, 0x0) 00:55:02 executing program 1: bpf$OBJ_GET_MAP(0xf, &(0x7f0000000040)={&(0x7f0000000000)='.\x00'}, 0x10) 00:55:02 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) 00:55:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf0000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000100)) 00:55:02 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r0, 0x0, &(0x7f00000003c0)) [ 2310.787326][T15849] 8021q: adding VLAN 0 to HW filter on device bond292 00:55:02 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x308, 0x118, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x238, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_vlan\x00', 'syz_tun\x00'}, 0x0, 0xf8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@dev, @loopback, [], [], 'veth0_virt_wifi\x00', 'vcan0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) 00:55:02 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) [ 2310.911375][T15850] bond292: (slave gretap211): Enslaving as a backup interface with an up link [ 2310.911961][T14622] bond292: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2310.972637][T15854] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2311.029448][T15913] x_tables: duplicate underflow at hook 3 [ 2311.104676][T15855] device bridge296 entered promiscuous mode [ 2311.181154][T15855] bond292: (slave vlan187): Enslaving as a backup interface with a down link [ 2311.208366][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): bond229: link becomes ready [ 2311.224038][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): bond292: link becomes ready [ 2311.234898][T14622] bond292: Warning: No 802.3ad response from the link partner for any adapters in the bond 00:55:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:03 executing program 4: socket(0xf, 0x3, 0x2) 00:55:03 executing program 1: r0 = socket(0xa, 0x3, 0x7) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) [ 2311.440818][T15862] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2311.503342][T15871] batman_adv: Cannot find parent device [ 2311.674624][T15888] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2311.690743][T15926] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2311.751779][T15926] 8021q: adding VLAN 0 to HW filter on device bond293 00:55:03 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0xa}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:55:03 executing program 3: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x0, 0x8}, 0xc) 00:55:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 00:55:03 executing program 4: syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@multicast, @multicast, @val={@void, {0x8100, 0x6}}, {@ipv6={0x86dd, @generic={0x0, 0x6, "f4df26", 0x0, 0x0, 0x0, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}, 0x0) [ 2311.950071][T15930] bond293: (slave gretap212): Enslaving as a backup interface with an up link [ 2312.053354][T15933] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2312.147929][T15936] device bridge297 entered promiscuous mode [ 2312.161560][T15936] bond293: (slave vlan188): Enslaving as a backup interface with a down link [ 2312.214516][T25832] IPv6: ADDRCONF(NETDEV_CHANGE): bond293: link becomes ready 00:55:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:04 executing program 4: syz_emit_ethernet(0xfdef, &(0x7f0000000f00)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x8, "f4df26", 0x0, 0x0, 0x0, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}, 0x0) 00:55:04 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000013c0)={0x17, 0x0, 0x0, 0x5}, 0x40) 00:55:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:04 executing program 1: syz_emit_ethernet(0x56, &(0x7f0000000f00)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "f4df26", 0x20, 0x0, 0x0, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@dstopts={0x2c, 0x2, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim, @jumbo, @ra, @pad1]}]}}}}}, 0x0) 00:55:04 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0xb}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:55:04 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000013c0)={0x9, 0x7, 0x1, 0x5, 0x88}, 0x40) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000100)={r0, 0x0, 0x0}, 0x20) 00:55:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{0x5f}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 2312.553103][T15998] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2312.686095][T15998] 8021q: adding VLAN 0 to HW filter on device bond230 [ 2312.698148][T15999] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:55:04 executing program 1: syz_emit_ethernet(0x32, &(0x7f0000000000)={@empty, @random="f375cd3b5f1c", @void, {@mpls_mc={0x8848, {[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @remote, @empty}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "e7b782", 0x0, "ad8395"}}}}}}}, 0x0) [ 2312.854350][T15999] 8021q: adding VLAN 0 to HW filter on device bond294 00:55:04 executing program 3: syz_emit_ethernet(0xe, &(0x7f0000000000)={@broadcast, @random="00000000001b"}, 0x0) 00:55:05 executing program 1: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_SIOCADDRT(r0, 0x8953, 0x0) [ 2313.067087][T16003] bond230: (slave gretap152): Enslaving as a backup interface with an up link 00:55:05 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000013c0)={0x9, 0x7, 0x1, 0x5}, 0x40) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000100)={r0, 0x0, 0x0, 0x7}, 0x20) [ 2313.219581][T16002] bond294: (slave gretap213): Enslaving as a backup interface with an up link [ 2313.325821][T20499] net_ratelimit: 9 callbacks suppressed [ 2313.325842][T20499] bond294: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2313.346958][T16018] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2313.434737][T16019] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2313.552822][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): bond230: link becomes ready [ 2313.564967][T20499] bond294: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2313.582885][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): bond294: link becomes ready 00:55:05 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000013c0)={0x9, 0x7, 0x1, 0x5, 0xd0}, 0x40) 00:55:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:05 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000013c0)={0x9, 0x7, 0x1, 0x5}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000000), 0x0}, 0x20) 00:55:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:05 executing program 4: syz_emit_ethernet(0x36, &(0x7f0000000f00)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "f4df26", 0x3f00, 0x0, 0x0, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}, 0x0) 00:55:05 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0xf}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:55:05 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000013c0)={0x9, 0x7, 0x1, 0xfffeffff, 0x0, 0x1}, 0x40) 00:55:05 executing program 3: select(0x53, &(0x7f00000000c0)={0x7}, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}) [ 2313.998761][T16116] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:55:06 executing program 4: socket(0xa, 0x0, 0x30000000) 00:55:06 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="0249f7ec01000040"], 0x10}}, 0x0) 00:55:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r0, 0x0, 0x0) [ 2314.307827][T16116] 8021q: adding VLAN 0 to HW filter on device bond295 [ 2314.349981][T16115] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:55:06 executing program 4: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x48) 00:55:06 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) [ 2314.649568][T16115] 8021q: adding VLAN 0 to HW filter on device bond231 [ 2314.805470][T14629] bond295: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2314.837930][T16118] bond295: (slave gretap214): Enslaving as an active interface with an up link [ 2314.887180][T16119] bond231: (slave gretap153): Enslaving as a backup interface with an up link [ 2314.972563][T16122] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2314.984137][T14629] bond231: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2315.005858][T14514] bond295: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2315.059072][T16124] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2315.103132][T16129] device bridge299 entered promiscuous mode [ 2315.144585][T14514] bond231: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2315.151305][T16129] bond295: (slave vlan190): Enslaving as a backup interface with a down link [ 2315.180725][T16143] device bridge239 entered promiscuous mode [ 2315.192032][T16143] bond231: (slave vlan157): Enslaving as a backup interface with a down link [ 2315.249708][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): bond295: link becomes ready [ 2315.272717][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): bond231: link becomes ready 00:55:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:07 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg2\x00'}) 00:55:07 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000080)=0x88a0, 0x4) 00:55:07 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="14"], 0x18}, 0x0) 00:55:07 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x10}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:55:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2315.471117][T20503] bond284: (slave vlan179): failed to get link speed/duplex 00:55:07 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x49, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf75664f51da6fb51}, 0x0) 00:55:07 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x60}, 0x0) 00:55:07 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'veth1_to_batadv\x00', @random}) [ 2315.679556][T16243] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2315.996218][T16243] 8021q: adding VLAN 0 to HW filter on device bond296 00:55:08 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000480)="ed") 00:55:08 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x73}}], 0x20}, 0x0) [ 2316.113319][T16246] bond296: (slave gretap215): Enslaving as a backup interface with an up link [ 2316.151731][T16244] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:55:08 executing program 3: sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, 0x0, 0x0) [ 2316.329703][T14629] bond296: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2316.380492][T16244] 8021q: adding VLAN 0 to HW filter on device bond232 [ 2316.436454][T16248] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2316.484399][T20092] bond296: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2316.607048][T16251] bond232: (slave gretap154): Enslaving as a backup interface with an up link [ 2316.616615][T16267] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 00:55:08 executing program 5: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:08 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000080)="af9b") 00:55:08 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) [ 2316.701808][T16262] device bridge300 entered promiscuous mode [ 2316.712165][T16262] bond296: (slave vlan191): Enslaving as a backup interface with a down link [ 2316.715181][T14629] bond232: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2316.738165][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): bond296: link becomes ready [ 2316.779141][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): bond232: link becomes ready 00:55:08 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x3}, 0x40) 00:55:09 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x11}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:55:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:09 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1c00"/16, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001"], 0x60}, 0x0) 00:55:09 executing program 3: socket$inet6(0xa, 0x2, 0x20) [ 2316.978159][T16354] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:55:09 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) [ 2317.228648][T16354] 8021q: adding VLAN 0 to HW filter on device bond233 00:55:09 executing program 1: syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), 0xffffffffffffffff) [ 2317.357626][T16356] bond233: (slave gretap155): Enslaving as a backup interface with an up link [ 2317.414036][T16359] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2317.480308][T16360] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:55:09 executing program 3: socket(0x26, 0x5, 0x10001) 00:55:09 executing program 5: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:09 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f0000003180)='ns/pid\x00') [ 2317.751804][T16360] 8021q: adding VLAN 0 to HW filter on device bond297 00:55:09 executing program 3: clock_gettime(0x6, &(0x7f0000000100)) [ 2317.882245][T16397] bond297: (slave gretap216): Enslaving as a backup interface with an up link [ 2317.967558][T16404] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:55:10 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000d80)='tasks\x00', 0x2, 0x0) 00:55:10 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="10"], 0x10}}, 0x0) [ 2318.098336][T16411] device bridge301 entered promiscuous mode [ 2318.173538][T16411] bond297: (slave vlan192): Enslaving as a backup interface with a down link [ 2318.182534][T28632] IPv6: ADDRCONF(NETDEV_CHANGE): bond233: link becomes ready [ 2318.237727][T28632] IPv6: ADDRCONF(NETDEV_CHANGE): bond297: link becomes ready [ 2318.372038][T14285] net_ratelimit: 8 callbacks suppressed [ 2318.372060][T14285] bond278: (slave vlan173): failed to get link speed/duplex [ 2318.515706][T16463] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2318.658516][T16463] 8021q: adding VLAN 0 to HW filter on device bond234 00:55:10 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x60}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:55:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 00:55:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:10 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 00:55:10 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xfffffe27, &(0x7f0000000600)=ANY=[@ANYBLOB="1c00000000d34c46a700000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c0000000000000001000000", @ANYRES32], 0x60}, 0x0) [ 2318.779359][T16465] bond234: (slave gretap156): Enslaving as a backup interface with an up link [ 2318.809579][T20503] bond234: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2318.836767][T16472] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 00:55:10 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000480)) 00:55:10 executing program 3: syz_emit_ethernet(0xf7, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd67a619b700c150c5fe8000000000000000000000000000bb00000000000000000000ffff"], 0x0) [ 2318.983468][ T9300] IPv6: ADDRCONF(NETDEV_CHANGE): bond234: link becomes ready [ 2318.992647][T20503] bond234: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2319.008923][T16526] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:55:11 executing program 5: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r3, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:11 executing program 4: socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) [ 2319.143747][T16526] 8021q: adding VLAN 0 to HW filter on device bond298 [ 2319.222932][T16530] bond298: (slave gretap217): Enslaving as a backup interface with an up link [ 2319.244862][T16534] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2319.260117][T14285] bond298: Warning: No 802.3ad response from the link partner for any adapters in the bond 00:55:11 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 2319.362694][T16535] device bridge302 entered promiscuous mode [ 2319.435852][T14285] bond298: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2319.456544][T16535] bond298: (slave vlan193): Enslaving as a backup interface with a down link [ 2319.528139][ T9300] IPv6: ADDRCONF(NETDEV_CHANGE): bond298: link becomes ready 00:55:11 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) [ 2319.627791][T16582] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:55:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:11 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:55:11 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYRES32], 0x60}, 0x0) [ 2319.818270][T16582] 8021q: adding VLAN 0 to HW filter on device bond235 00:55:11 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000040)=@raw=[@func], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 2319.908942][T16584] bond235: (slave gretap157): Enslaving as a backup interface with an up link [ 2319.974027][T14629] bond235: Warning: No 802.3ad response from the link partner for any adapters in the bond 00:55:12 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c0000000000000001"], 0x60}, 0x0) [ 2320.020522][T16586] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 00:55:12 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 00:55:12 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x40) 00:55:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 2320.211562][ T9] bond235: Warning: No 802.3ad response from the link partner for any adapters in the bond 00:55:12 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r1, &(0x7f00000005c0)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) [ 2320.313064][ T9300] IPv6: ADDRCONF(NETDEV_CHANGE): bond235: link becomes ready [ 2320.337910][T16609] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2320.406655][T16609] 8021q: adding VLAN 0 to HW filter on device bond299 00:55:12 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000400)='ns/pid\x00') 00:55:12 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 00:55:12 executing program 4: syz_emit_ethernet(0xf7, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd67a619b700c150c5fe8000000000000000000000000000bb00000000000000000000ff"], 0x0) [ 2320.538458][T16627] bond299: (slave gretap218): Enslaving as a backup interface with an up link [ 2320.570268][T16630] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2320.646418][T20503] bond299: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2320.823725][T16637] device bridge303 entered promiscuous mode [ 2320.838410][T16637] bond299: (slave vlan194): Enslaving as a backup interface with a down link [ 2320.864608][ T9300] IPv6: ADDRCONF(NETDEV_CHANGE): bond299: link becomes ready [ 2320.875339][T20092] bond299: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2320.909259][T16689] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:55:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2321.089450][T16689] 8021q: adding VLAN 0 to HW filter on device bond236 [ 2321.189337][T16653] bond236: (slave gretap158): Enslaving as a backup interface with an up link [ 2321.193258][T14629] bond236: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2321.214018][T13770] Bluetooth: hci0: command 0x0c20 tx timeout [ 2321.222346][T16695] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 00:55:13 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x0, 0x2}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:55:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 00:55:13 executing program 1: select(0x53, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x4}, &(0x7f00000001c0)={0x77359400}) 00:55:13 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040), 0x4) 00:55:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 2321.347446][ T9300] IPv6: ADDRCONF(NETDEV_CHANGE): bond236: link becomes ready [ 2321.394437][T16746] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2321.488759][T16746] 8021q: adding VLAN 0 to HW filter on device bond300 00:55:13 executing program 3: unshare(0x42000100) 00:55:13 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) [ 2321.687722][T16747] bond300: (slave gretap219): Enslaving as an active interface with an up link [ 2321.718286][T16750] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:55:13 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x0) 00:55:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x40000042, 0x0, 0x0) [ 2321.874547][T16751] device bridge304 entered promiscuous mode [ 2321.945515][T16751] bond300: (slave vlan195): Enslaving as a backup interface with a down link [ 2321.972440][ T9300] IPv6: ADDRCONF(NETDEV_CHANGE): bond300: link becomes ready 00:55:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2322.014736][T16794] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2322.103825][T16794] 8021q: adding VLAN 0 to HW filter on device bond237 00:55:14 executing program 4: bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 00:55:14 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) [ 2322.397295][T16798] bond237: (slave gretap159): Enslaving as a backup interface with an up link [ 2322.445653][T16800] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2322.497646][T16853] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2322.618433][T16853] 8021q: adding VLAN 0 to HW filter on device bond301 [ 2322.708084][T16854] bond301: (slave gretap220): Enslaving as a backup interface with an up link [ 2322.718167][T16856] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2322.751474][T16858] device bridge305 entered promiscuous mode [ 2322.767740][T16858] bond301: (slave vlan196): Enslaving as a backup interface with a down link [ 2322.778783][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): bond237: link becomes ready [ 2322.811487][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): bond301: link becomes ready 00:55:14 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x0, 0x3}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:55:14 executing program 4: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@map, 0xffffffffffffffff, 0x15}, 0x10) 00:55:14 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="020c7f081f"], 0xf8}}, 0x0) 00:55:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 00:55:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 00:55:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2323.116207][T16917] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:55:15 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeb9}, 0x0) 00:55:15 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x20}, 0x0) 00:55:15 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) [ 2323.376574][T16917] 8021q: adding VLAN 0 to HW filter on device bond238 [ 2323.440789][T16922] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2323.621260][T16922] 8021q: adding VLAN 0 to HW filter on device bond302 00:55:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, &(0x7f0000000240)=""/88, 0x58, 0x0, &(0x7f00000002c0)=@abs, 0x6e) sendmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 00:55:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffffffffffffffff}, 0x6) [ 2323.746009][T16923] bond238: (slave gretap160): Enslaving as a backup interface with an up link [ 2323.782292][T16955] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 00:55:15 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) accept$unix(r0, 0x0, &(0x7f0000000040)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000400)='ns/pid\x00') socket$packet(0x11, 0x2, 0x300) [ 2323.796983][T14285] net_ratelimit: 13 callbacks suppressed [ 2323.797003][T14285] bond238: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2324.044940][T16957] bond302: (slave gretap221): Enslaving as a backup interface with an up link [ 2324.092523][T16959] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2324.129262][T14629] bond302: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2324.151006][T14285] bond238: Warning: No 802.3ad response from the link partner for any adapters in the bond 00:55:16 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x0, 0x4}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:55:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="640100001100010403000000f300000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000800280089af000008002e000100000008000a00", @ANYRES32=0x0, @ANYBLOB="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"], 0x164}}, 0x0) 00:55:16 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x3b}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 00:55:16 executing program 3: socket(0x10, 0x0, 0x8) [ 2324.276265][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): bond238: link becomes ready [ 2324.308374][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): bond302: link becomes ready [ 2324.375659][T16966] device bridge306 entered promiscuous mode [ 2324.398005][ T9] bond302: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2324.464899][T16966] bond302: (slave vlan197): Enslaving as a backup interface with a down link 00:55:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:16 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0xf}, 0xffffff67, &(0x7f0000000140)={0x0}}, 0x0) [ 2324.577373][T17029] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:55:16 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x4, 0x3, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 00:55:16 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0xe}]}]}, {0x0, [0x0, 0x0, 0x0, 0x2e, 0x61, 0x30, 0x2e, 0x5f]}}, &(0x7f00000000c0)=""/172, 0x4a, 0xac, 0x1}, 0x20) [ 2324.780260][T17029] 8021q: adding VLAN 0 to HW filter on device bond239 [ 2324.806146][T17035] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 00:55:16 executing program 4: bpf$MAP_CREATE(0x2, &(0x7f00000001c0), 0x40) 00:55:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 2324.935480][T17036] bond239: (slave gretap161): Enslaving as a backup interface with an up link [ 2324.971397][T17039] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 00:55:17 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$tipc(r0, &(0x7f0000000000)=@id, 0xfffffffffffffe10) [ 2325.024554][T14622] bond239: Warning: No 802.3ad response from the link partner for any adapters in the bond 00:55:17 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x0, 0x5}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) [ 2325.125276][T17080] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:55:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:17 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x99}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 2325.322905][T14514] bond239: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2325.369442][T17080] 8021q: adding VLAN 0 to HW filter on device bond303 00:55:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000100a066b5fb6ba3000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x30, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff3, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}}, 0x0) [ 2325.530608][T17083] bond303: (slave gretap222): Enslaving as a backup interface with an up link [ 2325.568902][T17087] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:55:17 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x66}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 2325.587174][ T9] bond303: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2325.704387][T17089] device bridge307 entered promiscuous mode [ 2325.727962][T17089] bond303: (slave vlan198): Enslaving as a backup interface with a down link [ 2325.747964][T14285] bond303: Warning: No 802.3ad response from the link partner for any adapters in the bond 00:55:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2325.780778][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): bond239: link becomes ready [ 2325.810366][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): bond303: link becomes ready 00:55:17 executing program 4: bpf$PROG_LOAD(0x9, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x33}, [@ldst]}, &(0x7f0000003ff6)='GPL\x00', 0x0, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 2325.926330][T17138] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2326.018594][T17138] 8021q: adding VLAN 0 to HW filter on device bond240 [ 2326.075346][T17142] bond240: (slave gretap162): Enslaving as a backup interface with an up link [ 2326.141858][ T91] bond240: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2326.158135][T17143] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 00:55:18 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x96}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 2326.225315][T17144] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2326.322783][ T9] bond240: Warning: No 802.3ad response from the link partner for any adapters in the bond 00:55:18 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 00:55:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:18 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x0, 0x6}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) [ 2326.513779][T17191] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:55:18 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0x8ffd}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) [ 2326.650016][T17191] 8021q: adding VLAN 0 to HW filter on device bond304 [ 2326.703304][T17196] bond304: (slave gretap223): Enslaving as a backup interface with an up link [ 2326.767883][T28632] IPv6: ADDRCONF(NETDEV_CHANGE): bond240: link becomes ready [ 2326.777748][T28632] IPv6: ADDRCONF(NETDEV_CHANGE): bond304: link becomes ready [ 2326.811491][T17198] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:55:19 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) select(0x40, &(0x7f0000003700), 0x0, &(0x7f0000003780)={0x3f}, &(0x7f0000003800)) [ 2326.934333][T17201] device bridge308 entered promiscuous mode [ 2326.973409][T17201] bond304: (slave vlan199): Enslaving as a backup interface with a down link [ 2327.003050][T17212] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:55:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2327.093789][T17212] 8021q: adding VLAN 0 to HW filter on device bond241 00:55:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, 0x0) 00:55:19 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xc}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2}, 0x48) close(r1) [ 2327.390366][T17213] bond241: (slave gretap163): Enslaving as a backup interface with an up link [ 2327.404178][T17215] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 00:55:19 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x5c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 2327.509550][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): bond241: link becomes ready 00:55:19 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x7, [@datasec={0x5, 0x1, 0x0, 0xf, 0x2, [{}], "e0ae"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "bc22"}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f00000000c0)=""/169, 0x47, 0xa9, 0x1}, 0x20) [ 2327.554752][T17304] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:55:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2327.644891][T17304] 8021q: adding VLAN 0 to HW filter on device bond305 00:55:19 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x0, 0x7}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) [ 2327.809588][T17306] bond305: (slave gretap224): Enslaving as a backup interface with an up link 00:55:19 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000480)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000003c34963b5383537dd3dcc2ab1d1000060000000002000000030000002803000000000000980100000000000098010000980100009002000090020090"], 0x1) [ 2327.897703][T17310] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:55:20 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x78}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 2327.964852][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): bond305: link becomes ready [ 2328.148634][T17314] device bridge309 entered promiscuous mode [ 2328.185271][T17314] bond305: (slave vlan200): Enslaving as a backup interface with a down link [ 2328.237470][T17360] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:55:20 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xa2}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 00:55:20 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@var={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x2e, 0x25]}}, &(0x7f00000000c0)=""/172, 0x2f, 0xac, 0x1}, 0x20) 00:55:20 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x5d}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 00:55:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:20 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2, 0x66}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) [ 2328.503632][T17360] 8021q: adding VLAN 0 to HW filter on device bond242 [ 2328.745922][T17362] bond242: (slave gretap164): Enslaving as a backup interface with an up link [ 2328.803845][T17368] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2328.920997][T20499] net_ratelimit: 12 callbacks suppressed [ 2328.921019][T20499] bond242: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2328.944186][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): bond242: link becomes ready 00:55:21 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x6f}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 00:55:21 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x5d}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 00:55:21 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 00:55:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:21 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x0, 0x8}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) [ 2329.149963][T17420] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:55:21 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000d80)={'ip6tnl0\x00', &(0x7f0000000d00)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @private1}}) 00:55:21 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x5d}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 2329.292974][T17420] 8021q: adding VLAN 0 to HW filter on device bond306 00:55:21 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x76}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 00:55:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000001100), &(0x7f0000001180)=0xcc9d5a3580460b9b) [ 2329.526449][T17425] bond306: (slave gretap225): Enslaving as a backup interface with an up link [ 2329.535168][T14514] bond306: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2329.556145][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): bond306: link becomes ready 00:55:21 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x5d}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 2329.658736][T17426] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2329.722458][T14629] bond306: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2329.824681][T17429] device bridge310 entered promiscuous mode [ 2329.873087][T17429] bond306: (slave vlan201): Enslaving as a backup interface with a down link [ 2329.890913][T17445] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:55:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x9, &(0x7f00000000c0)={0x0}}, 0x0) 00:55:22 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00 '], 0x34}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000140021010000000000000000021f0020", @ANYRES32=r3, @ANYBLOB="080002"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 00:55:22 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xa3}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 2330.169618][T17445] 8021q: adding VLAN 0 to HW filter on device bond243 00:55:22 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x11, 0x23, 0x0, 0x0) [ 2330.333288][T17475] bond243: (slave gretap165): Enslaving as a backup interface with an up link [ 2330.350397][T17479] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2330.406760][ T9] bond243: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2330.558046][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): bond243: link becomes ready [ 2330.584882][T14514] bond279: (slave vlan174): failed to get link speed/duplex 00:55:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2330.624856][T17520] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2330.642587][T20092] bond243: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2330.695395][T17535] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2330.824240][T17535] 8021q: adding VLAN 0 to HW filter on device bond307 [ 2331.014997][T17539] bond307: (slave gretap226): Enslaving as a backup interface with an up link [ 2331.026537][T17548] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2331.045116][ T91] bond307: Warning: No 802.3ad response from the link partner for any adapters in the bond 00:55:23 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x0, 0x9}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:55:23 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x53}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 00:55:23 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xffffffff, 0x6e}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) [ 2331.106917][T17549] device bridge311 entered promiscuous mode [ 2331.201169][T17549] bond307: (slave vlan202): Enslaving as a backup interface with a down link [ 2331.248362][T14514] bond307: Warning: No 802.3ad response from the link partner for any adapters in the bond 00:55:23 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x33}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 2331.331794][T17581] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:55:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 00:55:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:23 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x33}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 2331.545429][T17581] 8021q: adding VLAN 0 to HW filter on device bond244 [ 2331.591299][T17595] bond244: (slave gretap166): Enslaving as a backup interface with an up link [ 2331.608512][T17596] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2331.701526][T14514] bond244: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2331.714062][T17520] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2331.728188][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): bond307: link becomes ready 00:55:23 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x6b}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 2331.776983][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): bond244: link becomes ready 00:55:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x0, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x2c, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff3, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x11, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) [ 2331.848829][T14622] bond244: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2331.995482][T17651] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:55:24 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x85}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 2332.077407][T17651] 8021q: adding VLAN 0 to HW filter on device bond308 00:55:24 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x0, 0x2500}]}}, &(0x7f00000000c0)=""/172, 0x2a, 0xac, 0x1}, 0x20) [ 2332.269400][T17654] bond308: (slave gretap227): Enslaving as a backup interface with an up link [ 2332.321323][T17659] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2332.447106][T17662] device bridge312 entered promiscuous mode [ 2332.465574][T17662] bond308: (slave vlan203): Enslaving as a backup interface with a down link [ 2332.533020][T17667] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2332.617356][T17667] 8021q: adding VLAN 0 to HW filter on device bond245 [ 2332.634634][T17706] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 00:55:24 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x0, 0xa}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:55:24 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x8ffd}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 00:55:24 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x4b}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 00:55:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2332.675284][T17701] bond245: (slave gretap167): Enslaving as a backup interface with an up link [ 2332.729072][T17709] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:55:24 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000004c0)="95cc4433eaf5db04", 0x8, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x60, &(0x7f0000000480)=ANY=[], 0x1) 00:55:24 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x36}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 00:55:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x0, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2332.891152][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): bond308: link becomes ready [ 2332.955202][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): bond245: link becomes ready [ 2333.074767][T17716] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:55:25 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef]}}, &(0x7f0000000200)=""/170, 0x26, 0xaa, 0x1}, 0x20) [ 2333.202358][T17760] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:55:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0x1c}, @TCA_EGRESS_BLOCK={0x8}, @TCA_RATE={0x6}]}, 0x40}}, 0x0) [ 2333.468843][T17760] 8021q: adding VLAN 0 to HW filter on device bond309 [ 2333.596791][T17765] bond309: (slave gretap228): Enslaving as a backup interface with an up link [ 2333.611219][T17768] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2333.668630][T17773] device bridge313 entered promiscuous mode [ 2333.730215][T17773] bond309: (slave vlan204): Enslaving as a backup interface with a down link [ 2333.748268][T17713] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2333.891190][T17784] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2333.978143][T17784] 8021q: adding VLAN 0 to HW filter on device bond246 [ 2334.055510][T17789] bond246: (slave gretap168): Enslaving as a backup interface with an up link 00:55:26 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var]}}, &(0x7f00000000c0)=""/172, 0x2a, 0xac, 0x1}, 0x20) 00:55:26 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x59}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 00:55:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2334.149393][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): bond309: link becomes ready [ 2334.149573][T14514] net_ratelimit: 6 callbacks suppressed [ 2334.149588][T14514] bond246: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2334.210525][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): bond246: link becomes ready 00:55:26 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x0, 0xb}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:55:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x0, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:26 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x71}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 2334.342448][T17895] batman_adv: Cannot find parent device [ 2334.353805][T14622] bond246: Warning: No 802.3ad response from the link partner for any adapters in the bond 00:55:26 executing program 1: socketpair(0x10, 0x2, 0x3, &(0x7f0000000280)) 00:55:26 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x37}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 2334.486525][T17893] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2334.747968][T17893] 8021q: adding VLAN 0 to HW filter on device bond310 00:55:26 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004fc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs, 0x6e) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x30000004}) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0) 00:55:26 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000d80)={'ip6tnl0\x00', &(0x7f0000000d00)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @private1}}) [ 2334.975540][T17902] bond310: (slave vlan205): Enslaving as a backup interface with a down link 00:55:27 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0xffffffffffffffd3, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x901, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x8) [ 2335.074328][T17906] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:55:27 executing program 4: r0 = socket$inet6(0x1c, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000100)="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", 0xfb5, 0x20108, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) [ 2335.266211][T17906] 8021q: adding VLAN 0 to HW filter on device bond247 00:55:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(r0, &(0x7f0000001780)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x1) [ 2335.357580][T17923] bond247: (slave gretap169): Enslaving as a backup interface with an up link [ 2335.380328][ T91] bond247: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2335.505425][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): bond247: link becomes ready [ 2335.557333][T14514] bond247: Warning: No 802.3ad response from the link partner for any adapters in the bond 00:55:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(r0, &(0x7f0000000340)={&(0x7f0000000080)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0, 0x0, 0x0, 0xa4}, 0x18c) 00:55:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:27 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x0, 0xf}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:55:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0, 0x0, 0x0, 0xa4}, 0x5) 00:55:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:27 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001400)={&(0x7f0000000100)=@in={0x10, 0x2}, 0x10, &(0x7f00000013c0)=[{&(0x7f0000000140)="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", 0xff1}], 0x1}, 0x0) 00:55:27 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x72}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 2335.938229][T18032] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2336.114210][T18032] 8021q: adding VLAN 0 to HW filter on device bond248 00:55:28 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f0000000200)={0x0, 0x2}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="01"], 0x8) [ 2336.168903][T18033] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:55:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) poll(&(0x7f0000002540)=[{r0, 0x147}], 0x1, 0x0) 00:55:28 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000040)=@un=@abs={0x8}, 0x8, 0x0, 0x0, &(0x7f0000000680)=[{0xc}, {0xc}], 0x18}, 0x0) [ 2336.326265][T18033] 8021q: adding VLAN 0 to HW filter on device bond311 00:55:28 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendto$inet(r0, &(0x7f0000000040)='#', 0x1, 0x0, &(0x7f0000000080)={0x10, 0x2}, 0x10) 00:55:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(r0, &(0x7f0000000340)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, 0x0, 0xa4}, 0x0) [ 2336.535182][T18038] bond248: (slave gretap170): Enslaving as a backup interface with an up link [ 2336.631478][T14285] bond248: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2336.676423][T18039] bond311: (slave gretap229): Enslaving as a backup interface with an up link 00:55:28 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000080), 0x84) [ 2336.745097][T20092] bond311: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2336.785549][T18062] __nla_validate_parse: 5 callbacks suppressed [ 2336.785574][T18062] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2336.872767][ T91] bond248: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2336.926571][T18061] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2336.938463][T20092] bond311: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2337.049220][T18079] device bridge315 entered promiscuous mode [ 2337.059421][T18079] bond311: (slave vlan206): Enslaving as a backup interface with a down link 00:55:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2337.136543][T18076] device bridge255 entered promiscuous mode [ 2337.177446][T18076] bond248: (slave vlan158): Enslaving as a backup interface with a down link [ 2337.226097][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): bond248: link becomes ready [ 2337.246161][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): bond311: link becomes ready 00:55:29 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x0, 0x10}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:55:29 executing program 4: r0 = socket$inet6(0x1c, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x1c, 0x1c}, 0x1c) 00:55:29 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000300)={0x10, 0x2}, 0x10) listen(r1, 0x5) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x901, &(0x7f0000000040)=ANY=[@ANYBLOB="ff00020001"], 0xc) 00:55:29 executing program 3: r0 = socket$inet6(0x1c, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, &(0x7f0000000080)={@mcast2}, 0x14) 00:55:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2337.470726][T14514] bond286: (slave vlan181): failed to get link speed/duplex [ 2337.540157][T18155] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:55:29 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000180), 0xb) 00:55:29 executing program 3: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendmsg(r0, &(0x7f0000002680)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, &(0x7f00000022c0)=[{&(0x7f0000000080)="09fe0703782a51da583180854555d6795aa033ed5732bfcc7bbfa4b95732a372b4a074ebe4b5bbee061350f3db05f0494784da1758cd1cedf6e2946df8cbb53801df638072212e945068e127b0cd1781cf30d148366f91f1c61eab91c5", 0x5d}], 0x1, &(0x7f0000002300)=[{0xc}], 0xc}, 0x0) 00:55:29 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x65) [ 2337.821411][T18155] 8021q: adding VLAN 0 to HW filter on device bond312 [ 2337.956459][T18160] bond312: (slave gretap230): Enslaving as a backup interface with an up link 00:55:30 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000080)={0x10, 0x2}, 0x10) [ 2338.032011][T20092] bond312: Warning: No 802.3ad response from the link partner for any adapters in the bond 00:55:30 executing program 3: r0 = socket(0x2, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="14024dd04e"], 0x10, 0x0}, 0x0) sendto$unix(r0, 0x0, 0x0, 0x184, &(0x7f00000004c0)=ANY=[], 0xa) [ 2338.172576][T18161] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:55:30 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c}, 0x1c) [ 2338.307746][T18163] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2338.395451][T18169] device bridge316 entered promiscuous mode [ 2338.480176][T18169] bond312: (slave vlan207): Enslaving as a backup interface with a down link [ 2338.499709][T18186] batman_adv: Cannot find parent device 00:55:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2338.574395][T18201] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2338.656169][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): bond312: link becomes ready 00:55:30 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x0, 0x11}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:55:30 executing program 1: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendmsg(r0, &(0x7f0000002680)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) 00:55:30 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f0000000140)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000001680)=[{0xc}, {0xc}], 0x18}, 0x0) 00:55:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_int(r0, 0xffff, 0x1011, 0x0, &(0x7f0000000040)) [ 2338.813402][T18258] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2339.062394][T18258] 8021q: adding VLAN 0 to HW filter on device bond313 [ 2339.196309][T18263] bond313: (slave gretap231): Enslaving as a backup interface with an up link [ 2339.241075][T14285] net_ratelimit: 3 callbacks suppressed [ 2339.241096][T14285] bond313: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2339.281941][T18270] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2339.389388][T18297] device bridge317 entered promiscuous mode [ 2339.419863][T18297] bond313: (slave vlan208): Enslaving as a backup interface with a down link [ 2339.435954][ T9] bond313: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2339.484233][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): bond313: link becomes ready [ 2339.615227][T14285] bond282: (slave vlan177): failed to get link speed/duplex 00:55:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:31 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x80000000}, 0x14) 00:55:31 executing program 1: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, &(0x7f0000001080)={@remote={0xfe, 0x80, '\x00', 0x0}}, 0x14) 00:55:31 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f0000000080)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 00:55:31 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x0, 0x60}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:55:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2339.787940][T18329] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2339.902947][T18329] 8021q: adding VLAN 0 to HW filter on device bond314 00:55:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_int(r0, 0xffff, 0x1002, 0x0, &(0x7f0000000040)) 00:55:32 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)='\"', 0x1}], 0x1, &(0x7f0000001240)=[@sndrcv={0x2c}], 0x2c}, 0x0) [ 2340.039472][T18334] bond314: (slave gretap232): Enslaving as a backup interface with an up link [ 2340.050655][T20503] bond314: Warning: No 802.3ad response from the link partner for any adapters in the bond 00:55:32 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[{0xc}], 0xc}, 0x0) [ 2340.126628][T18339] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2340.264254][T18339] 8021q: adding VLAN 0 to HW filter on device bond249 [ 2340.276399][T20092] bond314: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2340.323518][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): bond314: link becomes ready 00:55:32 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f0000000640)={&(0x7f0000000040)=@in6={0x1c, 0x1c}, 0x1c, 0x0}, 0x0) recvmsg(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x0) shutdown(r0, 0x0) 00:55:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0xd, &(0x7f0000000000)={@broadcast}, 0xc) [ 2340.415424][T18347] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:55:32 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x10, &(0x7f0000000000)=0xffffffff, 0x4) [ 2340.656906][T18373] bond249: (slave gretap171): Enslaving as a backup interface with an up link [ 2340.732820][T20499] bond249: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2340.759015][T18329] device bridge318 entered promiscuous mode [ 2340.788799][T18329] bond314: (slave vlan209): Enslaving as a backup interface with a down link [ 2340.887179][T18378] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2340.923782][T14285] bond249: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2341.005076][T18381] device bridge257 entered promiscuous mode [ 2341.029568][T18381] bond249: (slave vlan160): Enslaving as a backup interface with a down link [ 2341.143820][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): bond249: link becomes ready 00:55:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd8, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0xd8}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:33 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 00:55:33 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x103, &(0x7f0000000240)={0x0, 0x2, "abe6"}, &(0x7f0000000080)=0xa) 00:55:33 executing program 4: r0 = socket$inet6(0x1c, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x1c, 0x1c, 0x1}, 0x1c) 00:55:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:33 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) [ 2341.383390][T18458] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:55:33 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:55:33 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x2}, 0x10) 00:55:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(r0, &(0x7f0000000040)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) [ 2341.670157][T18458] 8021q: adding VLAN 0 to HW filter on device bond315 [ 2341.726079][T18464] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:55:33 executing program 4: r0 = socket(0x2, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="14024d"], 0x10, 0x0}, 0x0) 00:55:33 executing program 1: r0 = socket$inet6(0x1c, 0x20000003, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x1c, 0x1c}, 0x1c) 00:55:33 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_mreq(r0, 0x0, 0x8, 0x0, &(0x7f00000000c0)) [ 2341.977296][T18464] 8021q: adding VLAN 0 to HW filter on device bond250 [ 2342.133524][T18463] bond315: (slave gretap233): Enslaving as a backup interface with an up link [ 2342.178971][ T91] bond315: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2342.227807][ T9] bond250: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2342.270070][T18466] bond250: (slave gretap172): Enslaving as an active interface with an up link [ 2342.289962][T18468] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2342.329625][T18469] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2342.371650][ T9] bond315: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2342.460322][T18476] device bridge319 entered promiscuous mode [ 2342.489556][T18476] bond315: (slave vlan210): Enslaving as a backup interface with a down link [ 2342.516886][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): bond315: link becomes ready [ 2342.549026][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): bond250: link becomes ready 00:55:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd8, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0xd8}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:34 executing program 3: r0 = socket$inet6(0x1c, 0x20000003, 0x0) sendto$inet6(r0, 0x0, 0x4, 0x0, &(0x7f00000000c0)={0x1c, 0x1c}, 0x1c) 00:55:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000001440)={&(0x7f0000000000)=@in, 0x10, &(0x7f0000000400)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1}, 0x0) shutdown(r0, 0x0) 00:55:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(r0, &(0x7f0000001780)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) 00:55:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:34 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x0, 0x0, 0x3}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) [ 2342.733391][T18577] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:55:34 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000080)={0x0, 0xb00}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 00:55:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(r0, &(0x7f0000001780)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f00000012c0)=[{&(0x7f0000000080)="799ce5f45661a0", 0x7}, {&(0x7f00000000c0)="5ff2ff", 0x3}, {&(0x7f0000000100)="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", 0xfab}], 0x3}, 0x0) 00:55:34 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0xffffffffffffffd3, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000280)="b2d2192dbe42f422f51046d0f1b1ac96333e6e55f368497db7de9bd786f819a8eb9de326b77e876bbbe324f66d9e2cc96e48ebceda1a53727441088e1a11f0204706c6f3ad03fc2052b77fc5fbf1bf9e9b62190899f0a68819e6e4c0be45c79b17558b20c254dbf484883b8e7e58412e874a4d49f767c0ce2b152fe8458a2a6123cc82698aaa1972da43ac997260fc4064320fbbb043ae6dd3d07bff5c17275abb1e25d5d62a4ece8bd3a2dfbec09c1b83855606ae8dea8b8adc42c0a02a1872de54dc23bfabdcbf71ec8914fc", 0xcd}, {&(0x7f0000000380)="0e1c9838b909b567cddbd675c49345af3ac3c5995e3f7042498b5e44484135cb07a1305be4f85b76661a", 0x2a}, {&(0x7f00000003c0)="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", 0xa12}], 0x3, &(0x7f00000017c0)=[@sndrcv={0x2c}], 0x2c}, 0x0) [ 2342.973498][T18577] 8021q: adding VLAN 0 to HW filter on device bond316 [ 2343.018195][T18581] bond316: (slave gretap234): Enslaving as an active interface with an up link [ 2343.036295][T18612] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:55:35 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000400), 0x88) 00:55:35 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreqn(r0, 0x0, 0x9, 0x0, &(0x7f0000000200)) 00:55:35 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f0000000140), &(0x7f00000000c0)=0x8) [ 2343.160380][T18586] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2343.316672][T18586] 8021q: adding VLAN 0 to HW filter on device bond251 [ 2343.406246][T18611] bond251: (slave gretap173): Enslaving as a backup interface with an up link [ 2343.416875][ T9302] IPv6: ADDRCONF(NETDEV_CHANGE): bond316: link becomes ready [ 2343.468608][ T9302] IPv6: ADDRCONF(NETDEV_CHANGE): bond251: link becomes ready [ 2343.519163][T18635] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 00:55:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd8, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0xd8}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:35 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f0000000640)={&(0x7f0000000040)=@in6={0x1c, 0x1c}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000080)="81", 0x1}], 0x1}, 0x0) 00:55:35 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x0, 0x0, 0x4}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:55:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(r0, &(0x7f0000001780)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0xc) 00:55:35 executing program 3: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@in6={0x1c, 0x1c, 0x1}, 0x1c) [ 2343.987187][T18706] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2344.065441][ T3248] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.071852][ T3248] ieee802154 phy1 wpan1: encryption failed: -22 00:55:36 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000040), &(0x7f0000000100)=0x98) 00:55:36 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x0, 0x0, 0x5}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:55:36 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x22, &(0x7f0000000080), &(0x7f0000000340)=0xb) 00:55:36 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000040)="ba", 0x1}], 0x1, &(0x7f0000001640)=[@authinfo={0x10}, @prinfo={0x14}, @authinfo={0x10}], 0x34}, 0x0) 00:55:36 executing program 3: r0 = socket$inet6(0x1c, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) [ 2344.384445][T18706] 8021q: adding VLAN 0 to HW filter on device bond317 00:55:36 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x80000000, 0x200}, 0x10) [ 2344.454321][T18708] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2344.582718][T18708] 8021q: adding VLAN 0 to HW filter on device bond252 [ 2344.639978][T18711] bond252: (slave gretap174): Enslaving as a backup interface with an up link [ 2344.692139][T14285] net_ratelimit: 8 callbacks suppressed [ 2344.692156][T14285] bond252: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2344.743244][T18712] bond317: (slave gretap235): Enslaving as a backup interface with an up link [ 2344.766466][ T2441] bond317: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2344.821657][T18715] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2344.832476][ T9] bond252: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2344.898756][T18714] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2344.930606][T20092] bond317: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2344.946940][T18722] device bridge321 entered promiscuous mode [ 2344.998287][T18722] bond317: (slave vlan212): Enslaving as a backup interface with a down link [ 2345.073606][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): bond317: link becomes ready [ 2345.096436][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): bond252: link becomes ready 00:55:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:37 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="17", 0x1}], 0x1, &(0x7f00000001c0)=[@prinfo={0x14, 0x84, 0x7, {0x2}}], 0x14}, 0x0) 00:55:37 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0xfffffffffffffd91, 0x2}, 0x10) sendmsg(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000800)="fc", 0x1}], 0x1}, 0x0) 00:55:37 executing program 1: r0 = socket$inet6(0x1c, 0x20000003, 0x0) sendmsg(r0, &(0x7f0000000a80)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=[{0xc}], 0xc}, 0x0) 00:55:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2345.240021][T18824] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:55:37 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x0, 0x0, 0x6}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:55:37 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x20, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 2345.368156][T18824] 8021q: adding VLAN 0 to HW filter on device bond318 00:55:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(r0, &(0x7f0000001780)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f00000012c0)=[{&(0x7f0000000100)="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", 0xfb5}], 0x1}, 0x0) 00:55:37 executing program 3: socket$inet6(0x1c, 0x20000003, 0x0) 00:55:37 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x72) [ 2345.627480][T18829] bond318: (slave gretap236): Enslaving as a backup interface with an up link 00:55:37 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f0000000640)={&(0x7f0000000040)=@in6={0x1c, 0x1c}, 0x1c, 0x0}, 0x0) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="15", 0x1}], 0x1, &(0x7f00000004c0)=[{0xc}, {0xc}], 0x18}, 0x0) [ 2345.698279][T18864] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:55:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_int(r0, 0xffff, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 2345.761934][T18824] device bridge322 entered promiscuous mode [ 2345.762654][T20503] bond318: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2345.794217][T18824] bond318: (slave vlan213): Enslaving as a backup interface with a down link [ 2345.838341][T18868] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2345.965582][T18868] 8021q: adding VLAN 0 to HW filter on device bond253 [ 2345.993876][T20092] bond318: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2346.093337][T18874] bond253: (slave gretap175): Enslaving as a backup interface with an up link [ 2346.103465][T18877] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2346.164810][T25832] IPv6: ADDRCONF(NETDEV_CHANGE): bond318: link becomes ready [ 2346.243954][T20092] bond253: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2346.273524][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): bond253: link becomes ready 00:55:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:38 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x900, &(0x7f0000000600), 0x8) 00:55:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:38 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000300)={0x10, 0x2}, 0x10) listen(r1, 0x5) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x901, &(0x7f0000000040)={0x0, 0xff, 0x3, [0x0, 0x0, 0x0]}, 0xe) 00:55:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_int(r0, 0xffff, 0x1008, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:55:38 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x0, 0x0, 0x7}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) [ 2346.401841][T18948] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:55:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f00000000c0), 0x4) 00:55:38 executing program 3: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1}, 0x40082) 00:55:38 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x4e}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 2346.579790][T14629] bond253: Warning: No 802.3ad response from the link partner for any adapters in the bond 00:55:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r0, 0xffff, 0x4000, 0x0, 0x0) [ 2346.645172][T18948] 8021q: adding VLAN 0 to HW filter on device bond319 00:55:38 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000080)=@in={0x10, 0x2}, 0x10) [ 2346.776677][T18951] bond319: (slave gretap237): Enslaving as a backup interface with an up link 00:55:38 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f0000000000), &(0x7f0000000180)=0x98) [ 2346.871107][T18955] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2346.905711][T14285] bond319: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2346.982421][T18954] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2347.117778][ T2441] bond319: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2347.180072][T18954] 8021q: adding VLAN 0 to HW filter on device bond254 [ 2347.258155][T18992] device bridge323 entered promiscuous mode [ 2347.308369][T18992] bond319: (slave vlan214): Enslaving as a backup interface with a down link [ 2347.432271][T18993] bond254: (slave gretap176): Enslaving as a backup interface with an up link [ 2347.444113][T18999] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2347.580519][T25832] IPv6: ADDRCONF(NETDEV_CHANGE): bond319: link becomes ready [ 2347.595872][T25832] IPv6: ADDRCONF(NETDEV_CHANGE): bond254: link becomes ready 00:55:39 executing program 3: r0 = socket$inet6(0x1c, 0x5, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x1c, 0x1c}, 0x1c) 00:55:39 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[{0x8c, 0x84, 0x2, "94e7b425e52335e82550705c61cd55fb2ac4b8e2b69f79045ccea500877bf94e026a917ac503aaf22a86334c685c5e1e561c08d1673d3a4e627ba6aa539d72a0f01388adb052dee832d6bdaad536d485bf28c0e93eece7f50bc33cbf19bd83c224bd522ec50de06ec7233c7391c63148dbab1eeeb2a890e93538b6a96e"}], 0x8c}, 0x0) 00:55:39 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000080)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 00:55:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:39 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x0, 0x0, 0x8}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) [ 2347.820047][T19072] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:55:39 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[{0xc}, {0xc}], 0x18}, 0x0) 00:55:39 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@sndrcv={0x2c}], 0x2c}, 0x0) 00:55:40 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f0000000200)={0x0, 0x2}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x0, 0x1, "f2"}, 0x9) 00:55:40 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) select(0x40, &(0x7f0000000980)={0x8}, &(0x7f00000009c0)={0x4}, 0x0, 0x0) [ 2348.054962][T19072] 8021q: adding VLAN 0 to HW filter on device bond320 00:55:40 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000180)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f00000001c0), 0x88) 00:55:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x9, &(0x7f0000000000)={@broadcast, @multicast1}, 0xc) [ 2348.282363][T19080] bond320: (slave gretap238): Enslaving as a backup interface with an up link 00:55:40 executing program 4: r0 = socket$inet6(0x1c, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x1c, 0x1c}, 0x1c) [ 2348.363221][T19083] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:55:40 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x0, 0x0, 0x9}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) [ 2348.479704][T19102] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:55:40 executing program 1: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x1c, 0x1c, 0x1}, 0x1c) [ 2348.748922][T19102] 8021q: adding VLAN 0 to HW filter on device bond255 [ 2348.865135][T19122] device bridge324 entered promiscuous mode [ 2348.922329][T19122] bond320: (slave vlan215): Enslaving as a backup interface with a down link [ 2349.004050][T19123] bond255: (slave gretap177): Enslaving as a backup interface with an up link [ 2349.035963][T19126] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2349.225631][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): bond320: link becomes ready [ 2349.239029][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): bond255: link becomes ready 00:55:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd8, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd8}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:41 executing program 3: poll(&(0x7f0000000000), 0x36, 0x0) 00:55:41 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@prinfo={0x14, 0x84, 0x7, {0xf}}], 0x14}, 0x0) 00:55:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(r0, &(0x7f0000001780)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) 00:55:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2349.429964][T19212] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:55:41 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x0, 0x0, 0xa}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) [ 2349.593613][T19212] 8021q: adding VLAN 0 to HW filter on device bond321 00:55:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x9, 0x0, 0x0) 00:55:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x3, &(0x7f0000000040)={@local={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}}, 0xc) 00:55:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x55, 0x0, 0x0) [ 2349.732074][T19215] bond321: (slave gretap239): Enslaving as a backup interface with an up link 00:55:41 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) [ 2349.811166][T19220] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2349.839880][T14622] net_ratelimit: 9 callbacks suppressed [ 2349.839899][T14622] bond321: Warning: No 802.3ad response from the link partner for any adapters in the bond 00:55:41 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000004c0)=@in6={0x1c, 0x1c, 0x1}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000080)="81", 0x1}], 0x1}, 0x0) [ 2349.902781][T19247] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:55:42 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0xffffffffffffffd3, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x901, &(0x7f0000000080)={0x0, 0x7ff, 0x1, [0x8]}, 0xa) [ 2350.117293][T20092] bond321: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2350.129455][T19247] 8021q: adding VLAN 0 to HW filter on device bond256 [ 2350.211206][T19252] device bridge325 entered promiscuous mode [ 2350.269759][T19252] bond321: (slave vlan216): Enslaving as a backup interface with a down link [ 2350.408143][T19256] bond256: (slave gretap178): Enslaving as a backup interface with an up link [ 2350.456226][T19262] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2350.500277][T20503] bond256: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2350.534657][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): bond321: link becomes ready [ 2350.551055][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): bond256: link becomes ready [ 2350.691611][T19331] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2350.710087][ T9] bond256: Warning: No 802.3ad response from the link partner for any adapters in the bond 00:55:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd8, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd8}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r0, 0xffff, 0x1018, &(0x7f0000000040), 0x4) 00:55:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[{0xc}], 0xc}, 0x0) 00:55:42 executing program 4: r0 = socket$inet6(0x1c, 0x20000003, 0x0) sendmsg(r0, &(0x7f00000009c0)={&(0x7f0000000080)=@un=@file={0xa}, 0xa, 0x0, 0x0, &(0x7f0000000580)=[{0xc}], 0xc}, 0x0) 00:55:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:42 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x0, 0x0, 0xb}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:55:42 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xe, &(0x7f0000000440), &(0x7f0000000640)=0x8) 00:55:42 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c) [ 2350.905788][T19331] 8021q: adding VLAN 0 to HW filter on device bond322 00:55:42 executing program 4: r0 = socket$inet6(0x1c, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x1c, 0x1c}, 0x1c) 00:55:43 executing program 1: poll(&(0x7f0000000080)=[{}], 0x6b8a8ccd2514a301, 0xffffffff) [ 2351.158152][T19333] bond322: (slave gretap240): Enslaving as a backup interface with an up link [ 2351.200102][T19365] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2351.210566][T20092] bond322: Warning: No 802.3ad response from the link partner for any adapters in the bond 00:55:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) r1 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x8000000) getsockopt$inet_mreq(r1, 0x0, 0x0, &(0x7f0000000180)={@remote, @multicast1}, &(0x7f00000001c0)=0x8) sendmsg(r0, &(0x7f0000001780)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) 00:55:43 executing program 3: r0 = socket$inet6(0x1c, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000100)="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", 0x5ad, 0x0, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) [ 2351.315050][T19365] 8021q: adding VLAN 0 to HW filter on device bond257 [ 2351.344706][T19338] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2351.428215][T19337] bond257: (slave gretap179): Enslaving as a backup interface with an up link [ 2351.474037][T19373] device bridge326 entered promiscuous mode [ 2351.498768][T20503] bond322: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2351.530149][T14629] bond257: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2351.566243][T19373] bond322: (slave vlan217): Enslaving as a backup interface with a down link [ 2351.665443][T19376] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2351.685633][ T9] bond257: Warning: No 802.3ad response from the link partner for any adapters in the bond 00:55:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd8, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd8}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:43 executing program 1: socketpair(0x1, 0x2, 0x0, &(0x7f0000001b00)) 00:55:43 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f00000002c0)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0}, 0x100) [ 2351.801605][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): bond322: link becomes ready [ 2351.823948][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): bond257: link becomes ready 00:55:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:43 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x4, 0x0, 0x0) [ 2352.030201][T14285] bond286: (slave vlan181): failed to get link speed/duplex 00:55:44 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x0, 0x0, 0xf}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) [ 2352.109559][T19457] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:55:44 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) sendmsg(r0, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10, 0x1}], 0x10}, 0x0) 00:55:44 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f00000023c0)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0xa, 0x0}, 0x0) 00:55:44 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001400)={&(0x7f00000002c0)=@abs, 0x8, 0x0}, 0x0) [ 2352.367199][T19457] 8021q: adding VLAN 0 to HW filter on device bond258 [ 2352.435425][T19458] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:55:44 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f00000023c0)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0xa, 0x0}, 0xd) 00:55:44 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x0, 0x0, 0x900) 00:55:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(r0, &(0x7f0000001780)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f00000012c0)=[{&(0x7f0000000080)="799ce5f45661a0eb2ca9e2a2a9f3e5", 0xf}, {&(0x7f00000000c0)="5ff2ff", 0x3}, {&(0x7f0000000100)="adbea9ec5c1d769ccd14313fa5e7cf0117378afbce6c75f1f4d8be19fc49c3a3c8ac2ce1cbf3f4f257bf4657290ca3e7d18a4324c028aa58489c3a4477406ad791432d8fe78c9338e494a554aa2fb7e3771f589732b269896dbbb1f0be4a70953f811a22b9cc11f1ba696b4fae6ec2819339bc1ef0d195096c339d091bc90e6f751034e3de8a1c59832c72133b9234ac1eef0f03b4dbcd0bfb55a4472b154a2375c8b10f25755d7597c0ea5fcd17a8fe1b1954cb25b077b6238d6284805fa79e2a2d0daa9644c47e6ee4f8ff61fdb587cd92577e369b049b5256b5ad8cd744139539bdc849f3cca727ad6e1987ba14e908cae01b45e62fb0738d9ae0e6906eeac945b629ef32d4d6b7ceb4b6ce75224468c1b1e72037a88b2b7d8c34bf4cecd0dd10747fb0bed34f9440df3a30fb1b5c7b642700cd0463497ceba4ae7b723908868aa4ce0ba21d4cc77a4a49c0dc2af55a61c4e9b015501a8cbb0b75b606135fd34942d08b68c10ee81737ecbe1ed67d77b9888a6acf5cdaf5ffda0ce9fb0932fa54695802fa06f9434ca02c15fff803e8dd09cbefca78dc3ff79eaad0522c308496bc47986b0f612cd00b36606456f2285051686211ecb4987cdbc4f3b4c7f77b14e9c5b00d6cd1645595e3ea4e1ec28b788c9cd53284fcc742932d974d9c56672edf297a05d3aba3048c51b90b2374aefe4daa11d16bc02ffdfee494696f203dd3ad673ecfce4377609fe432c447d637ee8c031a5588b692e1f509f8ba5086ed26bb57dabc2fd34881c021c3e830ece3fb23801d5ab616df17ecb8f4f5248a038d0c06217914dde562e0fb101c5d65b2682d4ec2f098e94f276d4ad09470d8b3034d210727b11d2ebefab05d86082b965e45113d015ab5e7a730343681c19e29a49b537e5ec2b39a3b5704188ce2dabd3e792981ac524f967d90186d80d68a46156cf05883025c70e54c49da8736a44fdc2eeef902f57c1cdec1c980d0fa957343720b347403a71e04cb8932b6365a303833da974616d904025fb0acf9bd94d2bf5b6a26f18b08283a55cfbfccfaba45773193054811ce01484bb866032e983d5f0e72206f4703811a5cccfb3d678a39919ed218b685f2d0dae51f44da63710345992348dfd3f79a8ae05607ae421d1944a5f1f2df58822afe2e4df908fcc526a0c36c73e902ddc44d30747308de2d55e3a852ed5029886a8043c68b7e0627aa69921d8096c74fb804dd3bbff2d9d89965eb6e58afb2dc9abbf3bafd4956e53c0bddf6d01051eff6c7e2603051de3c0250a46958e2a83f9e3eead37652956865620d85cc9ef919cae0c751f4977531ec0aff1c05a89d8f177b5a0250ede709ee92acba57ba11de9453ca7fe7564d714ffccedcdb914ef8a7f910b4843be930ae9a9136d49e405a25a52f75afa5fca571db8a4b349ecdcaffc7e42521ecfc7e5102becafe14a93d9f0c7eac1cbcf557e88fc871840c24e0805dde5080c234e29f23574fe08487ea4765bdcf6d639ceeea8fe16e55ccdb9a3a2eb778a4a304a94bf86e20f7c58bfb86b74fe7581c7caac3734ad53edfaa31dbc232c4dde2281c00024be721bb94a1e90a65758bd3543d15376cad72094c5931ad0ed6f60f79c6ff55bcc62a8883fb5e5bddb7a22d3639e15f8cfb5186263106e280d65654dce1ca0f57c5e26dbf8da17e39fbefd4b747d193b0cf7664874941372a98e564702935392b0643b7c5cc4e122cb78858197e6833a3eabbb270f886c4880000a9f57716ea504c3b9e44e934fefd29416616a66f27c312e227eed6d8b6bd9cf5862f43baddcce3ce37fb3eb04c11bfad58904c5a7ff1b8ccf491c51c60d6ff7c1752699b5a9afde587b342e54ce61107b71c641bd2feef96f65e8ceca7166ac92bf76fad46f90760e0d404d58ffd77459e5d4a207c8b746908948c44d26fb5eb87b5ba0ad2e66b4586e32c4b388e2d01446c62ae9fd4639da6ad657cce29a94fee445783ae5ab48c4500e7e412041584382c920ba547afa6820aadf98ca8d6bf9ff25cdaa5cc00e55364ea7f3656f3df358231c4736244160cf62a0ee445c57af5fb62b063b031653db4404d1e73ea8bbe3d0a8e21a884b5f6935f8741cc2901df3e5589462974fa0da166bf6825b852dee5f7c7ba53a92ee3dee2281fd1747bd6cf7c097cad90b0dc41b8b79f08b1346ab81c4dbafad28b6cc613ba0a4f61ad94627ede073a4972ded22519e6dfbe56ca88a1666937768e34805a3bf5016b4df0e8cbfeac08d28ed65184311b1cc60fc6d0684b38912ea62eabd4ccb9b51f63421daf4dde468a8913463398c27e8c72e1df9d49d2436a77696763892a880ff035270c8605efb5e82491f5cb399e970decdc2fe7641daf8168e03a159b8ba8b889e1788b7ac63e75317e9064487401f33c49b6d0257a0bdf8f853fadb1fa33d6085282330f5a83ffabaddf34735ad098ce33119a1d10223ab296e5ed5bf569fa04853d5f4be7d20d38f1f2bb64f86f5638191fb516417afa213ea8493f3f7c0d2fbfb0071f803616ee717f61621ac048331ea00fb94b23f5382582efe237ed16a494ed5579c03e8951391425e6c2d8bac612cab182f1f5fbe3d758eaa2e7df674b419f8cb6b67214d21db459391f42d2639757f3c2beebfa7cad293aefb7124d3f098b46181b5f65a16c5b20dd796377f48e772f3e96137e1bd962936ec2faa3c44b7af7e4cf28f12bab4caf6f3b8fc60d9a42de84f585ac46b17d9ce2a467c3045b8a75e06b7e90566cb5ca1213d04716d302f416ef2f4709bdc262d4fe6089a9f65488b690c092c2bbd1773cdefc78426a00210873f72aad1029ad5e1da9bedd26b6c0f4d29d683b997af7f1717aa1269791e2a7fb8e5518e5eb7e643bb80e4895f4c4821626ce5f0cbdde9f331fb18f608423696396420c187f64a72795b64396cf04bfeab060a97873a062ccc2ac54ae230ffefe75341db1c156f210c4b7f81c9c10dbf6ec039d4a97c10f5b3abe4d430959e05fe556f2b545d42bad9b19a1e0a0d3a0536fc73b3464c943a0eb7d055b574540eba7cc2cb42766703f26f7da726d7f698709f25140f249732c18c52c66b1e42e5a5d5d7286e742b0db8880aed899efe756835cfdcae298b9a8b42e946da6c2060e11ac3b2a396f8031771264c521e13ba178428d3d5585e161714168464026cb200829fa2644fb004ccf319f4ff10610bd5b1cbba2dc634bf62a959b0d0d1adea453054976af16829a2a03839e220ba8e670bfd4a94a34f3652ff458fe651a3f8df5b5539eba6fd9d30927041294947eed6341f0ec4cf3be77c064ea5530ec14e22563f78e65ce96cbc6c732910d6ef7d00bae26106c264f6266fdd117d1b25255f10d424593d7008b686a7efd4a29d91676d3c87217a7efecf5ce3842ef5a1ec448a7edbd24460130b78f11f3b1d1067e75f80540d90e2948f9ec0aa424ef715e83edc9a92b953153936307cbf2679ba16f307a27e02162f3adec1706cc5cadd35100092705d150ccf6f3381fb3bfde6673b319964b16e8e3a96ba0dcf45f774f1f931bf0d0c347db05368ce33e24f6f41234d547d5b4378f12dccce22d75fc9669a1cd393fbe08b3b92ef12582ee865c34aa72ff41c12a52e140d7859339fad82d797c960c1f3353eed8ebac861baaff20b8712515f64dd54c4c9204349c07751810521a99ab1068369e8aa01524bfb14a60fd72855640106ded5ec374b46985262394118ed0620770af92c5db53c87823501a0024330a1f3df8cb0221b48d705983ec48d7becf84a239640746af44cf25f11f605e8613c3dd0b3e3402afcf7cb293a9c697cc1eed00f109a6b5ffe65d622037606b3af06c11e0a61125d2c780f862e5c0fb0bcefd0c4fccb8d96daf1c9a8c356ef048723c49fb4f9065f3aa85339f6740fdbb550fdb83de0e5b5de7814171d40e3943f060a0329c3ec86d7e545184babd8a868fbf10c1b565d115cc80f2676cb0d2f967bce24d9c98e889fd980870d5ab6ec1f3a1654606f866cfda721bbbb6d11ced80a494571f2bd3523bb3291adeb62116421d07ec9b830b445a6292d4b32e7de5a13afed1ab98bbf3c912b793d6ac8808f06a13f08c81ce1d9ada44faccdf45823691fcc9adf7df1be1be2e77efd46ffe061446410b5f979fa2f0b1496f393b963590e88c8f95f45b9169331c7f852ff452da8a0f9c4ba2f980da2ad8a315ece62e84ead108da580755d86aa466ca376bc659d690def13affe93d54c0d4fc67eaf7c4cc4491bc12f831f7c4884a59b5f17929cc5aef00616b711f7d38e0414e26044efce52802fdcdbc6a6e0a1bffa46a9684c4a8fe8fa5630eed84ccac9adeec793dac27c881c17fe81d80fc8f718123c55daf1a6d4f57c6f0704c210720c257a59d0c0623fb58de1efa0637ab879564c886db213a5d4fca474ee7fe61b46a58a655fad3cec9f807dbc4045f0ef3ec85995a69eff72e87424ffdbd2993186db35bd2abeb7620bbc9f5c853c090d8fe78d5256ae87634128a1a0176a09d04cabdd45260d9463ffc9e15ba01036309e44bfe6c2f732da4bab30ddcca308f05dc6f05c0c8e9d311000c7ea6febeea31e64eee9f337d97e42e207f792884a48bfd418b0351a193ffa6c76f43c04008acbb376f9afe314cd86c57c856e8e4e8a8dfc9b556350a8ef1b030e724b227ff780d6d130440058bdd02e42a1f8ba66a863a94d7a8646bb923626ce306506a8ca7a5adea868c78e0a2ef709c83aab56b7fb9f45f0e59ffaad242014b2310b36204dc17668121eb147f583f60606bdb45e5cb85c469b8785f02cace1e98d3a1bbeb3bfa18b617af39a0dfc487ce2b700fe0ec53427ba80587dfb884db586d92d502d96154c019b2e4ddef953c10830a92adc57f1d6a7c8a134a874e3e431c5556be1b0cdadb3ffc5c51835700a78fb532e1ee8586fd3edb0be99883c6c470a1dc180eccda18b0546ba22e9be7c3a0ca9d2fb31ce0ea69e17477ff0fdfaef0175814890455d1455c002a9f48b8208c30794342f1c857278dc64034fec1fc736869179d32a34066d25631eb300b11fd553ceb5f3cf1fed549dfe4e558bc95c3f171a2f100edad38435cf3224caa37c62567f4929d72b6cb1d35f29b2068610bf40e2071331e2b6848000c3eb420c95cf1f4b12ae066626649ee124c15a9cf6b87dae95062098911b6070566d9bca3647f3c9ad8b537c4dddf31fa20c7e207cabbe29103b1b1f1951554dfa5a8f5277a75b397597fff61c63cad3cbb0e9042472f9228118e05f88cb7e76314ce9d25427e0ac117c162d4af0dc555585f1b05079da81e6787e0efec3509932ce88183ee03b94acb699f85042774266b24643b8331a39ca889414bd3df1687011a11554e8e1c23d15d57b6ab8b9bfdc8b503ba24f0395d8f405df7ca553280f441da8b2c026e4587a2f26b2a3ae3573e69d709d0e787233a4ddb257c6c2d0d0565d1e51a687c6ee47c033f4ecc4302bb928f6a78ced1222c013770e717f6a24963775145f39deee9278a5336f73ab03c25d8d3f05b6a021e3ee5a667f227f0f676343475d60d147e270a6ef4cbda6a7249df0c0df127e247c23bc33dbd81206bbd4a8cbd363b9c8563c00af140e897e0f1cc06dbdc798fafc000204cdbbb067b1c6efb1e8d145daed6f8be70ebbab131326770c7fe6a45bb2f777984e8aea419df2d4775167e9472a90389f47415c2170840ef15c30593ac1f2ab837e80464bca735e84516de691cc5f3bed5e62a9ed63f5e2eaba44c3730ab3996b207dc1f54", 0x1000}, {&(0x7f0000001100)="6f56d128e3153e9cd3d63fca03ba064a2c091b7d1261bba3c096dc12f3252c77d46e173a401b384407f1e42d1de413c2fc737c0573394e489b4ff6e24b74b21b9af1121313f4585ffeae582aa00a60eab9af0b3a208d68f0258d2825e14737d5282d47c93e103dbaef47d70c48b30bf826e678ff156bd443b251bffdb61c81a63175e5b97fba7906e173b01c41d31e5580cc", 0x92}, {&(0x7f00000011c0)="a38e2952f14c264b01ba28f7cf8ea370162367693aed071c25ebd983f87764bfb85f0a7578f1208aedd6ccf0039842fbf3f45558b6", 0x35}], 0x5}, 0x0) [ 2352.683565][T19458] 8021q: adding VLAN 0 to HW filter on device bond323 [ 2352.838077][T19462] bond323: (slave gretap241): Enslaving as a backup interface with an up link [ 2352.926592][T14285] bond323: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2352.961826][T19463] bond258: (slave gretap180): Enslaving as a backup interface with an up link [ 2353.016730][T19466] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2353.055678][T19467] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 00:55:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:45 executing program 3: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) 00:55:45 executing program 1: syz_emit_ethernet(0x7e, &(0x7f0000000000)={@dev, @random="8cb9f81b482f", @void, {@ipv4={0x800, @icmp={{0x15, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast, @broadcast, {[@rr={0x7, 0x27, 0x0, [@loopback, @empty, @broadcast, @private, @private, @remote, @empty, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @cipso={0x86, 0x15, 0x0, [{0x0, 0x9, "5e4aa8c50809d9"}, {0x0, 0x6, 'Q0~:'}]}]}}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @broadcast}}}}}}, 0x0) [ 2353.183032][T19493] device bridge327 entered promiscuous mode [ 2353.214227][T19493] bond323: (slave vlan218): Enslaving as a backup interface with a down link 00:55:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x34, 0x9, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}}, 0x0) [ 2353.291925][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): bond258: link becomes ready [ 2353.325641][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): bond323: link becomes ready 00:55:45 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x0, 0x0, 0x10}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:55:45 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 00:55:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv4_getnetconf={0x54, 0x52, 0x603}, 0x54}}, 0x0) [ 2353.679045][T19574] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:55:45 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 00:55:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4e23, @private}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x36}]}}}], 0x18}}], 0x1, 0x0) [ 2353.918591][T19574] 8021q: adding VLAN 0 to HW filter on device bond259 00:55:46 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f00000000c0)) 00:55:46 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4c}}, &(0x7f0000000b80)='syzkaller\x00', 0x5, 0xfa, &(0x7f0000000bc0)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 2354.004020][T19575] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2354.115245][T19575] 8021q: adding VLAN 0 to HW filter on device bond324 [ 2354.146909][T19576] bond259: (slave gretap181): Enslaving as a backup interface with an up link [ 2354.156711][T19578] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2354.233947][T19580] bond324: (slave gretap242): Enslaving as a backup interface with an up link [ 2354.244107][T19581] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:55:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000010c0)) [ 2354.483146][T19588] device bridge328 entered promiscuous mode [ 2354.520813][T19588] bond324: (slave vlan219): Enslaving as a backup interface with a down link [ 2354.583419][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): bond259: link becomes ready [ 2354.607258][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): bond324: link becomes ready 00:55:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv4_getnetconf={0x54, 0x52, 0x603}, 0x54}}, 0x0) 00:55:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) [ 2354.744852][T19681] batman_adv: Cannot find parent device [ 2354.883642][T19680] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:55:46 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x0, 0x0, 0x11}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:55:47 executing program 3: socketpair(0x2d, 0x0, 0x0, &(0x7f0000000040)) 00:55:47 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x1, &(0x7f0000000380)=@raw=[@call], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:55:47 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_BINDTODEVICE(r0, 0x29, 0x5, 0x0, 0x7) [ 2355.149252][T19680] 8021q: adding VLAN 0 to HW filter on device bond260 [ 2355.216836][T19686] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2355.326891][T19693] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:55:47 executing program 3: setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000100)=@gcm_256={{}, "a1f32f349d383e9f", "a2774c8af561e3186b8244e13de74ce436242c507913d1f844dc988d9e2dd144", "6f419b7b", "07562de6d5bf522d"}, 0x38) pipe(&(0x7f0000000e80)) 00:55:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv4_getnetconf={0x54, 0x52, 0x603}, 0x54}}, 0x0) 00:55:47 executing program 1: socket(0x60, 0x0, 0x0) [ 2355.561026][T19693] 8021q: adding VLAN 0 to HW filter on device bond325 [ 2355.736505][T19696] bond325: (slave gretap243): Enslaving as a backup interface with an up link [ 2355.799289][T14622] net_ratelimit: 7 callbacks suppressed [ 2355.799308][T14622] bond325: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2355.841178][T19718] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2355.934601][T19732] device bridge329 entered promiscuous mode [ 2355.947612][T19732] bond325: (slave vlan220): Enslaving as a backup interface with a down link [ 2355.977153][T14622] bond325: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2355.996393][T10830] IPv6: ADDRCONF(NETDEV_CHANGE): bond325: link becomes ready 00:55:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:48 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="97", 0x1}], 0x1, &(0x7f0000000280)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1f}}], 0x18}}], 0x1, 0x0) 00:55:48 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x0, 0x150, 0x150, 0x0, 0x0, 0x2d8, 0x238, 0x238, 0x2d8, 0x238, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x198, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'dummy0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x10001, 0x7}}}, @common=@inet=@hashlimit1={{0x58}, {'rose0\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "dfe51756f0c965b2586faa0f3e5581e1569ad768537c0ea113c930183a7d"}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) 00:55:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2356.063826][T20503] bond281: (slave vlan176): failed to get link speed/duplex 00:55:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv4_getnetconf={0x54, 0x52, 0x603}, 0x54}}, 0x0) 00:55:48 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x0, 0x0, 0x60}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) [ 2356.231666][T14629] bond281: (slave vlan176): failed to get link speed/duplex 00:55:48 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x7, 0x0, 'xts-camellia-asm\x00'}, 0x58) [ 2356.325365][T19800] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2356.415694][T19800] 8021q: adding VLAN 0 to HW filter on device bond326 [ 2356.428770][T19801] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:55:48 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x9b6}, 0x40) [ 2356.528180][T19801] 8021q: adding VLAN 0 to HW filter on device bond261 00:55:48 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) writev(r0, &(0x7f00000010c0)=[{0x0}, {&(0x7f0000000d80)="6a73fdb4a844e0ce337c385cfa01a2", 0xf}, {&(0x7f0000000dc0)="aa", 0x1}], 0x3) 00:55:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001300)={&(0x7f0000000140)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_NODE={0xbc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "7fa687ae376bf6f6755b0e26a1d9998d929b28f8c99c3677b8"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x65, 0x3, "ed397d7a843ca82a3517e21ad5badc76292eeb2a0d7a5727cd758ea664960e4ede4725567c2a4cb9bec60c3347e8e2a4185564849b9039b9cd1751e135f7abb8e2f5dc5ff2b760939cb493a76d48e04f3f8567ec848e631292a70a8b2e687deb94"}]}, @TIPC_NLA_NODE={0xd34, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xd21, 0x3, "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"}]}]}, 0xec4}}, 0x0) [ 2356.688403][T19804] bond326: (slave gretap244): Enslaving as a backup interface with an up link 00:55:48 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_ifreq(r0, 0x8930, &(0x7f0000000040)={'bridge_slave_1\x00', @ifru_names}) [ 2356.785803][T20092] bond326: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2356.877315][T19827] bond261: (slave gretap182): Enslaving as a backup interface with an up link [ 2356.921895][ T9] bond261: Warning: No 802.3ad response from the link partner for any adapters in the bond 00:55:49 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000004c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x18, 0x1, 0x1, [r0, r2]}}], 0x18}], 0x600, 0x0) [ 2356.981873][T19844] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2357.042221][T14622] bond326: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2357.056908][T19800] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2357.102265][T20499] bond261: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2357.193604][T19833] device bridge330 entered promiscuous mode [ 2357.248204][T19833] bond326: (slave vlan221): Enslaving as a backup interface with a down link [ 2357.302025][ T9] bond285: (slave vlan180): failed to get link speed/duplex [ 2357.335969][T25832] IPv6: ADDRCONF(NETDEV_CHANGE): bond326: link becomes ready 00:55:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x30, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:49 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000000)=@framed={{}, [], {0x95, 0x68}}, &(0x7f0000000b80)='syzkaller\x00', 0x5, 0xfa, &(0x7f0000000bc0)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:55:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, &(0x7f0000000500)) 00:55:49 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x0, 0x0, 0xf0}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:55:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2357.371198][T25832] IPv6: ADDRCONF(NETDEV_CHANGE): bond261: link becomes ready [ 2357.487098][T20092] bond280: (slave vlan175): failed to get link speed/duplex 00:55:49 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x11, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:55:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1100000000000000000000000100000004000000000000001800000000000000000000000700000094"], 0x30}}], 0x1, 0x0) [ 2357.581856][T19910] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:55:49 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xf, 0x4, 0x0, 0x7, 0x8}, 0x40) [ 2357.857056][T19910] 8021q: adding VLAN 0 to HW filter on device bond327 00:55:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) 00:55:49 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000100)=@in6={0x1c, 0x1c, 0x1}, 0x1c) [ 2357.902763][T19911] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:55:50 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000000)=@framed={{}, [], {0x95, 0x0, 0x0, 0x1840}}, &(0x7f0000000b80)='syzkaller\x00', 0x5, 0xfa, &(0x7f0000000bc0)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:55:50 executing program 1: sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x2, 0x0, &(0x7f0000000500)) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000740), 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000001080), 0xffffffffffffffff) [ 2358.190072][T19911] 8021q: adding VLAN 0 to HW filter on device bond262 [ 2358.316374][T19913] bond327: (slave gretap245): Enslaving as a backup interface with an up link [ 2358.383995][T19914] bond262: (slave gretap183): Enslaving as a backup interface with an up link [ 2358.437962][T19919] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2358.468696][T19931] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2358.583887][T19952] device bridge331 entered promiscuous mode [ 2358.602649][T19952] bond327: (slave vlan222): Enslaving as a backup interface with a down link 00:55:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x30, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:50 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_BINDTODEVICE(r0, 0x29, 0x38, 0x0, 0x0) 00:55:50 executing program 3: r0 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000140)=0x80) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)={0x3c, r1, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x3c}}, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={0x0}}, 0x4000045) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000003c0)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000400)={@remote, 0x0}, &(0x7f0000000440)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000500)={@ipv4={""/10, ""/2, @initdev}, 0x0}, 0x0) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000001cc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001c80)={&(0x7f0000001d00)=ANY=[@ANYBLOB="900b0000", @ANYRES16=r3, @ANYBLOB="7ba42bbd7000fedbdf250000000008000100", @ANYRES32=r4, @ANYBLOB="bc0102803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ff7fffff3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYBLOB, @ANYRES32=r5, @ANYBLOB="3c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c0004000800061f0800000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ffffff7f40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b757000000000080001", @ANYRES32=0x0, @ANYBLOB="a801028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000200000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000100000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004004000000008000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400", @ANYRES32=r6, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000500000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r7, @ANYBLOB="080007000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="340202803c00010024000100757365725f6c696e6b757000000000000000", @ANYRES32=r9, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000000000038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040000010000440001002400", @ANYRES32, @ANYBLOB="58000100240001006c620010001b000000006174739e001000000000000000000000000000000600050003000b00edff0700040003000000080006402126c5b1736551540b58df9b32267f59921b8ccefca0ed7eea95a143092791540cbe1007a74763634658fdae2a0cb7c7a461e084732b5d", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040018260000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300", @ANYRES32, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f", @ANYRES32, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e74000000", @ANYRES32=0x0, @ANYBLOB="7c000280400001002400010071756575655f696400"/40, @ANYRES32, @ANYBLOB="38000100240001006d636173745f72", @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000"], 0xb90}, 0x1, 0x0, 0x0, 0x40}, 0x0) 00:55:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="11000000000000000200000001000000040000000000000018000000000000000000000007"], 0x30}}], 0x1, 0x0) [ 2358.670700][T25832] IPv6: ADDRCONF(NETDEV_CHANGE): bond327: link becomes ready [ 2358.694485][T25832] IPv6: ADDRCONF(NETDEV_CHANGE): bond262: link becomes ready 00:55:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:50 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x0, 0x0, 0x300}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) [ 2358.864382][T20025] netlink: 2480 bytes leftover after parsing attributes in process `syz-executor.3'. 00:55:50 executing program 4: socketpair(0x26, 0x0, 0x0, &(0x7f0000000100)) [ 2359.017341][T20033] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:55:51 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000180)=""/182, 0x1a, 0xb6, 0x8}, 0x20) 00:55:51 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x0, 0x32}, 0x40) [ 2359.247450][T20033] 8021q: adding VLAN 0 to HW filter on device bond263 00:55:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6800000009060108000000000b000000050000070500010007000000050001000700000008000b4000000052300007800800064000010001080009400000008208000640000000000a001100ffffff0500feffffff0000404e2301000900020073797a32"], 0x68}}, 0x0) [ 2359.382520][T20085] BPF:No type found 00:55:51 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) [ 2359.483160][T20085] BPF:No type found [ 2359.495703][T20037] bond263: (slave gretap184): Enslaving as a backup interface with an up link 00:55:51 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x0, 0x0, 0x500}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) [ 2359.602734][T20049] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 00:55:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x30, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:51 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x0, 0x0, 0x80000000}, 0x40) 00:55:51 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x9, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000b80)='syzkaller\x00', 0x5, 0xfa, &(0x7f0000000bc0)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:55:51 executing program 3: sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, 0x0, 0x0) [ 2359.771108][T20065] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2359.970269][T20065] 8021q: adding VLAN 0 to HW filter on device bond328 [ 2360.105566][T20078] bond328: (slave gretap246): Enslaving as a backup interface with an up link [ 2360.156216][T20079] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2360.275207][T20082] device bridge332 entered promiscuous mode [ 2360.319580][T20082] bond328: (slave vlan223): Enslaving as a backup interface with a down link [ 2360.331082][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): bond263: link becomes ready [ 2360.346676][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): bond328: link becomes ready 00:55:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:52 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x0, 0x0, 0x600}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:55:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="110000000000000000000000010000000400000000000000180000000000000000000000070000009404"], 0x30}}], 0x1, 0x0) 00:55:52 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:55:52 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x17, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000b80)='syzkaller\x00', 0x5, 0xfa, &(0x7f0000000bc0)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 2360.454586][T20135] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:55:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="d6d7c4e0e9444950b5d5891ce4904dce", 0x10) 00:55:52 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x2}, 0x40) [ 2360.726455][T20135] 8021q: adding VLAN 0 to HW filter on device bond264 00:55:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="110000000000000000000000010000000400000000000000180000000000000000000000070000009404"], 0x30}}], 0x1, 0x0) [ 2360.907586][T20140] bond264: (slave gretap185): Enslaving as a backup interface with an up link [ 2360.940598][T20092] net_ratelimit: 24 callbacks suppressed [ 2360.940618][T20092] bond264: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2360.996124][T20141] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2361.137052][T20181] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2361.176339][T20503] bond264: Warning: No 802.3ad response from the link partner for any adapters in the bond 00:55:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd8, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa8, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x98, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd8}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:53 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) 00:55:53 executing program 3: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0xfffffffffffffeb4) 00:55:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="110000000000000000000000010000000400000000000000180000000000000000000000070000009404"], 0x30}}], 0x1, 0x0) [ 2361.363088][T20181] 8021q: adding VLAN 0 to HW filter on device bond329 [ 2361.524750][T20188] bond329: (slave gretap247): Enslaving as a backup interface with an up link [ 2361.534497][T20193] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2361.595364][T20197] device bridge333 entered promiscuous mode [ 2361.603928][T20092] bond329: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2361.668374][T20197] bond329: (slave vlan224): Enslaving as a backup interface with a down link 00:55:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2361.726368][ T5665] IPv6: ADDRCONF(NETDEV_CHANGE): bond264: link becomes ready [ 2361.752991][ T5665] IPv6: ADDRCONF(NETDEV_CHANGE): bond329: link becomes ready [ 2361.776680][ T9] bond329: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2361.904137][T20220] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2361.974270][T20220] 8021q: adding VLAN 0 to HW filter on device bond265 [ 2362.057485][T20247] bond265: (slave gretap186): Enslaving as a backup interface with an up link [ 2362.103403][T20250] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2362.124814][T20503] bond265: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2362.220885][T20254] device bridge273 entered promiscuous mode [ 2362.236355][T20254] bond265: (slave vlan167): Enslaving as a backup interface with a down link 00:55:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="110000000000000000000000010000000400000000000000180000000000000000000000070000009404"], 0x30}}], 0x1, 0x0) 00:55:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000001d00)=ANY=[@ANYBLOB="900b0000", @ANYRES16=r1, @ANYBLOB="7ba42bbd7000fedbdf250000", @ANYRES32], 0xb90}, 0x1, 0x0, 0x0, 0x40}, 0x0) 00:55:54 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x0, 0x0, 0x700}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:55:54 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000001500)={0x16, 0x0, 0x0, 0x8}, 0x40) [ 2362.267784][T20265] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2362.295406][ T9] bond265: Warning: No 802.3ad response from the link partner for any adapters in the bond 00:55:54 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x1, &(0x7f0000000b40)=@raw=[@jmp={0x5, 0x0, 0x9}], &(0x7f0000000b80)='syzkaller\x00', 0x5, 0xfa, &(0x7f0000000bc0)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:55:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd8, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa8, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x98, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd8}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2362.524934][T20265] 8021q: adding VLAN 0 to HW filter on device bond330 [ 2362.562974][T20351] netlink: 2940 bytes leftover after parsing attributes in process `syz-executor.3'. 00:55:54 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x101}, 0x14}}, 0x0) [ 2362.723254][T20359] netlink: 2940 bytes leftover after parsing attributes in process `syz-executor.3'. 00:55:54 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_BINDTODEVICE(r0, 0x29, 0x13, 0x0, 0x0) [ 2362.844074][T20092] bond330: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2362.873245][T20281] bond330: (slave gretap248): Enslaving as an active interface with an up link 00:55:54 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_BINDTODEVICE(r0, 0x29, 0x1600bd7a, 0x0, 0x7) 00:55:55 executing program 3: syz_genetlink_get_family_id$ethtool(&(0x7f0000001400), 0xffffffffffffffff) [ 2363.014903][T20303] device bridge334 entered promiscuous mode [ 2363.044263][T14622] bond330: Warning: No 802.3ad response from the link partner for any adapters in the bond 00:55:55 executing program 1: pipe(&(0x7f0000001380)) [ 2363.103346][T20303] bond330: (slave vlan225): Enslaving as a backup interface with a down link [ 2363.142814][ T5665] IPv6: ADDRCONF(NETDEV_CHANGE): bond265: link becomes ready 00:55:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:55 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x9, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x6, 0xb3, &(0x7f0000000200)=""/179, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:55:55 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) [ 2363.344610][ T5665] IPv6: ADDRCONF(NETDEV_CHANGE): bond330: link becomes ready [ 2363.440888][T20353] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2363.562023][T20357] batman_adv: Cannot find parent device [ 2363.683025][T20363] __nla_validate_parse: 1 callbacks suppressed [ 2363.683045][T20363] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 00:55:55 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x0, 0x0, 0x900}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:55:55 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff}) connect$packet(r0, &(0x7f0000001880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) 00:55:55 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_BINDTODEVICE(r0, 0x29, 0x4b, 0x0, 0x7) [ 2363.930112][T20387] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2364.085507][T20387] 8021q: adding VLAN 0 to HW filter on device bond331 [ 2364.142280][T20390] bond331: (slave gretap249): Enslaving as a backup interface with an up link [ 2364.171853][T20393] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2364.182428][T14285] bond331: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2364.295876][T14622] bond331: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2364.316065][T20397] device bridge335 entered promiscuous mode [ 2364.344824][T20397] bond331: (slave vlan226): Enslaving as a backup interface with a down link [ 2364.369737][T25832] IPv6: ADDRCONF(NETDEV_CHANGE): bond331: link becomes ready 00:55:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd8, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa8, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x98, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd8}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:56 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004780)={&(0x7f0000003700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1}}]}}, &(0x7f0000003780)=""/4096, 0x32, 0x1000, 0x1}, 0x20) 00:55:56 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x1c, 0x1, &(0x7f0000000b40)=@raw=[@jmp], &(0x7f0000000b80)='syzkaller\x00', 0x5, 0xfa, &(0x7f0000000bc0)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:55:56 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 00:55:56 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x0, 0x0, 0xa00}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:55:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2364.659724][T20460] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:55:56 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_BINDTODEVICE(r0, 0x29, 0x2a, 0x0, 0x0) 00:55:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000300), &(0x7f0000000340)=0x10) 00:55:56 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_BINDTODEVICE(r0, 0x29, 0x11, 0x0, 0x7) [ 2364.905438][T20460] 8021q: adding VLAN 0 to HW filter on device bond266 00:55:57 executing program 1: syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) 00:55:57 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000001b40)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x40) [ 2365.072123][T20465] bond266: (slave gretap187): Enslaving as a backup interface with an up link [ 2365.187641][T20470] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2365.276034][T20501] device bridge275 entered promiscuous mode 00:55:57 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70}}, &(0x7f0000000b80)='syzkaller\x00', 0x5, 0xfa, &(0x7f0000000bc0)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 2365.353689][T20501] bond266: (slave vlan168): Enslaving as a backup interface with a down link [ 2365.399039][T20502] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:55:57 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x29}}, &(0x7f0000000b80)='syzkaller\x00', 0x5, 0xfa, &(0x7f0000000bc0)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:55:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2365.495302][T20502] 8021q: adding VLAN 0 to HW filter on device bond332 00:55:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={0x0}}, 0x4000045) 00:55:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000001d00)=ANY=[@ANYBLOB="900b0000", @ANYRES16=r1, @ANYBLOB="7ba42bbd7000fe", @ANYRES32], 0xb90}}, 0x0) [ 2365.666550][T20515] bond332: (slave gretap250): Enslaving as a backup interface with an up link [ 2365.683253][T20519] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2365.826331][T20520] device bridge336 entered promiscuous mode [ 2365.896301][T20520] bond332: (slave vlan227): Enslaving as a backup interface with a down link [ 2365.988305][ T5665] IPv6: ADDRCONF(NETDEV_CHANGE): bond266: link becomes ready [ 2366.015983][ T5665] IPv6: ADDRCONF(NETDEV_CHANGE): bond332: link becomes ready [ 2366.085505][T20580] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:55:58 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x0, 0x0, 0xb00}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:55:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={0x0}}, 0x0) 00:55:58 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000a7de000000008dc07bc1083cb7"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000080)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:55:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005e80)={0x0, 0x0, &(0x7f0000005e40)={&(0x7f0000000080)=@deltfilter={0xec4, 0x2d, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_bpf={{0x8}, {0xe98, 0x2, [@TCA_BPF_POLICE={0x4}, @TCA_BPF_ACT={0xe90, 0x1, [@m_pedit={0xe8c, 0x0, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x7f28, 0x3, 0x0, 0x400}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x7}, {0x0, 0x0, 0x5, 0x5}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7}, {0x3ff}, {0xfffff1fa, 0x1ff, 0x5b7, 0x1000, 0x7}, {0x80, 0x41, 0x2, 0x9, 0x63e, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x80000001, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], [{}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}]}}]}, {0x3d, 0x6, "8be7185b5f77b8c1b86af1a2902368186af88a3802aa1c55ebcf4c34e07e07f8491549daaddf10746a61d4bc055dfe8d409db98ccf015ded6c"}, {0xc}, {0xc}}}]}]}}]}, 0xec4}}, 0x0) 00:55:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2366.197524][T20580] 8021q: adding VLAN 0 to HW filter on device bond267 [ 2366.256073][T20583] bond267: (slave gretap188): Enslaving as a backup interface with an up link [ 2366.266146][T20585] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2366.301489][T20499] net_ratelimit: 4 callbacks suppressed [ 2366.301507][T20499] bond267: Warning: No 802.3ad response from the link partner for any adapters in the bond 00:55:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:58 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x0, 0x0, 0xf00}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) [ 2366.455669][T14622] bond282: (slave vlan177): failed to get link speed/duplex [ 2366.465393][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): bond267: link becomes ready [ 2366.480650][T20631] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:55:58 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000004c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20000458}], 0x1, 0x0) 00:55:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000080)={0x2, 0x4e23, @private}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x1600bd75, {0x0, @multicast1, @local}}}], 0x20}}], 0x1, 0x0) 00:55:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005e80)={0x0, 0x0, &(0x7f0000005e40)={&(0x7f0000000080)=@deltfilter={0xec4, 0x2d, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_bpf={{0x8}, {0xe90, 0x2, [@TCA_BPF_POLICE={0x1c, 0x2, [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_PEAKRATE64={0xc}]}, @TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0xe68, 0x1, [@m_pedit={0xe64, 0x0, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{}, [{0x0, 0xc0, 0x8001, 0x8, 0x4, 0xae}, {0x1, 0xfffffffd, 0xffff074c, 0x1, 0x0, 0x1}, {0x0, 0x7, 0x5, 0x7, 0x7, 0x5}, {0x0, 0x0, 0x0, 0x6, 0x401, 0xff}, {0x0, 0x0, 0x0, 0x3, 0x9, 0x48c}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xc000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xffffffff, 0x8, 0x1, 0x5}, {0x2, 0x1, 0x3, 0x3, 0x6, 0x7f}, {0x1, 0x8, 0x0, 0x80000000, 0x7ff, 0x7}, {0x3, 0xd22, 0x0, 0x380, 0xd9d, 0x8f4}, {0x1f, 0x0, 0x4, 0xffffffff, 0x4, 0xf6}, {0x0, 0x80000001, 0x400, 0x1, 0x6, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x2, 0x2}, {0x2}, {0x7}, {0x7bc596e8785a8217}]}}]}, {0x15, 0x6, "8be7185b5f77b8c1b86af1a2902368186a"}, {0xc}, {0xc}}}]}]}}]}, 0xec4}}, 0x0) [ 2366.589098][T14285] bond267: Warning: No 802.3ad response from the link partner for any adapters in the bond 00:55:58 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x68}}, &(0x7f0000000b80)='syzkaller\x00', 0x5, 0xfa, &(0x7f0000000bc0)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 2366.715568][T20631] 8021q: adding VLAN 0 to HW filter on device bond333 00:55:58 executing program 1: pipe(&(0x7f0000000e80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 00:55:58 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd]}}, &(0x7f0000000180)=""/182, 0x26, 0xb6, 0x8}, 0x20) [ 2366.897035][T20638] bond333: (slave gretap251): Enslaving as a backup interface with an up link [ 2366.965609][T14622] bond333: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2367.009457][T20640] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:55:59 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x4}}, &(0x7f0000000b80)='syzkaller\x00', 0x5, 0xfa, &(0x7f0000000bc0)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:55:59 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) [ 2367.170144][T20642] device bridge337 entered promiscuous mode [ 2367.190371][T20703] BPF:[1] FWD (anon) [ 2367.213265][T14622] bond333: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2367.217590][T20703] BPF:struct [ 2367.243278][T20642] bond333: (slave vlan228): Enslaving as a backup interface with a down link [ 2367.262213][T20703] BPF: [ 2367.274360][T20703] BPF:Invalid name [ 2367.284178][T20703] BPF: [ 2367.284178][T20703] [ 2367.290303][T20683] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2367.326078][T20703] BPF:[1] FWD (anon) 00:55:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2367.415408][T20703] BPF:struct 00:55:59 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x0, 0x0, 0x1100}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) [ 2367.484566][T20703] BPF: [ 2367.516845][T20703] BPF:Invalid name [ 2367.532576][T20703] BPF: [ 2367.532576][T20703] [ 2367.565707][T20683] 8021q: adding VLAN 0 to HW filter on device bond268 [ 2367.624539][T20690] bond268: (slave gretap189): Enslaving as a backup interface with an up link [ 2367.643565][T20092] bond268: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2367.721678][T20692] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2367.832695][T14629] bond268: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2367.849715][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): bond333: link becomes ready [ 2367.880166][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): bond268: link becomes ready 00:55:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:55:59 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x3, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:55:59 executing program 4: sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x2100) socketpair(0x0, 0x2, 0x0, &(0x7f0000000500)) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000007c0), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000001080), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:55:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0}}, 0x0) [ 2367.976835][T20744] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:56:00 executing program 1: bpf$MAP_CREATE(0x16, &(0x7f0000000dc0), 0x40) 00:56:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000001d00)=ANY=[@ANYBLOB="900b0000", @ANYRES16=r1, @ANYBLOB="7ba42bbd7000fedbdf250000000008000100", @ANYRES32, @ANYBLOB="bc0102", @ANYRES32=0x0, @ANYRES32=0x0], 0xb90}, 0x1, 0x0, 0x0, 0x40}, 0x0) [ 2368.177516][T20744] 8021q: adding VLAN 0 to HW filter on device bond334 00:56:00 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x1, &(0x7f0000000b40)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xb603}], &(0x7f0000000b80)='syzkaller\x00', 0x5, 0xfa, &(0x7f0000000bc0)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 2368.319166][T20749] bond334: (slave gretap252): Enslaving as a backup interface with an up link [ 2368.323619][T20813] netlink: 2488 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2368.404516][T20751] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2368.416183][T14285] bond334: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2368.420346][T20816] netlink: 2488 bytes leftover after parsing attributes in process `syz-executor.3'. 00:56:00 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xf, 0x0, 0x0) 00:56:00 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth0_to_bridge\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x7fff}, {}]}}) 00:56:00 executing program 4: bpf$MAP_CREATE(0x2, &(0x7f0000000dc0), 0x40) [ 2368.563806][T20755] device bridge338 entered promiscuous mode [ 2368.618479][T20092] bond334: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2368.651408][T20755] bond334: (slave vlan229): Enslaving as a backup interface with a down link [ 2368.804130][T20763] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:56:00 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_BINDTODEVICE(r0, 0x29, 0x1600bd7f, 0x0, 0x0) [ 2368.896965][T20769] batman_adv: Cannot find parent device [ 2369.035836][T20804] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2369.075708][T28632] IPv6: ADDRCONF(NETDEV_CHANGE): bond334: link becomes ready 00:56:01 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x0, 0x0, 0x1883}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) [ 2369.224563][T14629] bond284: (slave vlan179): failed to get link speed/duplex 00:56:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:01 executing program 4: socketpair(0x25, 0x3, 0x0, &(0x7f00000001c0)) 00:56:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:01 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1600bd63, &(0x7f0000000000), 0x4) 00:56:01 executing program 3: bpf$MAP_CREATE(0x10, &(0x7f0000000dc0), 0x40) 00:56:01 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x0, 0x0, 0x3f00}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) [ 2369.436161][T20846] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:56:01 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000b80)='syzkaller\x00', 0x5, 0xfa, &(0x7f0000000bc0)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:56:01 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) writev(r0, &(0x7f00000010c0)=[{&(0x7f0000000d80)="6a73fdb4a844e0ce337c385cfa01a2", 0xf}, {&(0x7f0000000dc0)="aa", 0x1}], 0x2) 00:56:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000001d00)=ANY=[@ANYRES16], 0xb90}}, 0x0) [ 2369.795373][T20846] 8021q: adding VLAN 0 to HW filter on device bond335 00:56:01 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) [ 2369.917601][T20847] bond335: (slave gretap253): Enslaving as a backup interface with an up link 00:56:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000080)={0x2, 0x4e23, @private}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@rr={0x7, 0x27, 0x1b, [@remote, @multicast2, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @dev, @private, @multicast1, @remote]}, @ra={0x94, 0x4}]}}}], 0x40}}], 0x1, 0x0) 00:56:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f00000004c0)={&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, 0x80, 0x0}, 0x2002) [ 2370.003990][T20859] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2370.101368][T20887] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2370.194064][T20887] 8021q: adding VLAN 0 to HW filter on device bond269 [ 2370.458701][T20895] bond269: (slave gretap190): Enslaving as a backup interface with an up link [ 2370.527795][T20900] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2370.606917][T20903] device bridge279 entered promiscuous mode [ 2370.622338][T20903] bond269: (slave vlan169): Enslaving as a backup interface with an up link [ 2370.646950][T28632] IPv6: ADDRCONF(NETDEV_CHANGE): bond335: link becomes ready [ 2370.669736][T28632] IPv6: ADDRCONF(NETDEV_CHANGE): bond269: link becomes ready 00:56:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:02 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_BINDTODEVICE(r0, 0x29, 0x35, 0x0, 0x7) 00:56:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:02 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x1e, 0x1, &(0x7f0000000b40)=@raw=[@jmp], &(0x7f0000000b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:56:02 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x61}}, &(0x7f0000000b80)='syzkaller\x00', 0x5, 0xfa, &(0x7f0000000bc0)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:56:02 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x0, 0x0, 0x6000}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) [ 2370.776462][T20503] bond269: (slave vlan169): link status up again after 0 ms 00:56:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="11000000000000000100000001000000040000000000000018000000000000000000000007"], 0x30}}], 0x1, 0x0) 00:56:02 executing program 4: socketpair(0x10, 0x0, 0x0, &(0x7f00000000c0)) [ 2370.996704][T20968] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:56:03 executing program 1: sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x803e0000) [ 2371.083013][ T91] bond269: (slave vlan169): link status up again after 0 ms 00:56:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000480)) [ 2371.174991][T20968] 8021q: adding VLAN 0 to HW filter on device bond270 [ 2371.213736][T20503] bond269: (slave vlan169): link status up again after 0 ms [ 2371.250100][T20967] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2371.269579][T20503] bond269: (slave vlan169): link status up again after 0 ms 00:56:03 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x101, 0x0, 0x25dfdbfb}, 0x14}}, 0x0) 00:56:03 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x3b6}}, &(0x7f0000000b80)='syzkaller\x00', 0x5, 0xfa, &(0x7f0000000bc0)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 2371.297905][T20503] bond269: (slave vlan169): link status up again after 0 ms [ 2371.415272][T20967] 8021q: adding VLAN 0 to HW filter on device bond336 [ 2371.528526][T14622] bond269: (slave vlan169): link status up again after 0 ms [ 2371.587788][T20499] bond269: (slave vlan169): link status up again after 0 ms [ 2371.681137][T20975] bond336: (slave gretap254): Enslaving as a backup interface with an up link [ 2371.708965][T14629] bond269: (slave vlan169): link status up again after 0 ms [ 2371.772345][T14622] net_ratelimit: 20 callbacks suppressed [ 2371.772364][T14622] bond336: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2371.781028][T20503] bond269: (slave vlan169): link status up again after 0 ms [ 2371.842033][ T9] bond269: (slave vlan169): link status up again after 0 ms [ 2371.882791][T20974] bond270: (slave gretap191): Enslaving as a backup interface with an up link [ 2371.896022][T20982] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2371.931502][T20499] bond279: (slave vlan174): failed to get link speed/duplex [ 2371.931585][T20503] bond269: (slave vlan169): link status up again after 0 ms [ 2371.948585][T20992] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2371.951451][T14629] bond270: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2371.968957][ T9] bond336: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2372.031524][ T9] bond269: (slave vlan169): link status up again after 0 ms [ 2372.054887][T21015] device bridge280 entered promiscuous mode [ 2372.065265][T21015] bond270: (slave vlan170): Enslaving as a backup interface with an up link 00:56:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:04 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10}, 0x10}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000e80)) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000011c0)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x0) [ 2372.094363][ T91] bond269: (slave vlan169): link status up again after 0 ms [ 2372.115820][T21016] device bridge340 entered promiscuous mode [ 2372.121947][T20499] bond269: (slave vlan169): link status up again after 0 ms [ 2372.132774][T14629] bond270: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2372.158797][ T91] bond269: (slave vlan169): link status up again after 0 ms [ 2372.184906][T20499] bond269: (slave vlan169): link status up again after 0 ms [ 2372.215920][T21016] bond336: (slave vlan231): Enslaving as a backup interface with a down link [ 2372.242599][T14622] bond269: (slave vlan169): link status up again after 0 ms [ 2372.275678][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): bond270: link becomes ready [ 2372.293408][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): bond336: link becomes ready [ 2372.306188][T14622] bond269: (slave vlan169): link status up again after 0 ms 00:56:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:04 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x10000000}, 0x40) 00:56:04 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0), 0x8, 0x10, 0x0}, 0x78) 00:56:04 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x0, 0x0, 0x8100}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:56:04 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) [ 2372.345598][T20503] bond270: (slave vlan170): link status up again after 0 ms [ 2372.377737][ T9] bond270: (slave vlan170): link status up again after 0 ms [ 2372.397146][T21078] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2372.436934][T20503] bond270: (slave vlan170): link status up again after 0 ms [ 2372.436934][T14622] bond269: (slave vlan169): link status up again after 0 ms [ 2372.458923][T14629] bond269: (slave vlan169): link status up again after 0 ms [ 2372.524320][ T9] bond269: (slave vlan169): link status up again after 0 ms [ 2372.592303][ T9] bond270: (slave vlan170): link status up again after 0 ms [ 2372.608394][ T91] bond269: (slave vlan169): link status up again after 0 ms [ 2372.622498][T21078] 8021q: adding VLAN 0 to HW filter on device bond271 00:56:04 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_BINDTODEVICE(r0, 0x29, 0x38, 0x0, 0x7) [ 2372.692795][ T9] bond269: (slave vlan169): link status up again after 0 ms [ 2372.692819][T20499] bond270: (slave vlan170): link status up again after 0 ms [ 2372.718776][ T9] bond269: (slave vlan169): link status up again after 0 ms [ 2372.748374][T14629] bond269: (slave vlan169): link status up again after 0 ms 00:56:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000140)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcad}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x460c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x497}]}]}, @TIPC_NLA_NODE={0xbc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "7fa687ae376bf6f6755b0e26a1d9998d929b28f8c99c3677b8"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x65, 0x3, "ed397d7a843ca82a3517e21ad5badc76292eeb2a0d7a5727cd758ea664960e4ede4725567c2a4cb9bec60c3347e8e2a4185564849b9039b9cd1751e135f7abb8e2f5dc5ff2b760939cb493a76d48e04f3f8567ec848e631292a70a8b2e687deb94"}]}, @TIPC_NLA_NODE={0xd34, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xd21, 0x3, "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"}]}]}, 0xec4}}, 0x0) [ 2372.859919][ T91] bond269: (slave vlan169): link status up again after 0 ms [ 2372.880948][T21079] bond271: (slave gretap192): Enslaving as a backup interface with an up link [ 2372.901329][T20499] bond270: (slave vlan170): link status up again after 0 ms [ 2372.925784][T21081] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2372.943107][T20092] bond269: (slave vlan169): link status up again after 0 ms [ 2372.945563][ T91] bond270: (slave vlan170): link status up again after 0 ms [ 2372.999648][ T9] bond271: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2373.038952][ T91] bond269: (slave vlan169): link status up again after 0 ms 00:56:05 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000b80)='syzkaller\x00', 0x5, 0xfa, &(0x7f0000000bc0)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 2373.059942][T14629] bond270: (slave vlan170): link status up again after 0 ms [ 2373.078927][T14622] bond270: (slave vlan170): link status up again after 0 ms [ 2373.135770][T14622] bond285: (slave vlan180): failed to get link speed/duplex [ 2373.137751][T14514] bond269: (slave vlan169): link status up again after 0 ms [ 2373.155117][T14629] bond270: (slave vlan170): link status up again after 0 ms 00:56:05 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) [ 2373.200893][T14514] bond271: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2373.203422][ T91] bond270: (slave vlan170): link status up again after 0 ms [ 2373.231885][T14285] bond269: (slave vlan169): link status up again after 0 ms [ 2373.272575][T21087] device bridge281 entered promiscuous mode [ 2373.282914][T20092] bond269: (slave vlan169): link status up again after 0 ms [ 2373.318081][T20092] bond269: (slave vlan169): link status up again after 0 ms [ 2373.321115][T14514] bond270: (slave vlan170): link status up again after 0 ms [ 2373.333891][T21087] bond271: (slave vlan171): Enslaving as a backup interface with an up link [ 2373.389411][T20092] bond269: (slave vlan169): link status up again after 0 ms [ 2373.410634][T14622] bond270: (slave vlan170): link status up again after 0 ms [ 2373.438115][T20092] bond269: (slave vlan169): link status up again after 0 ms [ 2373.446127][T21127] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2373.491574][T20092] bond269: (slave vlan169): link status up again after 0 ms [ 2373.499832][T14622] bond270: (slave vlan170): link status up again after 0 ms 00:56:05 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x0, 0x0, 0x8318}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) [ 2373.540151][T14629] bond270: (slave vlan170): link status up again after 0 ms [ 2373.604147][T20092] bond269: (slave vlan169): link status up again after 0 ms 00:56:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x0, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) [ 2373.651246][ T91] bond270: (slave vlan170): link status up again after 0 ms [ 2373.666035][T21128] batman_adv: Cannot find parent device [ 2373.679934][T20092] bond269: (slave vlan169): link status up again after 0 ms [ 2373.688963][T14629] bond270: (slave vlan170): link status up again after 0 ms [ 2373.698533][ T91] bond269: (slave vlan169): link status up again after 0 ms [ 2373.711844][T14514] bond270: (slave vlan170): link status up again after 0 ms [ 2373.724286][T14514] bond269: (slave vlan169): link status up again after 0 ms [ 2373.760303][T20499] bond270: (slave vlan170): link status up again after 0 ms [ 2373.808743][T14514] bond269: (slave vlan169): link status up again after 0 ms [ 2373.816771][T14629] bond270: (slave vlan170): link status up again after 0 ms [ 2373.843942][T21131] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2373.862943][T14629] bond269: (slave vlan169): link status up again after 0 ms [ 2373.887186][T14622] bond270: (slave vlan170): link status up again after 0 ms [ 2373.920334][T20499] bond269: (slave vlan169): link status up again after 0 ms [ 2373.968473][T14514] bond269: (slave vlan169): link status up again after 0 ms [ 2374.014895][T20499] bond269: (slave vlan169): link status up again after 0 ms [ 2374.037037][T14514] bond270: (slave vlan170): link status up again after 0 ms [ 2374.080715][T14514] bond269: (slave vlan169): link status up again after 0 ms [ 2374.089586][T20503] bond270: (slave vlan170): link status up again after 0 ms [ 2374.118003][T20092] bond270: (slave vlan170): link status up again after 0 ms [ 2374.136437][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): bond271: link becomes ready [ 2374.144586][T20503] bond270: (slave vlan170): link status up again after 0 ms [ 2374.170472][ T91] bond270: (slave vlan170): link status up again after 0 ms [ 2374.199942][T14629] bond269: (slave vlan169): link status up again after 0 ms [ 2374.222843][T20503] bond270: (slave vlan170): link status up again after 0 ms [ 2374.256016][T14622] bond271: (slave vlan171): link status up again after 0 ms [ 2374.264548][ T2441] bond270: (slave vlan170): link status up again after 0 ms [ 2374.279694][T20503] bond270: (slave vlan170): link status up again after 0 ms [ 2374.318208][T14514] bond269: (slave vlan169): link status up again after 0 ms [ 2374.347902][T14514] bond269: (slave vlan169): link status up again after 0 ms [ 2374.372850][T14629] bond270: (slave vlan170): link status up again after 0 ms [ 2374.376503][T21159] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2374.408001][T14622] bond269: (slave vlan169): link status up again after 0 ms [ 2374.420820][T14629] bond271: (slave vlan171): link status up again after 0 ms [ 2374.428912][T14622] bond270: (slave vlan170): link status up again after 0 ms [ 2374.461190][ T91] bond270: (slave vlan170): link status up again after 0 ms [ 2374.461436][T20499] bond269: (slave vlan169): link status up again after 0 ms [ 2374.512681][ T91] bond271: (slave vlan171): link status up again after 0 ms [ 2374.524086][T20503] bond270: (slave vlan170): link status up again after 0 ms [ 2374.558913][T20499] bond270: (slave vlan170): link status up again after 0 ms [ 2374.579545][T20503] bond270: (slave vlan170): link status up again after 0 ms [ 2374.582809][T20499] bond269: (slave vlan169): link status up again after 0 ms [ 2374.624797][T20499] bond269: (slave vlan169): link status up again after 0 ms [ 2374.640206][T14629] bond271: (slave vlan171): link status up again after 0 ms [ 2374.662971][T21159] 8021q: adding VLAN 0 to HW filter on device bond272 [ 2374.670696][T20092] bond269: (slave vlan169): link status up again after 0 ms [ 2374.697959][T20092] bond269: (slave vlan169): link status up again after 0 ms [ 2374.705309][T20092] bond271: (slave vlan171): link status up again after 0 ms [ 2374.711262][T14622] bond270: (slave vlan170): link status up again after 0 ms [ 2374.722561][T14629] bond269: (slave vlan169): link status up again after 0 ms [ 2374.868799][T21161] bond272: (slave gretap193): Enslaving as a backup interface with an up link [ 2374.909817][T20092] bond271: (slave vlan171): failed to get link speed/duplex [ 2374.946533][T21165] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2374.959087][T20092] bond269: (slave vlan169): link status up again after 0 ms [ 2374.991290][ T91] bond272: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2374.995381][T20092] bond270: (slave vlan170): link status up again after 0 ms [ 2375.051379][T14622] bond269: (slave vlan169): link status up again after 0 ms [ 2375.078671][T21168] device bridge282 entered promiscuous mode [ 2375.106422][T21168] bond272: (slave vlan172): Enslaving as a backup interface with an up link [ 2375.121278][T20092] bond269: (slave vlan169): link status up again after 0 ms [ 2375.142335][ T5665] IPv6: ADDRCONF(NETDEV_CHANGE): bond272: link becomes ready [ 2375.165611][T14622] bond270: (slave vlan170): link status up again after 0 ms 00:56:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2375.219597][T20092] bond270: (slave vlan170): link status up again after 0 ms [ 2375.303130][T14622] bond272: (slave vlan172): link status up again after 0 ms [ 2375.306996][ T91] bond269: (slave vlan169): link status up again after 0 ms [ 2375.361054][T21214] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2375.379187][T20092] bond272: (slave vlan172): link status up again after 0 ms [ 2375.466330][T21214] 8021q: adding VLAN 0 to HW filter on device bond337 [ 2375.564693][T21215] bond337: (slave gretap255): Enslaving as a backup interface with an up link [ 2375.605840][T21250] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2375.652491][T20503] bond269: (slave vlan169): link status up again after 0 ms [ 2375.678492][T20499] bond272: (slave vlan172): link status up again after 0 ms [ 2375.698920][ T91] bond272: (slave vlan172): link status up again after 0 ms [ 2375.717904][T20503] bond272: (slave vlan172): link status up again after 0 ms [ 2375.729785][ T91] bond269: (slave vlan169): link status up again after 0 ms [ 2375.758235][T14622] bond269: (slave vlan169): link status up again after 0 ms [ 2375.790109][ T91] bond272: (slave vlan172): link status up again after 0 ms [ 2375.808070][T21214] device bridge342 entered promiscuous mode [ 2375.837273][ T2441] bond269: (slave vlan169): link status up again after 0 ms [ 2375.850587][T21214] bond337: (slave vlan232): Enslaving as a backup interface with a down link [ 2375.881595][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): bond337: link becomes ready [ 2375.905465][T14622] bond269: (slave vlan169): link status up again after 0 ms [ 2375.916566][ T91] bond272: (slave vlan172): link status up again after 0 ms [ 2375.947777][T14622] bond269: (slave vlan169): link status up again after 0 ms [ 2375.988776][T14622] bond269: (slave vlan169): link status up again after 0 ms [ 2376.033162][T14622] bond269: (slave vlan169): link status up again after 0 ms [ 2376.054021][ T2441] bond272: (slave vlan172): link status up again after 0 ms [ 2376.123454][T20499] bond272: (slave vlan172): link status up again after 0 ms [ 2376.131525][T14622] bond269: (slave vlan169): link status up again after 0 ms [ 2376.876150][ T2441] net_ratelimit: 56 callbacks suppressed [ 2376.876171][ T2441] bond271: (slave vlan171): failed to get link speed/duplex [ 2376.941810][ T2441] bond281: (slave vlan176): failed to get link speed/duplex [ 2376.959041][ T2441] bond284: (slave vlan179): failed to get link speed/duplex [ 2376.977669][ T2441] bond269: (slave vlan169): failed to get link speed/duplex [ 2376.997994][ T2441] bond282: (slave vlan177): failed to get link speed/duplex [ 2377.017808][T20499] bond279: (slave vlan174): failed to get link speed/duplex [ 2377.025181][T20499] bond270: (slave vlan170): failed to get link speed/duplex [ 2377.059008][T20499] bond272: (slave vlan172): failed to get link speed/duplex [ 2377.077847][T20499] bond280: (slave vlan175): failed to get link speed/duplex [ 2377.091952][T20503] bond284: (slave vlan179): failed to get link speed/duplex 00:56:09 executing program 3: syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) socketpair(0x0, 0x0, 0x6, &(0x7f0000002940)) 00:56:09 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x9, &(0x7f0000000000), 0x4) 00:56:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) 00:56:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x0, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:09 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x0, 0x0, 0xf000}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:56:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) [ 2377.368040][T21269] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:56:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 2377.462802][T21269] 8021q: adding VLAN 0 to HW filter on device bond338 [ 2377.486055][T21273] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:56:09 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000002b40), r0) 00:56:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) [ 2377.843201][T21273] 8021q: adding VLAN 0 to HW filter on device bond273 00:56:09 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 00:56:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) accept$alg(r0, 0x0, 0x0) [ 2377.985518][T21272] bond338: (slave gretap256): Enslaving as an active interface with an up link [ 2378.024421][T21298] bond273: (slave gretap194): Enslaving as a backup interface with an up link [ 2378.081820][T21314] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:56:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x14}, 0x14}}, 0x40040) 00:56:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000001d00)=ANY=[@ANYBLOB="900b0000", @ANYRES16=r1, @ANYBLOB="7ba42bbd7000fedbdf250000000008000100", @ANYRES32, @ANYBLOB="bc0102803c", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0xb90}}, 0x0) 00:56:10 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70}}, &(0x7f0000000b80)='syzkaller\x00', 0x5, 0xfa, &(0x7f0000000bc0)=""/250, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 2378.213182][T21315] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2378.316860][T21377] netlink: 2488 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2378.335791][T21269] device bridge343 entered promiscuous mode [ 2378.391443][T21269] bond338: (slave vlan233): Enslaving as a backup interface with a down link [ 2378.550183][T21316] device bridge283 entered promiscuous mode [ 2378.625994][T21316] bond273: (slave vlan173): Enslaving as a backup interface with an up link [ 2378.687242][T25832] IPv6: ADDRCONF(NETDEV_CHANGE): bond338: link becomes ready [ 2378.719219][T25832] IPv6: ADDRCONF(NETDEV_CHANGE): bond273: link becomes ready 00:56:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x0, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:10 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {0x0, 0x0, 0xffff}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:56:10 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x1c, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:56:10 executing program 3: bpf$MAP_CREATE(0x9, &(0x7f0000000dc0), 0x40) 00:56:10 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_BINDTODEVICE(r0, 0x29, 0x2b, 0x0, 0x0) 00:56:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2378.931697][ T91] bond273: (slave vlan173): link status up again after 0 ms [ 2379.002584][T21395] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:56:11 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000600)=[{0x0, 0x0, 0x0, 0x31, &(0x7f0000000440)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}], 0x1, 0x0) 00:56:11 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x34, &(0x7f0000000000), 0x4) 00:56:11 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, 0x0, 0x0) [ 2379.143959][T21395] 8021q: adding VLAN 0 to HW filter on device bond339 [ 2379.251844][T21401] bond339: (slave gretap257): Enslaving as a backup interface with an up link 00:56:11 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0xe, &(0x7f0000000000), 0x4) [ 2379.340863][T21422] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:56:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x3}]}]}, 0x1c}}, 0x0) [ 2379.427399][T21442] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:56:11 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xf, 0x0, 0x0, 0x0, 0x8}, 0x40) [ 2379.685631][T21442] 8021q: adding VLAN 0 to HW filter on device bond274 [ 2379.706543][T21493] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2379.775863][T21497] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2379.810530][T21395] device bridge344 entered promiscuous mode [ 2379.920739][T21395] bond339: (slave vlan234): Enslaving as a backup interface with a down link [ 2380.042013][T21444] bond274: (slave gretap195): Enslaving as a backup interface with an up link [ 2380.108427][T21449] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2380.219246][T21452] device bridge284 entered promiscuous mode [ 2380.238862][T21452] bond274: (slave vlan174): Enslaving as a backup interface with an up link [ 2380.432940][T21515] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2380.486162][T21516] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:56:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:12 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x800, 0x0, 0x5}, 0x40) 00:56:12 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x4018, 0x0, 0x0) 00:56:12 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:56:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:12 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:56:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000a80)={0xfffffffffffffffd, 0x0, &(0x7f0000000a40)={0x0}}, 0x0) 00:56:12 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000600)=[{0x0, 0x0, 0x0, 0x31, &(0x7f0000000440)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}], 0x1, 0x20000090) 00:56:12 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_hsr\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000001d40)=[{{&(0x7f0000000080)={0x2, 0x4e20, @private=0xa010102}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001e40)=ANY=[], 0x60}}], 0x2, 0x0) 00:56:12 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x2, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:56:12 executing program 1: bpf$MAP_CREATE(0x6, &(0x7f0000000dc0), 0x40) [ 2380.711233][T21516] 8021q: adding VLAN 0 to HW filter on device bond340 00:56:12 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x11, 0x4, &(0x7f0000000040)=@framed={{}, [@func]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000000c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 2380.900569][T21521] bond340: (slave gretap258): Enslaving as a backup interface with an up link [ 2380.917290][T21519] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2381.022153][T21519] 8021q: adding VLAN 0 to HW filter on device bond275 [ 2381.102925][T21524] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2381.318488][T21556] bond275: (slave gretap196): Enslaving as a backup interface with an up link [ 2381.376001][T21557] device bridge345 entered promiscuous mode [ 2381.413956][T21557] bond340: (slave vlan235): Enslaving as a backup interface with a down link [ 2381.480836][T21564] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2381.571171][T21575] device bridge285 entered promiscuous mode [ 2381.643486][T21575] bond275: (slave vlan175): Enslaving as a backup interface with an up link 00:56:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:13 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x18}}, &(0x7f0000000b80)='syzkaller\x00', 0x5, 0xfa, &(0x7f0000000bc0)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:56:13 executing program 4: syz_genetlink_get_family_id$devlink(&(0x7f0000001180), 0xffffffffffffffff) 00:56:13 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_BINDTODEVICE(r0, 0x29, 0x13, 0x0, 0x7) 00:56:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:13 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x4, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) [ 2381.824579][T21631] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:56:14 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x68}}, &(0x7f0000000b80)='syzkaller\x00', 0x5, 0xfa, &(0x7f0000000bc0)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:56:14 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1, &(0x7f0000000000), 0x4) 00:56:14 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000080)={0x2, 0x4e23, @private}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="110000000000000000000000010000007f000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="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"], 0x290}}], 0x1, 0x0) [ 2382.062438][T21631] 8021q: adding VLAN 0 to HW filter on device bond341 [ 2382.218091][T21637] bond341: (slave gretap259): Enslaving as a backup interface with an up link 00:56:14 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, &(0x7f0000000040)=""/143, 0x26, 0x8f, 0x1}, 0x20) 00:56:14 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x4, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 2382.267915][T14622] net_ratelimit: 48 callbacks suppressed [ 2382.267934][T14622] bond341: Warning: No 802.3ad response from the link partner for any adapters in the bond 00:56:14 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x21, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 2382.354248][T21641] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2382.506390][T21676] device bridge346 entered promiscuous mode [ 2382.573413][T14622] bond341: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2382.605394][T21676] bond341: (slave vlan236): Enslaving as a backup interface with a down link [ 2382.630074][T21674] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2382.768999][T21674] 8021q: adding VLAN 0 to HW filter on device bond276 [ 2382.961242][T21681] bond276: (slave gretap197): Enslaving as a backup interface with an up link [ 2382.979918][ T2441] bond276: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2382.987136][T21686] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2383.091451][T21687] device bridge286 entered promiscuous mode [ 2383.103530][T21687] bond276: (slave vlan176): Enslaving as a backup interface with an up link [ 2383.138798][T20092] bond285: (slave vlan180): failed to get link speed/duplex [ 2383.158319][ T2441] bond273: (slave vlan173): failed to get link speed/duplex [ 2383.168362][T20092] bond271: (slave vlan171): failed to get link speed/duplex [ 2383.173349][T14514] bond276: Warning: No 802.3ad response from the link partner for any adapters in the bond 00:56:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:15 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0xd}, 0x40) 00:56:15 executing program 1: bpf$MAP_CREATE(0x5, &(0x7f0000000000), 0xa0) 00:56:15 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x40) 00:56:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:15 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x7, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) [ 2383.199108][T20092] bond282: (slave vlan177): failed to get link speed/duplex [ 2383.217889][T20092] bond269: (slave vlan169): failed to get link speed/duplex [ 2383.225277][T20092] bond280: (slave vlan175): failed to get link speed/duplex [ 2383.372214][T21754] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:56:15 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x43, &(0x7f0000000000), 0x4) 00:56:15 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x8, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:56:15 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) accept(r0, 0x0, 0x0) 00:56:15 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x6, &(0x7f0000000000)=0x7, 0x4) [ 2383.716180][T21754] 8021q: adding VLAN 0 to HW filter on device bond277 [ 2383.783822][T21755] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:56:15 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0xe, 0x2}]}]}}, &(0x7f0000000040)=""/143, 0x36, 0x8f, 0x1}, 0x20) 00:56:16 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x1, &(0x7f0000000380)=@raw=[@call], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x78) [ 2384.029071][T21755] 8021q: adding VLAN 0 to HW filter on device bond342 [ 2384.173446][T21757] bond277: (slave gretap198): Enslaving as a backup interface with an up link [ 2384.300559][T21767] bond342: (slave gretap260): Enslaving as an active interface with an up link [ 2384.319020][T21782] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2384.391214][T21766] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2384.441246][T21787] device bridge347 entered promiscuous mode [ 2384.477836][T21787] bond342: (slave vlan237): Enslaving as a backup interface with a down link 00:56:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xc4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x94, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x84, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @broadcast}}) 00:56:16 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x10e, 0x0) write$binfmt_elf64(r1, &(0x7f00000007c0)=ANY=[], 0x10e) 00:56:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{}, {0x0, @broadcast}, 0x3c, {0x2, 0x0, @local}}) 00:56:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:16 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0xa, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:56:16 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/50, 0x32}], 0x1) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0xf, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 00:56:16 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x2}}, &(0x7f0000000b80)='syzkaller\x00', 0x5, 0xfa, &(0x7f0000000bc0)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:56:16 executing program 4: bpf$MAP_CREATE(0xe, &(0x7f0000000140), 0x40) [ 2384.905372][T21875] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:56:17 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x500, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) [ 2385.139194][T21875] 8021q: adding VLAN 0 to HW filter on device bond343 [ 2385.176782][T21876] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:56:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_aout(r0, 0x0, 0x0) [ 2385.285940][T21876] 8021q: adding VLAN 0 to HW filter on device bond278 [ 2385.354087][T21878] bond343: (slave gretap261): Enslaving as a backup interface with an up link 00:56:17 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x10e, 0x0) close(r0) write$binfmt_elf64(r1, &(0x7f00000007c0)=ANY=[], 0x10e) [ 2385.474332][T21879] bond278: (slave gretap199): Enslaving as a backup interface with an up link [ 2385.504474][T21880] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2385.588888][T21883] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2385.738203][T21915] device bridge348 entered promiscuous mode [ 2385.775277][T21915] bond343: (slave vlan238): Enslaving as a backup interface with a down link [ 2385.853708][T21921] device bridge288 entered promiscuous mode [ 2385.876434][T21921] bond278: (slave vlan178): Enslaving as a backup interface with a down link 00:56:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xc4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x94, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x84, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="34010000170001000000000000000000ac1e000100000000000000000000000000000000000000007f000001000000000000000000000000fe8000000000000000000000000000aae000000100"/104, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ffffffff000000000000000000000000fc02000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff7f0000000000000000000000000000000000000000000000000000000000f1ffffffffffffff0000000000000000000040"], 0x134}}, 0x0) 00:56:18 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000000600)="6353458b16ad32ca6c9681b335d6be41534811fa36e28a26ca34bc418546fec1ea11aa70770d5336060a7b4bdae6132f9d64531f05f97644044484dbe8e4e1f826837d526e2be3eb233ff5b17f137797a452477737f3ff60f8e612d2f8cec226dc945aa6f38c903b0b5132db288b3e217a7f7b5e4817649562f8a6735ad7807d6ede142b583a72d680226b279c8c8c786125f22543614bd431f4a574ca62abc6e852f126516ea090576d2ff8c52d008e8415b8883bbc95e7dd90fcbcc69c16a6bfd67d0fc5732f8a95ad973827eb7ba8e740c8695a9f9f12024830609faa3bb901399e7845c569cdfa07e876aed4634638906711de7c244bd3e1c15d718be0bf9918aa7901db20cbb7e179a894e0fb6ad0070b8158fcce2e8b434e3ed1629847a95f0bd5efad60abd6cc71a125d32cc4f8d9aac42d2be863c9a4d42bf6e81dc0afb8d304634835f0a6a9ca3f60152d1e195b36aefa95c3cc1b5254db6c86c60be5b44990bd1149f2b2f49be02567a398913c5d41e90e94e9ed5a538a48c0a1eea04224d1b9add4bfd0d3cd36614bbf2898df254ba19851a6cc449752378004d1ab4041eaf894efde90a997c9c69784903c563cf7e908caec197ab3aa5ec6fa8ccdebb01409365a7ecd8e80ce15bff1e0659bc235f2ad63c061e89d61afd876f4c2ae30933ac36af37c7ec67cd7d2e49d6675054932624ab4a2da3a81db36819c7f089a7bc00a620e86e1b9a427a7f7cc9b06191d638e96e47b0bb69a4726ca60238b4c3bbe186a1b449a4efc111e7b5855ea1c5acfb3aa22942800125fe56ac1919d3903a7ec834157aca5fb55dd1549417e89960e0ec095f427f876df80cb90715fe64d5b2d6030629c068ab22ac71954f6af7f73483714276e36212623298eaa3bacd44f3d459bf469a52e715cef3f53f46129cb30f1d80454aeb51a4344e5ab15329477858375e6c1f51765af18a824f3b879def8f5e7c4a37c909888be612496fd2f837a44d53d4b56dc369ce7740c4949f82c6ecbbc767302daa5963d60bf7ac71a706484e4e3cd103aed3b50d81ab5d474f485979be721f290de8399ccf0589c57b7d2f3a121d2d2ffafdcc406b23790d53855f23f9e829e80403d4eb7a21816de9192182c921244dd86c3ceb2a1ecf5a7db5e2b6d6375faeda64cd77c91f463611f3880a52a7d9eafe7c32ba251f8ae187fcb38562319091687359caf61ecf88b712fd977776dd08c57dbea9c987de03f492a5beb73b1dad8ed4b7270795fcc9f2dd3f30de098105bf453e821675400daff38a10e3fc8949c168e1d9ef726f8c47100219782ce930fca48615e40e2c42d293a519ec83a9d619d2cbbfd5d6d84758a27eaa7dc6084a2f73b214f9d81d8e63e1864313091d69f9cd88b88b6301b02a6002e9b9043aa642664bed53fe5c669b3c20b50287a1f48bbf10dfc185ba0cc08e46428457febb8286213d6232c4f865f82be0c1cd57c31c6a96892f1634c9a0c92d3c0ce1f50b340321eb452654e088cf4537a143073f3b6fcb89161d2802f6a4551a7ec29f1d2c08bea3ef2973d95c46aec227f65fe79e56960ababec746e23e1d9bf38dcbd3118b3223b0e28e5b99f58b445a085c2adecf668a3c75a95ba9b52d7f68835e1ab70415f1479bfa057a7c6837af8bae5c4e97a2cd85e1d81bc07d2319615bf7b45728f96d9d3bd272f1f5a896ab43bcfc44f8c64460ff40cedf7bdc13b12161281abc620c9cc8b4a56282383b3589ad6c047fb8b17df7c1859e63398d832f03ff8c5a76b496aeb72793dee3738f1121e9185f8d39a31f0d0d47ec4fdcc28ccc20f8341e6c4386d215cd300a357fc5773b1b3ceae1e74dc3a5b7808d74f4a33d0f9f6497d92dd2e197fbe6d10d93647256a612f07d5d247354675b502e139c8dfbacf555a58da968eeef567b70c0ef55165ae56a96f12e23bc2acc416217841d65cfe6f0c35a550cc599bee3233a667c70b8edb81d4ddfb1d8c94fe8322a81580b05439cee535bbbdf7dad4d27c2106d39092336d0266716eb9d673feda9d11c4fb4c1f16db394a150c2e37aca80d8390079d4d7a3271509e67794ab575de6515a7b19bfed4c06fc1ab1acbb1ce1caa266e76feae4230208b245660c492f3212e72d7d5192a0f0575dccae754305b01834ec30d09ca8a4caf9fa2783fd6002baf802fb2b3d0f89f74465ea6afa4a889506406bf633561ba46079aeb64d4888e2e124d8b5936d5a4f73d01783673df8ede35205a0853d2c2f4823381786101b1676e25533c04ed2ee7014e59192b27b8b497e23268307c07e6144e7726c429e472832b57be3c61752ed6ce3e97d6ef97928a9c308dc0880a9ed5e58f41ac48d6dabbc18b931336af7b4cf7d94f2b0ed2065270df230cd7ccf953bc44c1f5fc86054d75fc9318ad52e6ddddb84dbd1279cef5b9ca214e91b5547125364b012b3a8ba9bbbf89885a57093ebf2e9056fba012029e1a3ec62f55295cfdf2c23a04fd5596afd6132801d17733ead9dabd4cd8e618ec04ad774890c27daffc7d69efd647f6de59e6dd88b27ccffa2ce3f311d0f0ff0d93f8c3c5048c6b0420e1c1baba0afb2b26882fc0ac106e2b1e9fbd6f5e4e750ed9a238b3edfede709a5169641e87a3dd8ba4723f453c32716ab969731f43ed66f8ee6ef4be0365c64c2542f8e9c737d9c8f6a19e9d63ba15f1cf231b9c952551d97632189bd1a7dea68de10ac09189d319c36beea2895d42f66978f46e413cebc961665a6bf6f001fabb88f4ed8cd6a8cb37fea266bbeebb7351d0ea4eecb3a31f6ba5fbe91492a1f3d9c5ffe9d6cd64c600c69f5e0fef5f5869f268f3461a843d94668478e49e3c4350396b7c51663b6cff7482ed4d0331d06fe340d78ee8c91cd87a9a6f8b4ea7e9b378cf11d3323803e0e7c25e9df1b45ca58aed80dee544588c582e2619f51ab0a2c1582678a19a0b68b83286b0a636b5effe6be12881fad968b94f4cd066cff0b092df9dd0254b2704b13e29c9c9c5c5caac6be76d4ab0e6552fbfeee4deaab040ba9522a0729f19c9e60d6804620c75f0cdcb494ecef63dfe585be4a5fea67ac657b149afe3b1aa104bd710d9d31f15196d70e8f6b2e4dc6d962ee324bcdfbb576a295cdc668f27cd4e95416d444a1b26e240a8856e0911fcb305897b0965e1377ab45dd1170a625ccc1b2abfe2d138cac95d927372fef28688d03d34f47fa104b2c843af07a61850cb16ffc4dc788c6f5e0b72cec1455f78d6407b400948f2c66b6a452504e45d3585cc804d6906f4a6c6f19e078dfd5a52719d17cfc227005dd1c5782999a5cde1e6af3865d923aa069d626b2816bbd9d2970e5be3ae99f8f0f3fbc177d8570d026a8bc780bb3faaadfd6bc5b6bd29f99f4c4201a679c5432fb983b3dd4ba496c3dee13cbedf0b8da4518b8522ad0597dc8eea99d40982ed37ab88d64479f47f6cbf046b53d01c453735b5ffbfbdbc54e3c339d5ef4a6d707f7d8bf78cd33e884facdb6a1596279824ca8a6c49435f7d96c10d98a733916f5d1ecb08e05f37ffb29a51694390fb35045316498222f181957468ecd19e885e1ad489ef1b478cc15e752a5a9b76ebe819f921097f9ad1077eab360cf0c6d63314634c9749778d7d5d1b3cfc69fb7d99c2b1b956f8c8235002306ee112ee5cdfbaa6afc76b6c53fd20f1d0ac062f1b91f2c6c50b93aed63934665e93d6a11c74e37219b3d16482bb4d54845b5f147f08dc30cb89aa41f530889cda161527a4f3237c0e3ff7eec009e062aadff25bd56bce1c3a619822a430eef104fa31d88fad4ffd780327bcb96d500f149b400abf71eca38cb1573f535d39bc0bd5d223c1ccd816d386250ae5c00522ec039eb50f371cea65f9413cba94b70e9bc049c0466753baed2adfe85d2863a32a12fab3a9813d28671ad6d79c35580d7ff667e90ac28cb69dc62c33cd01cc6c8542c0f0b4a2cc8bbd80a1ff23f9578c594f177a3243534255fd700fc29e5614eca3513ae1fc15550cd1065288893163a4b706cfddb514760e8a6e032b7f1d1e5b2ec4e32727a91838223a695eda86f12f04a186d01f43bb09741339c627044b65236f4e2e8bd2eee4e87517c3fb918ed0c465a80745744776f08d8f9e2ab5541c27801c1c4bb9141a16ccf448137b7d797aa21a5b333c939564fb3def86179e2a6ad35583954bb268a119e3958b055e6af749da03af65e7640489af4d55c8c4848c9012ce6ec943dc8a434e03840d4824937c64f83ff1a09e4344e5d37d72984a599f544debb9de3f0fd8e58039b74e3dfe1b7da1e02cc5feac94cb5609f55d79d3c6832f42f841b55d83e987b1c50542748c2d61332057824953df8872a533f76ee63f13560dddaf9f41cf8c586063ac94d7e2aa3e1be15eec303e523a2382cce8480205e2092ac091ad5f84c0f4860b2ccc4d4242fc32075369c62abc50b14ccb7b8c6ee91965c5890ee44145d23b5756e9468142ef1e862d5f02952016ce8a3abfe241c9f62d9e6fb9b1dfa1f609362e15dcfcd6f168dc868220f269044c2a80a9bdab4df9019f2813d27723ec7532000bf0c9660765663a059c9ee3e089baca0cc9e2e0e030710f457edfd5f1a2db9ab43405f1ebd883d3780458e4e7b82717ee52cfc65b2c013665e916c26f76937c322f029de831e167cc9152d049cbea7d09daef8d83b87656ebe82990c601324bf688500859ccc8da6769aa8dd3b208e0299c647e1e8651c3860d733f8140f3402e2da66711fb088e889ef8f0fb8a75a7478064e76782fb35c3cd74aa47a37834d153c49198a6f0edc57a61512c7ac8cb1d80f00ecdb9b2a9538cc08249a9016445adcfc22c6f623598d1839759bfdfa990cb439698fbf08d80e78bc684ba86910a9d98564004b80c72e431fdbfb652fb123d04a5ef2a8b17efe0fb795b3451cb0679ddef080375b362daf97c6f5299a14e3a7b9c55ec4edb52c8973071b14e2072130e56275620ff9ee4a8952a0ec95bb6d180bf0606ee4fc8c018d3626032ca3149850b5af090fc7355702d6099e166d2b5c44d4f51d2fb4a621d582fb4c334580d8a5475e8bdff05383ef1544a8dc35ec5f7194c35560c296bedb7d6f845854421db561ebcca95a9598be5d8cc9a93957c185f45510be07308d8af3f38889125e86190ad662f90001ad66908c1763fb70195bdd34e0374d64d2b26576eee55f87eb411664f020689dbff66b64018e7a35904dda0dc0ea4052529e3fb0653b68c3b0a5e78f7e721cbd222af4850a2cf930f7fa1800195656cf7a42683cae21f48557f00d8f77ef4de1a9d4b2aa7ffcc587563f654cd8d8497a41fcbb7c6a983e8d07d6abbdb1aaddee7e9adfefceb0e02b4dd0484c6c5dab17e8604b9603ddf38b2a87128e38c7170bb2a1c208ce1db87dd967f0df919a3cfea795ca3939aec569c1bccb2b58bd897e945fde1ea7ecffd3aed6a85e7f7027ee50e309430e442f864b6e3f2cf08ce11814fd570fe1034d713e837821ff22f7fc01cfb5c6c49ccc29719009027b8d871c6d9217b29b6916b1576e54923bc1a782aaa9c6a3b0d6dc70709ee899b296bdd81daffd8604f18f15dfcd297b7138813fd1b80a7aa8146144ac016d9a86a9642fd16256d71ae9a37f02271e1742cabee3f7d6a52c185742258a0174871ee5be0ce49d1a04b95ff9f39644db98ba0d1819e9ce6f52c0c457a27388f66b70226551b3c798a9770394e2b671566ab699a956aae6d68858df5ab9b0a1d093cd238bfe37b45ba0c5b", 0x1000}, {&(0x7f00000000c0)="57979cb3fa7c526b3485507158e75565cc9f8382ac7c7dc867e8af3c35e827d23971b80091dea02e19b7ae2f0af1e30b9115c0a6e696e7277a383e5e", 0x3c}, {&(0x7f0000001640)="7823bce9e11fd18f2955b235a2c8427d5c1f42", 0x13}, {&(0x7f0000001680)="6685efed7c953dd21b8187e569516322033b8e1e09d53f5d0e9ef56a", 0x1c}, {&(0x7f00000016c0)='\x00\x00\x00\x00\x00\x00', 0x6}, {&(0x7f0000001700)="6b32be215523e0a752d6cb39b1f81ee5933acdb31a8f624dbde29fe3f34d413d16c32da90667e589de9f1aad565ef602d3839981cfd710042dc6c4a9852bc9003c75b71674654ce6c5a80bf4a03f8fa08e7e544aca9cbc9129ac810453270d14af9e7f05d86b745b084c7efe3780de4dfd745889df0d4ecc346db719f6be0b5420042a3c8b1f9fa23f306309fe109d2ba4a59d3d2f8e1aa7d896efb75f2d503eb05db85b216c100744209d941eaf58c01db9a43df44dd3ae6fc58adc18b39a3e0da6c01015db868098146d2b33997b3ec44ebbea4ba076528f8cba45753e167e501f14dc2c3b41b6eb51fe4c90102f2a29b89d53971fdd3bbaec808c00f3530f5a498c60efd2c609a2a762e7b02fcb3af6d0e8a113242cafb8d426a0a9af0852bda7220435398191cd7dfe9a405f960dffaedd2d3a2d1fbdfba5793b297f15876de8fa7ecbf3942b7d57716013c13836c8447fa5a00f8eb7c346830bcd018ea792eb7a26e282b045a527c801abfda85428f95f95de80d60b9d0662a46ca82e7885ee97ca6b5339f9bb74eb216cb8437f7679a54284fd0dfa830d7a34aa4aa69dcbdd09eaf6ba2eeb297733d6ac8b3995b9d79548c1d96f365d5f5c171fb61f920e4820b9a3a0b66e44d973f7459e408fe9a8b1de1a52aebf407b8fb3e63ff5cb5b01a65286ff9af3a4fbc03f96e796fed3b5ecb35fafe8bd34b4b8e6fccd451851fcf10e0c98b0bbdce906373b30fe45f266daa12095b95cf1c9219a260ebb674d6ff3a58bf544fd3ee22ad8d64b784ad019c7652b4756e817bd6a7b2f7d32b28f8793467f9e5023f88ac4821068dd23266352e54cd217567f347370470bbfa4688766d4c980b7e18e8f7f3403ece622e15f9e94b544d06d28440abb4fed3abf1755a366fcc40ab5aab7b3b80262aa01fc1f7067a17b5867c07f1d704d35b880f52d8f19a7d1e3d3a28f021a7439eb351c1f28d486b34c5898aa7b86feba9fe83438dd6eb336347882dc5e9397fd041d0767d2ffc7f16deadbfcf36ab650f2619413e53cfdb9f5edf0a3858ec4846b9971f83ed6e0a0a7728994b21f6ce725465c8c110d206fb62cddd148d795548d62d1f639e65be047208166c51fead56e0cebb276f07da71652705ff45534a14c80b508593f450247d38af828a017eccac869e4f6f3a16cfe42391509fb8b5ea85c6a2cda2b665dd90b107916c4766477386db2c342b813dcb9fde11c23a01345b67451297af9f62f70b6b53028e30b3fa3ca0464d3ce37d69dea26de4a1be5fb3a6ef583de941c81055a24f3dd3817ea18eaf69d3b5a35a7d5be31e03031866c81c574d32f293688a719259ad01c03e17d2096460a5736f9f17f60ac2783a60ec8e294cebcee8a42d27ee580ca3cc576890b9e313d5300eb285ec61e6023fad069da3a566a3a0bb478fb6ad830d86b2236777be235900f8cd0eabc6b5faba57cde1ef2d4d3e790a6138c39e9688db5e79cabf2afdd87114e8bfaf55e0bbd2b6557b59c9091432b6756ceff12db94296da7825b5adf3ee0f5ecce4b38be87aeeb9e7d569855a3892a32f6f1fc05c9d077fa595c3be7c31618b6f416b152f475aa699e4853e4d8726fcd821f7c42325c7b922568f7b46f3df46e52e08d06745b560fbd9169901b241fed5a55a20ec84e978ac1023b037ce43f7a901fa60345153b107c3ddcea0e728c260a32a2283bf12ad4082b499dafe1171737995a9ebc0326c2ddbf2afb4f27a421368a1cfb15be66261e85facb80f93fed8a329e822de6c772a87b06d2b9ac67aba87b376b96dc7ac6966954fd3b1dde5707fd854d69c4a03e559f5069e8dd68247b654369194b8eb117fc6088091b0829f0eacd806591d2ee037df177cef5fc2988ee60155bb08cfa6b9ad98e4a381957fa538dd75fffc2dfa0c0313b80e6537e81816ba4a6adf5472a8e64b9c559b607043fc9915a563348f0934396c70b379a1cba369b286381951c1539d18cefc4df2c7774b0e47edd309b7ea83db7b7117e677a81a5f33f24c0f4b4850afd1a67580264512d6c71ab02b79c2da16056ef4ff3a7e31d68bc4da8c2407f94fdea2b89082656433c81a79f2631a54393df52cdcc67c23eaafba6f0c64193f93325c48f4714d438e110f8d51ba2638ee802ff9a117d0fd79917ffb16946b76108608126dd88ac69f2025d3f3a6a997d34c4c5f77ca2cea1514a42c1d49ba9a7a0e1cfe785288dc61028147045e5b84f124bee860f70b50946db1bde8d35bb4577b91d5af0a64e830f2c196634c1041399ffb114c1d38366428236395a82f5c24b0cb63d3bece0164a228b143aff624b496c6d4241eda7564741f3de3aa070caa81597318f7bc5f3c78dba3632ada67cfcf34692df3f5208da51255f8cf55ee71daca4dfc99f390853dedda1168c092893274c5e4aff6a1afee46b045ff284f1b8790ce466a5f9d8921226ecf1162457066db8aea8856988a0b714cc081de61480874da5ae5a6d369a000b648230d2af1e53121ee5e9229c86799abad757a6e073277c8fb9b78154edd4277bef4531c5d394878c587fb0e85a1dd7656b8407485f4cdbfc91d7408aa4770d1f81ff97f8ce44020572a123a285764e33f640b13948513878b9aef2e3f00e4ec459930874f1df65c6d62812e45f8af2b0d088bf40317756b8124621ed2ae3c08bd9aaecdea0b33132a37f55fa62d8d4a2109a876b6751955d2d0e6e0de81a30f75c2c173ebfa43f1f1fef9020a4538726d10c3cf1b5164a40e66d17b2089c30c620be31dfcd712b25613444e0b6492608307b46cf824a2e519d1490c471312c5c97a2884bfcef13299e9c41213b13a843022ae7b146cb4ce5251d364d067de8af4bb05b9dcb9105b5202f006075bec0ff18073acfc985ac158236178f0d327b515704f90736637770369dd4e9113b7deabb6eda2fb0fe1e90b3afc3ec6902bcfd9710c79b27b119a8635315ea864b68d46114f8cb1e92d34a1946da05b27d4b6ad55ace993b47eb49f5c8858cfbefc0b70b11f410d57306424e829104e7bcca2d1a6906f304f66fd35ae0e772386ca5952783518cc06f9bb75a3045662277491988c9e999b755d7a5cde318b4e904f8bd2c18728ff7ddff30c56e729f4cbdbabce7d61fd5f0662a0c1469d35a353ed68b4816817cec83ae6712424b8e02415d600793c68f3bef8c6f3e456ad806651067fd076d31619321a3a4639008aff64adaf1a8a7e4a48c5d2b247825109f2cdd74a4aa9779497071cf545a38533f5360d78c222fcdf616e3f615ec5116737936da43dbf6b2804247de152f7666fc38276e00e0c5e09c68acc7151c3763a47dcfc41b7d2448227556c803d18aafea91b0eb0433c4171e31b1b8343ce3617e4d3823c17b3a42c1b8d7a501761d7360226aaffd3cd7c7a55c005fc2ff6bec21be2235b122b26640e0f201aa9b6b8cea458c2694bf7b20d0c3740d587ed3cbdc70aa4059390232ebf0cd9053c0c708c237c85251348c636f5ca3d558d853d2293f6d8b45a716504d471f3d523557fe3df5cab03534f4212f1db652e6683cae67d7e46efb8ffe2de0d14dba7eac5253f2365c6d9415462dd5a1b341923484345b371c1ce62d9a5cfaefcd43983c2b2eadd0f2fd33d68964ea7595d304993aee9d665b9152d2f2b2182567810aa5b1c348a0d6ce7dcc27f3a2946be67b5651b17aa47c2999e7910cace94dd2e44b6a3de08c2c1a75761bf0d9282a76f70331006dab91c8f23e038d9cca4734ef4cccf193fa9f8f27bb8371a638290d42d6602faede0d251dd76c87c6c3ecb30e85ecd4eedebbba4578bdda1759885654c085f2d7521aee3b8d8a9ab2a30e8e533383864928da7f9a28d33d7ad73ac259d94cc2f782efd363464462d7759ff258e9dc3b8ef46c88f44c9b1b47bd1a7a1d3aa78f6ae38bf13387c1b590cbd510832cce5e25b0f06d37e528b682b8761b9e96613b57ebf4888506a43d0bd4d178b005d3d1f216f304f206038bc324fce1ad6c96606d835b3b13b45375e899dca7154f273d30fac6622419612da1a495a6c6757eb8285808d3d6ebfd8986c3380f4a0b5f00a8c57f6dd240cc36990914724a0a5b096abd00d1c50cef65604bf77fd02f567153ce831deb220cf9a480c15c214062406bcad4e36a1e6d03b3ed163f3db83d5c68d64c0d05e3b809ef738b02d045e89052bea2d7386ac0e04f6e228b27de6f7084873d1e22ffa4a8cb645c43cb379402d4814c9cfbd56b94f6517c3b39764cade56131ec103b0eeabfd7d461f1c3d5fef9b1291daaa7b2dbfb3abec51589c691d5f70920b1afa7917905d82d8e56f7aacfcff04aa7391814a65049cadc659f2473203e45bc126a149aafaa295103d8fd105fa139ab095750d2e3624e17046ad4563733917008d583939eebc20f51fe8f141468c2f1234642ffef5f135318c971ef84c59ce81c18d32a3905cb43cf40bb38c4e1669b6c9cc626664dadae763908da5dbb33a84e70dadaf61efc180a1ef4d7ae5fd5f0ddd4241e0b01cb02d304aae1419852af92110f981fd491968f6ab701e4ffe5f597f064f23d45704d3b83c91c7fd8184d535b9a087ae4198e59dedd1c1550305d258c417212984b8f982827fc731174587e4611cc1f5fbe119aa6fa8bf2874fc37dc2d4aeac8be2e6de98c4dcb56b6f966881ca35839013859b7b9de4efe544ae3b495a3587932c6112dd40d3aa4f8b737a7792ebe013a3a3282796a662f4a28b017441893aa102132e3e66f17ce7968647249e0eed5d7f89bf94d5b7e129661831bd664e68af6eeeddb0233f0482a0a71ad9c9fb750bfeaab454215de30d4aa28d5a23a7fcb2b5d117a033d12cc9d46d9ef860eb2248fb1944d7a68c3598cee8fbc45973b79e344c40474eee9e1184ee520b76c9b3b2c741808b2d03e9156e3dad1b98d3d02f1e9df590127d8152d226c1cd896d06af907aa944ee871d509d243db8bce600fab549e5ca32ac9f333b53691e31c1336fba8cf2d893f1d1567b92c582fafee35e9d774ff70ed0d8008d327b86b24839ae5c28cf6eea827f8ca4d95749d138570fb8f2f50cff24220e074452e415be91ca5e63f514b1c11f464b60de0e6de4671c4d19f0d60cf8d84f04dd99eb33195e9b93c5e92c38181a9a923d382220d8cdb273084f5169ccc102da16bfc2366b26963ec5e5887ff3304f29d9bf2e801a443fe76349d8c7419b29ca5d0da1f5d2512504b9a914b192736574dec4efca434d715fff84192ddec0c609d6bd7e58f85f79ae864acf5b62576003a735940a6629c705e00bf27ab2c986fd8b568045d1d99c73eddeb0c8d75ee8ed3fc288f3efbbb45d07b3b21f4b4250f8ec951793b205fc13c067d9a1e00b742319288e3d3cc2ff718d909dbad58a23060ea3d51b19d375f42ce106f8f2d0bef62422df78ef8ea9fc97ac988b695b97daf735f1524b1c719e11d0d2281475536b2dd194572757dd5af78c1c1024d2939ecaa6efdb8c44262ee7c0ea61ff7f2813829f6e9adfa44082715dae09ed848930fbbe0357a369e1380f84ed3558b106b0165f19f8beff53f750a2255c2942bbc2a3515219612de8e3108be07f2a353db5cbd14e2a2f74543832f80f062e7a09ec", 0xf90}], 0x6}}], 0xe, 0x0) 00:56:18 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x10e, 0x0) close(r0) write$binfmt_elf64(r1, &(0x7f00000007c0)=ANY=[], 0x10e) 00:56:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:18 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x3, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) [ 2386.111349][T21990] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2386.139010][T21992] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:56:18 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0x1) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f00000000c0)=0x1, 0x4) sendto$unix(r0, &(0x7f0000001c80)="a4", 0x1, 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000600)=ANY=[], 0x1) recvmmsg(r1, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000440)=""/184, 0xb8}], 0x1, &(0x7f0000001980)=""/186, 0xba}}], 0x2, 0x0, 0x0) 00:56:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000030701"], 0x14}}, 0x0) 00:56:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="240000001c0007031dfffd946fa2830004000a0009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) [ 2386.347591][T21990] 8021q: adding VLAN 0 to HW filter on device bond344 00:56:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf2531"], 0x74}}, 0x24000800) [ 2386.534532][T21997] bond344: (slave gretap262): Enslaving as a backup interface with an up link [ 2386.534983][T22049] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 00:56:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf2531000000080001000900000008000300", @ANYRES32, @ANYBLOB="0c0099"], 0x74}}, 0x0) [ 2386.592401][T22021] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2386.625875][T22050] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2386.775320][T22021] 8021q: adding VLAN 0 to HW filter on device bond279 00:56:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf2531000000080001000900000008000300", @ANYBLOB="0c00990008"], 0x74}}, 0x0) [ 2386.866034][T22029] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2386.889953][T22020] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2386.967340][T22088] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2387.153817][T22028] bond279: (slave gretap200): Enslaving as a backup interface with an up link [ 2387.194978][T22039] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2387.214606][T22096] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2387.350333][T20499] net_ratelimit: 97 callbacks suppressed [ 2387.350354][T20499] bond279: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2387.382045][T22043] device bridge289 entered promiscuous mode [ 2387.404779][T22043] bond279: (slave vlan179): Enslaving as a backup interface with a down link [ 2387.430985][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): bond339: link becomes ready 00:56:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xc4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x94, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x84, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:19 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x2, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) [ 2387.472485][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): bond274: link becomes ready [ 2387.592141][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): bond340: link becomes ready [ 2387.645547][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): bond275: link becomes ready [ 2387.675870][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): bond341: link becomes ready [ 2387.720363][T14514] bond275: (slave vlan175): link status up again after 0 ms [ 2387.724079][T14622] bond274: (slave vlan174): link status up again after 0 ms [ 2387.757536][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): bond276: link becomes ready [ 2387.768978][T20503] bond275: (slave vlan175): link status up again after 0 ms [ 2387.791216][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): bond277: link becomes ready [ 2387.800201][T20503] bond275: (slave vlan175): link status up again after 0 ms [ 2387.810484][ T2441] bond274: (slave vlan174): link status up again after 0 ms [ 2387.812320][T14622] bond276: (slave vlan176): link status up again after 0 ms [ 2387.830846][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): bond342: link becomes ready [ 2387.857253][T20092] bond275: (slave vlan175): link status up again after 0 ms [ 2387.873737][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): bond343: link becomes ready [ 2387.881920][T20499] bond275: (slave vlan175): link status up again after 0 ms [ 2387.887755][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): bond278: link becomes ready [ 2387.898124][ T2441] bond276: (slave vlan176): link status up again after 0 ms [ 2387.900189][T14622] bond274: (slave vlan174): link status up again after 0 ms [ 2387.923841][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): bond344: link becomes ready [ 2387.932228][ T2441] bond275: (slave vlan175): link status up again after 0 ms [ 2387.940575][T20503] bond274: (slave vlan174): link status up again after 0 ms [ 2387.967632][T20499] bond276: (slave vlan176): link status up again after 0 ms [ 2387.989941][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): bond279: link becomes ready [ 2387.998392][ T2441] bond274: (slave vlan174): link status up again after 0 ms [ 2388.005827][T14514] bond276: (slave vlan176): link status up again after 0 ms [ 2388.013603][T20503] bond275: (slave vlan175): link status up again after 0 ms [ 2388.063451][T20499] bond274: (slave vlan174): link status up again after 0 ms [ 2388.063473][T20503] bond276: (slave vlan176): link status up again after 0 ms [ 2388.093280][T14514] bond275: (slave vlan175): link status up again after 0 ms 00:56:20 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/mnt\x00') [ 2388.112731][T20503] bond276: (slave vlan176): failed to get link speed/duplex [ 2388.154800][T20503] bond275: (slave vlan175): link status up again after 0 ms [ 2388.168159][T20499] bond274: (slave vlan174): link status up again after 0 ms [ 2388.175505][T22109] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:56:20 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000240)=[{&(0x7f0000000000)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240012001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000440)="0baba02e95c8c0408265", 0xa}], 0x2}, 0x0) [ 2388.266745][T14622] bond274: (slave vlan174): link status up again after 0 ms [ 2388.304356][T20503] bond275: (slave vlan175): link status up again after 0 ms [ 2388.369561][T22109] 8021q: adding VLAN 0 to HW filter on device bond345 [ 2388.395021][T22111] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:56:20 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000006ec0)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000001600)="57979cb3fa7c526b3485507158e75565cc9f8382ac7c7dc867e8af3c35e827d23971b80091dea02e19b7ae2f0af1e30b9115c0a6e696e7277a383e5e", 0x3c}, {&(0x7f0000001640)="7823bce9e11fd18f2955b235a2c8427d5c1f42", 0x13}, {&(0x7f0000001680)="6685efed7c953dd21b8187e569516322033b8e1e09d53f5d0e9ef56a", 0x1c}, {&(0x7f00000016c0)="23c253b71bff", 0x6}, {&(0x7f0000001700)="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", 0xe50}], 0x5}}], 0x1, 0x0) recvmsg(r0, &(0x7f0000000380)={&(0x7f0000000240)=@pppol2tpin6, 0x80, 0x0, 0x0, &(0x7f0000000300)=""/79, 0x4f}, 0x40000002) [ 2388.434884][T14622] bond275: (slave vlan175): link status up again after 0 ms [ 2388.442333][T20499] bond274: (slave vlan174): link status up again after 0 ms [ 2388.482175][T20503] bond274: (slave vlan174): link status up again after 0 ms [ 2388.492760][T20499] bond275: (slave vlan175): link status up again after 0 ms [ 2388.541157][T22111] 8021q: adding VLAN 0 to HW filter on device bond280 [ 2388.578627][T20503] bond274: (slave vlan174): link status up again after 0 ms [ 2388.578737][T20092] bond275: (slave vlan175): link status up again after 0 ms [ 2388.616732][T20092] bond275: (slave vlan175): link status up again after 0 ms [ 2388.642646][T22112] bond345: (slave gretap263): Enslaving as a backup interface with an up link [ 2388.652321][T20499] bond275: (slave vlan175): link status up again after 0 ms [ 2388.670095][T14622] bond274: (slave vlan174): link status up again after 0 ms 00:56:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000400), 0x0, 0x4000) 00:56:20 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x4, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) [ 2388.716908][T20503] bond345: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2388.748336][T22115] bond280: (slave gretap201): Enslaving as a backup interface with an up link 00:56:20 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x128) [ 2388.782505][T14285] bond275: (slave vlan175): link status up again after 0 ms [ 2388.793369][ T2441] bond274: (slave vlan174): link status up again after 0 ms [ 2388.811331][ T91] bond280: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2388.856453][T14285] bond274: (slave vlan174): link status up again after 0 ms [ 2388.869286][T14514] bond275: (slave vlan175): link status up again after 0 ms [ 2388.891872][ T91] bond274: (slave vlan174): link status up again after 0 ms [ 2388.904974][T22118] device bridge350 entered promiscuous mode [ 2388.916201][T14285] bond275: (slave vlan175): link status up again after 0 ms [ 2388.936782][T14285] bond274: (slave vlan174): link status up again after 0 ms [ 2388.936793][T14514] bond280: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2388.938157][T22118] bond345: (slave vlan240): Enslaving as a backup interface with a down link [ 2388.954629][T14514] bond275: (slave vlan175): link status up again after 0 ms [ 2388.954930][T14514] bond345: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2388.959898][T20092] bond274: (slave vlan174): link status up again after 0 ms [ 2388.973219][T14285] bond275: (slave vlan175): link status up again after 0 ms [ 2388.999544][T20503] bond275: (slave vlan175): link status up again after 0 ms [ 2389.027339][T20503] bond275: (slave vlan175): link status up again after 0 ms [ 2389.057282][T20503] bond274: (slave vlan174): link status up again after 0 ms [ 2389.057426][ T91] bond275: (slave vlan175): link status up again after 0 ms 00:56:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2389.080170][ T2441] bond281: (slave vlan176): failed to get link speed/duplex [ 2389.098887][T14514] bond274: (slave vlan174): link status up again after 0 ms [ 2389.115567][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): bond345: link becomes ready 00:56:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:21 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2389.137357][T20499] bond274: (slave vlan174): link status up again after 0 ms [ 2389.159758][ T91] bond274: (slave vlan174): link status up again after 0 ms 00:56:21 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'lo\x00', 0x0}) [ 2389.199471][ T2441] bond275: (slave vlan175): link status up again after 0 ms [ 2389.213057][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): bond280: link becomes ready [ 2389.248387][ T2441] bond274: (slave vlan174): link status up again after 0 ms [ 2389.258797][T20092] bond275: (slave vlan175): link status up again after 0 ms [ 2389.306757][ T91] bond275: (slave vlan175): link status up again after 0 ms [ 2389.352576][ T2441] bond274: (slave vlan174): failed to get link speed/duplex [ 2389.407609][ T91] bond275: (slave vlan175): link status up again after 0 ms 00:56:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf253100000008000100090000000800", @ANYRES32], 0x74}}, 0x0) [ 2389.482446][ T91] bond275: (slave vlan175): failed to get link speed/duplex [ 2389.508362][T22221] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:56:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x74}}, 0x0) 00:56:21 executing program 4: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x0, 0x0, &(0x7f0000000040)) [ 2389.748941][T22221] 8021q: adding VLAN 0 to HW filter on device bond281 [ 2389.772152][T22222] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2390.025007][T22222] 8021q: adding VLAN 0 to HW filter on device bond346 [ 2390.104916][T22226] bond346: (slave gretap264): Enslaving as a backup interface with an up link 00:56:22 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000000000)=""/83, &(0x7f0000000080)=0x53) [ 2390.290806][ T91] bond346: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2390.307059][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): bond346: link becomes ready [ 2390.364646][T22227] bond281: (slave gretap202): Enslaving as a backup interface with an up link 00:56:22 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) 00:56:22 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x7, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) [ 2390.454760][T22232] device bridge291 entered promiscuous mode [ 2390.477515][T22232] bond281: (slave vlan181): Enslaving as a backup interface with a down link 00:56:22 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000040)='J', 0x1) [ 2390.547823][T22329] __nla_validate_parse: 11 callbacks suppressed [ 2390.547847][T22329] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2390.578060][T22233] device bridge351 entered promiscuous mode 00:56:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2390.601115][T22233] bond346: (slave vlan241): Enslaving as a backup interface with a down link [ 2390.677214][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): bond281: link becomes ready 00:56:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:22 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind(r0, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80) 00:56:22 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x8, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:56:22 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect(r0, &(0x7f0000000280)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) 00:56:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000140)={'nat\x00', 0x4, "7786220e"}, &(0x7f0000000240)=0x28) [ 2390.928446][T22345] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:56:23 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000100)="13", 0x1) 00:56:23 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @multicast1}, &(0x7f0000000040)=0x8) 00:56:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x4000) 00:56:23 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000001140)=@file={0x1, './file0\x00'}, 0x6e) [ 2391.124218][T22345] 8021q: adding VLAN 0 to HW filter on device bond282 00:56:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) [ 2391.231720][T22353] bond282: (slave gretap203): Enslaving as a backup interface with an up link 00:56:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) [ 2391.316925][T22372] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2391.501421][T22372] 8021q: adding VLAN 0 to HW filter on device bond347 [ 2391.536265][T22380] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2391.589424][T22387] device bridge292 entered promiscuous mode [ 2391.614553][T22387] bond282: (slave vlan182): Enslaving as a backup interface with a down link 00:56:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2391.708897][T22388] bond347: (slave gretap265): Enslaving as a backup interface with an up link [ 2391.726789][T22398] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2391.881075][T22404] device bridge352 entered promiscuous mode [ 2391.891424][T22404] bond347: (slave vlan242): Enslaving as a backup interface with a down link [ 2391.903720][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): bond282: link becomes ready [ 2391.924784][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): bond347: link becomes ready 00:56:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:24 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004680), &(0x7f00000046c0)=0xc) 00:56:24 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0xa, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:56:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, 0x0) 00:56:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, &(0x7f0000000100)=0xfa) [ 2392.102231][T22462] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:56:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x1) [ 2392.197273][T22462] 8021q: adding VLAN 0 to HW filter on device bond283 [ 2392.287562][T22463] bond283: (slave gretap204): Enslaving as a backup interface with an up link 00:56:24 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000100), 0x0) 00:56:24 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)) [ 2392.414034][T22466] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2392.453835][ T91] net_ratelimit: 24 callbacks suppressed [ 2392.453856][ T91] bond283: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2392.502169][T22511] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:56:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:24 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) 00:56:24 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect(r0, &(0x7f0000000280)=@in={0x2, 0x0, @local}, 0x80) [ 2392.787505][T22511] 8021q: adding VLAN 0 to HW filter on device bond348 [ 2392.856440][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): bond283: link becomes ready 00:56:25 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, 0x0, 0x40000000) [ 2393.052209][T22515] bond348: (slave gretap266): Enslaving as a backup interface with an up link [ 2393.082195][T14285] bond348: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2393.123382][T22518] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2393.272471][T22520] device bridge353 entered promiscuous mode [ 2393.291786][T22520] bond348: (slave vlan243): Enslaving as a backup interface with a down link [ 2393.320848][ T91] bond348: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2393.344629][T22566] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:56:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:25 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) [ 2393.412890][T22566] 8021q: adding VLAN 0 to HW filter on device bond284 [ 2393.490439][T22568] bond284: (slave gretap205): Enslaving as a backup interface with an up link [ 2393.499636][T22574] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2393.537457][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): bond348: link becomes ready [ 2393.540841][T14514] bond284: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2393.590716][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): bond284: link becomes ready [ 2393.638735][T22575] device bridge294 entered promiscuous mode [ 2393.672082][T22575] bond284: (slave vlan184): Enslaving as a backup interface with a down link [ 2393.725123][T22626] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2393.742596][T14514] bond284: Warning: No 802.3ad response from the link partner for any adapters in the bond 00:56:25 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x500, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:56:25 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) 00:56:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f00000000c0)) 00:56:25 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) accept(r0, 0x0, &(0x7f0000000000)) 00:56:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2393.912498][T22626] 8021q: adding VLAN 0 to HW filter on device bond349 [ 2394.170778][T22629] bond349: (slave gretap267): Enslaving as a backup interface with an up link 00:56:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) accept(r0, 0x0, 0x0) [ 2394.234408][T22630] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2394.243878][T14285] bond349: Warning: No 802.3ad response from the link partner for any adapters in the bond 00:56:26 executing program 4: epoll_create(0xacc2) 00:56:26 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, 0x0, &(0x7f00000021c0)) [ 2394.407749][ T2441] bond349: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2394.463156][T22652] device bridge354 entered promiscuous mode [ 2394.500906][T22652] bond349: (slave vlan244): Enslaving as a backup interface with a down link 00:56:26 executing program 4: r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x77359400}, 0x10) [ 2394.522146][T22678] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:56:26 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5451, 0x0) 00:56:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2394.656001][T22678] 8021q: adding VLAN 0 to HW filter on device bond285 00:56:26 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2}, 0x78) [ 2394.790439][T22681] bond285: (slave gretap206): Enslaving as a backup interface with an up link [ 2394.876750][ T91] bond286: (slave vlan181): failed to get link speed/duplex [ 2394.884541][ T91] bond285: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2394.892774][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): bond349: link becomes ready [ 2394.954281][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): bond285: link becomes ready [ 2394.984542][T22682] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2395.084889][T22684] device bridge295 entered promiscuous mode [ 2395.118687][T14514] bond285: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2395.144967][T22684] bond285: (slave vlan185): Enslaving as a backup interface with a down link 00:56:27 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:56:27 executing program 1: socketpair(0x2, 0x6, 0x0, &(0x7f0000001640)) 00:56:27 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8982, &(0x7f0000000340)) 00:56:27 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, 0x78) 00:56:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2395.371985][T22735] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2395.528462][T22735] 8021q: adding VLAN 0 to HW filter on device bond350 00:56:27 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000080)=@framed={{}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f00000001c0)='GPL\x00', 0x1, 0x8a, &(0x7f0000000200)=""/138, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:56:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}}], 0x1, 0x0) [ 2395.745406][T22738] bond350: (slave gretap268): Enslaving as a backup interface with an up link [ 2395.767407][T22740] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:56:27 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_BINDTODEVICE(r0, 0x88, 0x19, 0x0, 0x0) 00:56:27 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000001c0)='GPL\x00', 0x1, 0x8a, &(0x7f0000000200)=""/138, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 2395.824871][T22746] device bridge355 entered promiscuous mode [ 2395.889932][T22746] bond350: (slave vlan245): Enslaving as a backup interface with a down link 00:56:28 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/1129], &(0x7f0000000340)='GPL\x00'}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x2, 0xe, 0x0, &(0x7f0000000040)="725cf8fdb649533fb531adc3054d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) [ 2396.073400][T22789] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:56:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:28 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe2c, 0x10, &(0x7f0000000000), 0x32}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x0, 0x2e, 0x0, &(0x7f0000000040)="e1865d0d", 0x0, 0x1a7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 2396.201590][T22789] 8021q: adding VLAN 0 to HW filter on device bond286 [ 2396.270478][T22798] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2396.337506][ T9302] IPv6: ADDRCONF(NETDEV_CHANGE): bond350: link becomes ready 00:56:28 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:56:28 executing program 3: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x8) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r0, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r1, 0xc0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 00:56:28 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r1, &(0x7f00000006c0)={&(0x7f0000001280)=@in={0x2, 0x0, @rand_addr=0x640100ff}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x3}], 0x1, &(0x7f0000000380)=[{0x18, 0x84, 0x0, "c6d6"}], 0x18, 0x3e8}, 0xfc) 00:56:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2396.444698][T22849] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:56:28 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x7, 0x0, 0x0, 0x0, 0x110, 0x1}, 0x40) [ 2396.652598][T22849] 8021q: adding VLAN 0 to HW filter on device bond351 [ 2396.764071][T22853] bond351: (slave gretap269): Enslaving as a backup interface with an up link [ 2396.818024][T22858] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:56:28 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x8982, &(0x7f0000000040)={r0}) 00:56:29 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, &(0x7f0000000040)) [ 2396.945144][T22860] device bridge356 entered promiscuous mode [ 2397.031299][T22860] bond351: (slave vlan246): Enslaving as a backup interface with a down link 00:56:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2397.175579][T22907] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:56:29 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0xc020660b, 0x0) [ 2397.409692][T22907] 8021q: adding VLAN 0 to HW filter on device bond287 00:56:29 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0x3}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:56:29 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=@framed={{}, [], {0x95, 0x0, 0x0, 0xf}}, &(0x7f00000001c0)='GPL\x00', 0x1, 0x8a, &(0x7f0000000200)=""/138, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:56:29 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0xc0189436, 0x0) [ 2397.637806][T22911] bond287: (slave gretap207): Enslaving as a backup interface with an up link [ 2397.647573][T14514] net_ratelimit: 4 callbacks suppressed [ 2397.647591][T14514] bond287: Warning: No 802.3ad response from the link partner for any adapters in the bond 00:56:29 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e0, 0x0) [ 2397.688925][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): bond351: link becomes ready [ 2397.712560][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): bond287: link becomes ready [ 2397.747873][T22912] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2397.838952][T22918] device bridge297 entered promiscuous mode [ 2397.852442][T14285] bond287: Warning: No 802.3ad response from the link partner for any adapters in the bond 00:56:29 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 2397.923127][T22918] bond287: (slave vlan187): Enslaving as a backup interface with a down link [ 2398.033862][T22956] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:56:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:30 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001800)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)) 00:56:30 executing program 4: r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="160000001a0081aee4050c00000f00fe078bc36f1600", 0x16}], 0x1}, 0x0) [ 2398.332844][T22956] 8021q: adding VLAN 0 to HW filter on device bond352 [ 2398.570111][T22962] bond352: (slave gretap270): Enslaving as a backup interface with an up link [ 2398.616111][T14622] bond352: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2398.626816][T22967] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2398.720538][T22968] device bridge357 entered promiscuous mode [ 2398.733712][T22968] bond352: (slave vlan247): Enslaving as a backup interface with a down link [ 2398.747765][T22974] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2398.809288][T20503] bond352: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2398.819801][T23029] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:56:30 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000013c0)={&(0x7f00000000c0)=@id, 0x10, 0x0}, 0x0) 00:56:30 executing program 3: bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x7, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x611b3f4a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe7f}, 0x78) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='ext4_allocate_blocks\x00'}, 0x10) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) 00:56:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:30 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5411, &(0x7f0000000340)) [ 2399.024923][T23029] 8021q: adding VLAN 0 to HW filter on device bond288 [ 2399.137744][T23033] bond288: (slave gretap208): Enslaving as a backup interface with an up link [ 2399.162671][T23034] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2399.235335][T20503] bond288: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2399.294458][T23037] device bridge298 entered promiscuous mode [ 2399.344115][T23037] bond288: (slave vlan188): Enslaving as a backup interface with a down link [ 2399.366874][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): bond352: link becomes ready [ 2399.381259][ T91] bond288: Warning: No 802.3ad response from the link partner for any adapters in the bond 00:56:31 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0x34}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:56:31 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x541b, 0x0) 00:56:31 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x2}}, &(0x7f00000001c0)='GPL\x00', 0x1, 0x8a, &(0x7f0000000200)=""/138, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:56:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2399.422455][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): bond288: link becomes ready 00:56:31 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8927, &(0x7f0000000340)) 00:56:31 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x4}]}, &(0x7f00000001c0)='GPL\x00', 0x1, 0x8a, &(0x7f0000000200)=""/138, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 2399.701714][T23086] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2399.812893][T23086] 8021q: adding VLAN 0 to HW filter on device bond353 00:56:31 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x2}]}, &(0x7f00000001c0)='GPL\x00', 0x1, 0x8a, &(0x7f0000000200)=""/138, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:56:31 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8910, &(0x7f0000000340)) 00:56:32 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x40086602, &(0x7f0000000080)={'nr0\x00'}) [ 2399.966462][T23091] bond353: (slave gretap271): Enslaving as a backup interface with an up link 00:56:32 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x4020940d, &(0x7f0000000040)={r0}) [ 2400.041337][T20092] bond353: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2400.092024][T23094] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2400.238957][T23097] device bridge358 entered promiscuous mode [ 2400.281618][T23097] bond353: (slave vlan248): Enslaving as a backup interface with a down link [ 2400.308324][T23111] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2400.323316][T14622] bond353: Warning: No 802.3ad response from the link partner for any adapters in the bond 00:56:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:32 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') close(r0) [ 2400.484495][T23111] 8021q: adding VLAN 0 to HW filter on device bond289 [ 2400.626569][T23115] bond289: (slave gretap209): Enslaving as a backup interface with an up link [ 2400.636644][T23150] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2400.706598][T23152] device bridge299 entered promiscuous mode [ 2400.741453][T23152] bond289: (slave vlan189): Enslaving as a backup interface with a down link [ 2400.762051][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): bond353: link becomes ready [ 2400.794890][T14514] bond289: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2400.836339][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): bond289: link becomes ready [ 2400.952356][T14514] bond289: Warning: No 802.3ad response from the link partner for any adapters in the bond 00:56:33 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf, 0x2}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:56:33 executing program 1: socketpair(0x0, 0x8000d, 0x0, &(0x7f0000000040)) 00:56:33 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, {0x16, 0x0, 0x0, @multicast1}}}}}, 0x0) 00:56:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2401.085433][T23210] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:56:33 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f000000b880)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}}}], 0x20}], 0x1, 0x0) 00:56:33 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x3, 0x2, 0x801}, 0x14}}, 0x0) [ 2401.227507][T23210] 8021q: adding VLAN 0 to HW filter on device bond354 00:56:33 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000040)={r0}) [ 2401.383360][T23218] bond354: (slave gretap272): Enslaving as a backup interface with an up link 00:56:33 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x3}}, &(0x7f00000001c0)='GPL\x00', 0x1, 0x8a, &(0x7f0000000200)=""/138, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 2401.424878][T23219] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2401.537271][T23220] device bridge359 entered promiscuous mode [ 2401.678921][T23220] bond354: (slave vlan249): Enslaving as a backup interface with a down link 00:56:33 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, 0x0, 0x45}, 0x0) 00:56:33 executing program 4: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x8) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r0, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r1, 0xc0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) [ 2401.784564][T23230] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:56:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000180), 0x4) [ 2402.005317][T23230] 8021q: adding VLAN 0 to HW filter on device bond290 [ 2402.173029][T23245] bond290: (slave gretap210): Enslaving as a backup interface with an up link [ 2402.200136][T23267] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 00:56:34 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf, 0x4}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:56:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_getlink={0x2c, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_PROP_LIST={0x4}, @IFLA_WEIGHT={0x8}]}, 0x2c}}, 0x0) 00:56:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000000040)={{0x14}, [], {0x14}}, 0x28}}, 0x0) [ 2402.309139][T23275] device bridge300 entered promiscuous mode [ 2402.386228][T23275] bond290: (slave vlan190): Enslaving as a backup interface with a down link [ 2402.406511][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): bond354: link becomes ready [ 2402.433867][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): bond290: link becomes ready 00:56:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f00000002c0), 0x4) 00:56:34 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0xffffffffffffffff, 0x0) [ 2402.484255][T23335] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:56:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x6) 00:56:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001540)=@l2={0x1f, 0x0, @none}, 0x80, 0x0, 0x0, &(0x7f0000001840)=""/203, 0xcb}, 0x8}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000022c0)=""/76, 0x4c}, 0xda3}], 0x3, 0x2020, &(0x7f0000005000)={0x0, 0x989680}) syz_genetlink_get_family_id$nl80211(&(0x7f0000005500), r0) [ 2402.796737][T23335] 8021q: adding VLAN 0 to HW filter on device bond355 00:56:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000004080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10021, 0x0) [ 2402.991802][T23336] bond355: (slave gretap273): Enslaving as a backup interface with an up link [ 2403.017138][ T2441] net_ratelimit: 4 callbacks suppressed [ 2403.017159][ T2441] bond355: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2403.074456][T23339] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:56:35 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x14, 0x14, 0x1, 0x0, 0x0, {0x0, 0x7}}, 0x14}}, 0x0) [ 2403.209385][T23347] device bridge360 entered promiscuous mode [ 2403.267397][T20092] bond355: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2403.317478][T23347] bond355: (slave vlan250): Enslaving as a backup interface with a down link [ 2403.391813][T23382] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:56:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:35 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x5, 0x0, 0x0) [ 2403.605289][T23382] 8021q: adding VLAN 0 to HW filter on device bond291 [ 2403.735212][T23389] bond291: (slave gretap211): Enslaving as a backup interface with an up link [ 2403.746616][T23393] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2403.759807][T14514] bond291: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2403.866972][T23397] device bridge301 entered promiscuous mode [ 2403.889828][T23397] bond291: (slave vlan191): Enslaving as a backup interface with a down link [ 2403.911643][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): bond355: link becomes ready [ 2403.942609][ T2441] bond291: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2403.969913][ T5785] IPv6: ADDRCONF(NETDEV_CHANGE): bond291: link becomes ready 00:56:36 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf, 0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:56:36 executing program 1: syz_emit_ethernet(0x2e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1, {[@timestamp={0x44, 0x4}]}}, @info_reply}}}}, 0x0) 00:56:36 executing program 3: syz_emit_ethernet(0x22, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast2}}}}}, 0x0) 00:56:36 executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@dev, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 00:56:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2404.081384][T23454] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:56:36 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x2, 0x4e22, @remote}, 0x10, 0x0}, 0x240480c0) [ 2404.349757][T23454] 8021q: adding VLAN 0 to HW filter on device bond356 00:56:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x2, 0x8, 0x101}, 0x14}}, 0x0) 00:56:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000a00000000000000fe80000000000000000000000000000000000000000000000000000000000000000000000000000000000000006d94a9b0e0bf339aeeb98a976c000000000000000000000000000000000000ab6e356ca48fb320c5bbdbf80000000000000000000000000000000000000000000000000000000000000000000000000000f9"], 0x90) [ 2404.527886][T23457] bond356: (slave gretap274): Enslaving as a backup interface with an up link [ 2404.548922][T23459] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2404.585232][ T2441] bond356: Warning: No 802.3ad response from the link partner for any adapters in the bond 00:56:36 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @random="30d5bf046c2b", @dev, @dev, @multicast2}}}}, 0x0) 00:56:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect(r0, &(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80) [ 2404.722564][T23463] device bridge361 entered promiscuous mode [ 2404.817553][T23463] bond356: (slave vlan251): Enslaving as a backup interface with a down link [ 2404.851605][T23487] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2404.873099][T20503] bond356: Warning: No 802.3ad response from the link partner for any adapters in the bond 00:56:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:37 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x1, 0x8, 0x5}, 0x14}}, 0x0) [ 2405.112255][T23487] 8021q: adding VLAN 0 to HW filter on device bond292 [ 2405.252891][T23476] bond292: (slave gretap212): Enslaving as a backup interface with an up link [ 2405.262320][T23510] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2405.281838][T14622] bond292: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2405.363756][T23512] device bridge302 entered promiscuous mode [ 2405.451361][T23512] bond292: (slave vlan192): Enslaving as a backup interface with a down link [ 2405.536260][ T3248] ieee802154 phy0 wpan0: encryption failed: -22 [ 2405.536325][ T3248] ieee802154 phy1 wpan1: encryption failed: -22 [ 2405.542586][T20503] bond292: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2405.654075][T28632] IPv6: ADDRCONF(NETDEV_CHANGE): bond356: link becomes ready [ 2405.706722][T28632] IPv6: ADDRCONF(NETDEV_CHANGE): bond292: link becomes ready [ 2405.816665][T23556] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2405.955081][T23556] 8021q: adding VLAN 0 to HW filter on device bond357 [ 2406.078633][T23567] bond357: (slave gretap275): Enslaving as a backup interface with an up link [ 2406.100704][T23570] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:56:38 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf, 0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:56:38 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000080)={0x3, 'vlan1\x00', {}, 0x6}) 00:56:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:38 executing program 4: socket(0x0, 0x80f, 0x0) 00:56:38 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs, 0x6e) connect$unix(r0, &(0x7f00000000c0)=@abs, 0x6e) [ 2406.180424][T14622] bond357: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2406.238387][T23577] device bridge362 entered promiscuous mode [ 2406.301529][T23577] bond357: (slave vlan252): Enslaving as a backup interface with a down link 00:56:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @mcast1}]}, 0x2c}}, 0x0) 00:56:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000021c0)=ANY=[@ANYBLOB="6800000016000106a4bd8800fedbdf250a"], 0x68}}, 0x0) [ 2406.394673][T14622] bond357: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2406.453937][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): bond357: link becomes ready 00:56:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2406.503747][T23639] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:56:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000005200013e"], 0x14}}, 0x0) [ 2406.622636][T23639] 8021q: adding VLAN 0 to HW filter on device bond293 00:56:38 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000000732b"], 0x14}}, 0x0) [ 2406.811229][T23642] bond293: (slave gretap213): Enslaving as a backup interface with an up link [ 2406.858830][T23644] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2407.028471][T23645] device bridge303 entered promiscuous mode [ 2407.080700][T23645] bond293: (slave vlan193): Enslaving as a backup interface with a down link [ 2407.092467][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): bond293: link becomes ready [ 2407.112937][T23691] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:56:39 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x18, 0x3, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_SEQ_ADJ_ORIG={0x4}]}, 0x18}}, 0x0) 00:56:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2407.323216][T23691] 8021q: adding VLAN 0 to HW filter on device bond358 [ 2407.486168][T23693] bond358: (slave gretap276): Enslaving as a backup interface with an up link [ 2407.506369][T23695] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:56:39 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf, 0xa}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:56:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@delneigh={0x30, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_IPV6={0x14, 0x1, @local}]}, 0x30}}, 0x0) 00:56:39 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000080), 0x4) 00:56:39 executing program 3: socketpair(0x10, 0x3, 0x0, &(0x7f0000001640)) [ 2407.783704][T23701] device bridge363 entered promiscuous mode 00:56:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000), 0x4) [ 2407.853160][T23701] bond358: (slave vlan253): Enslaving as a backup interface with a down link 00:56:39 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000008800)={&(0x7f0000008680), 0xc, &(0x7f00000087c0)={&(0x7f00000086c0)={0xe0, 0x1, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x0, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO, @CTA_TUPLE_PROTO, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @loopback}}}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x6}}, @CTA_TUPLE_ZONE, @CTA_TUPLE_ZONE, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x3}]}, @CTA_ID={0x8}, @CTA_TUPLE_ORIG={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_NAT_SRC={0x63, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2b}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}]}]}, 0xe0}}, 0x0) [ 2407.895035][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): bond358: link becomes ready 00:56:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2407.975635][T23742] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:56:40 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x4c, 0x13, 0x11d}, 0x4c}}, 0x0) [ 2408.150304][T23789] netlink: 204 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2408.225215][T23742] 8021q: adding VLAN 0 to HW filter on device bond294 00:56:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @dev}}}, 0x88) [ 2408.288145][T20499] net_ratelimit: 4 callbacks suppressed [ 2408.288168][T20499] bond269: (slave vlan169): failed to get link speed/duplex [ 2408.454981][ T2441] bond294: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2408.471383][T23746] bond294: (slave gretap214): Enslaving as an active interface with an up link [ 2408.548958][T23747] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 00:56:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000005500), r0) [ 2408.697176][T20503] bond294: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2408.724202][T23748] device bridge304 entered promiscuous mode [ 2408.781294][T23748] bond294: (slave vlan194): Enslaving as a backup interface with a down link [ 2408.803360][T14514] bond271: (slave vlan171): failed to get link speed/duplex 00:56:40 executing program 4: socketpair(0xa, 0x1, 0x1, 0x0) [ 2408.859847][T23774] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:56:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2409.042745][T23801] batman_adv: Cannot find parent device [ 2409.163394][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): bond294: link becomes ready [ 2409.221854][T23806] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:56:41 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf, 0x500}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:56:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000040)=0x6, 0x4) 00:56:41 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f000000b880)=[{&(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001440)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}}}], 0x20}], 0x1, 0x0) 00:56:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private2}) [ 2409.442060][T23832] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2409.597875][T23832] 8021q: adding VLAN 0 to HW filter on device bond295 00:56:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f00000000c0)=""/254, &(0x7f0000000000)=0xfe) 00:56:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) [ 2409.674909][T23837] bond295: (slave gretap215): Enslaving as a backup interface with an up link [ 2409.701071][T23839] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2409.739538][T20503] bond295: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2409.874218][T23844] device bridge305 entered promiscuous mode [ 2409.949217][T20499] bond295: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2409.990905][T23844] bond295: (slave vlan195): Enslaving as a backup interface with a down link [ 2410.073476][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): bond295: link becomes ready 00:56:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0xffbe) 00:56:42 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) 00:56:42 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)=ANY=[], 0x90) 00:56:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:42 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x3, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:56:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000100)='virt_wifi0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001400)={'syztnl2\x00', 0x0}) 00:56:42 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="100000000000000000000000070000001400000000000000000080"], 0x28}, 0x0) [ 2410.435961][T23909] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2410.553956][T23909] 8021q: adding VLAN 0 to HW filter on device bond296 [ 2410.698443][T14622] bond284: (slave vlan179): failed to get link speed/duplex 00:56:42 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:56:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000400)={0x7, 'vlan0\x00'}) [ 2410.888348][T23913] bond296: (slave gretap216): Enslaving as a backup interface with an up link [ 2410.898682][T23914] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2410.915679][T23914] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. 00:56:43 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x401c5820, &(0x7f0000000040)={r0}) [ 2410.954266][T23911] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2411.025230][T23911] 8021q: adding VLAN 0 to HW filter on device bond359 [ 2411.037590][T23920] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2411.128495][T14622] bond296: Warning: No 802.3ad response from the link partner for any adapters in the bond 00:56:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040), 0x4) [ 2411.306572][T23952] bond359: (slave gretap277): Enslaving as a backup interface with an up link [ 2411.364951][T23953] device bridge306 entered promiscuous mode [ 2411.379256][T23953] bond296: (slave vlan196): Enslaving as a backup interface with a down link [ 2411.395935][T20092] bond296: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2411.416681][T20503] bond359: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2411.434688][T23957] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:56:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:43 executing program 1: socket(0x2, 0x0, 0x7fffffff) [ 2411.696273][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): bond296: link becomes ready 00:56:43 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x13, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:56:43 executing program 3: r0 = socket(0x11, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) [ 2411.745960][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): bond359: link becomes ready 00:56:43 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f0000002340)='ns/cgroup\x00') syz_open_procfs$namespace(0x0, &(0x7f0000002340)='ns/cgroup\x00') 00:56:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000000)=0x82, 0x4) [ 2411.904408][T24020] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:56:44 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000200)={@dev, @random="e29ec8500ea6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @dev}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}}}}}, 0x0) 00:56:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) 00:56:44 executing program 1: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100), 0x37) [ 2412.260032][T24020] 8021q: adding VLAN 0 to HW filter on device bond297 [ 2412.461735][T24025] bond297: (slave gretap217): Enslaving as a backup interface with an up link 00:56:44 executing program 3: syz_emit_ethernet(0x62, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "1bf020", 0x2c, 0x6, 0x0, @private1, @loopback, {[], @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb}}}}}}}}}}}, 0x0) 00:56:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000021c0)=ANY=[@ANYBLOB="680000001600010027bd7000fedbdf250a0814c8", @ANYRES32, @ANYBLOB="1400060004000000000100000100008000005801140001"], 0x68}}, 0x0) [ 2412.576958][T24029] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2412.708351][T24026] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2412.758916][T24090] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2412.783185][T24026] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2412.823160][T24026] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2412.940787][T24033] device bridge307 entered promiscuous mode [ 2412.990781][T24033] bond297: (slave vlan197): Enslaving as a backup interface with a down link [ 2413.000471][T24032] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2413.072456][T24038] batman_adv: Cannot find parent device [ 2413.182231][T24058] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2413.259020][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): bond297: link becomes ready 00:56:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000100)=@add_del={0x2, &(0x7f00000000c0)='veth1_vlan\x00'}) 00:56:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:45 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f000000b880)=[{0x0, 0x0, 0x0}], 0x1, 0x0) 00:56:45 executing program 1: syz_emit_ethernet(0x2e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1, {[@ra={0x94, 0x4, 0x100}]}}, @info_reply}}}}, 0x0) 00:56:45 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x24, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:56:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2413.659614][T24111] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:56:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@setneightbl={0x14, 0x43, 0x82b}, 0x14}}, 0x0) 00:56:45 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) 00:56:45 executing program 1: r0 = socket(0x2, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 00:56:45 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10, 0x0}, 0xc014) [ 2413.895884][T24111] 8021q: adding VLAN 0 to HW filter on device bond298 00:56:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x1, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) [ 2414.122329][T24117] bond298: (slave gretap218): Enslaving as a backup interface with an up link [ 2414.157696][T14514] net_ratelimit: 3 callbacks suppressed [ 2414.157716][T14514] bond298: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2414.183178][T28632] IPv6: ADDRCONF(NETDEV_CHANGE): bond298: link becomes ready [ 2414.206928][T24118] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:56:46 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0xbd}]}}}], 0x18}, 0x0) 00:56:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x8001, 0x4) [ 2414.369594][T14514] bond298: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2414.459227][T24118] 8021q: adding VLAN 0 to HW filter on device bond360 [ 2414.529599][T24119] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2414.709683][T24121] bond360: (slave gretap278): Enslaving as a backup interface with an up link [ 2414.731126][T20503] bond360: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2414.812772][T24130] device bridge308 entered promiscuous mode [ 2414.851872][T24130] bond298: (slave vlan198): Enslaving as a backup interface with a down link [ 2414.864660][T14514] bond360: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2414.876515][T24140] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2414.994842][T24147] device bridge367 entered promiscuous mode [ 2415.085056][T24147] bond360: (slave vlan256): Enslaving as a backup interface with a down link 00:56:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'lo\x00'}) 00:56:47 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x7, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:56:47 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, 0x2, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 00:56:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) accept4(r0, 0x0, 0x0, 0x0) [ 2415.193301][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): bond360: link becomes ready [ 2415.417670][T24230] 8021q: VLANs not supported on lo [ 2415.426302][T24228] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:56:47 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)=[@rights={{0x10}}], 0x10}], 0x1, 0x0) 00:56:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getnetconf={0x14, 0x52, 0xe0b}, 0x14}}, 0x0) 00:56:47 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_u8={{0x11}}], 0x8}, 0x0) [ 2415.636351][T24228] 8021q: adding VLAN 0 to HW filter on device bond299 [ 2415.838773][T24236] bond299: (slave gretap219): Enslaving as a backup interface with an up link [ 2415.870717][T20499] bond299: Warning: No 802.3ad response from the link partner for any adapters in the bond 00:56:47 executing program 3: socketpair(0xa, 0x3, 0x40, 0x0) [ 2415.921291][T24237] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 00:56:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001bc0)=[{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001200)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}], 0x1, 0x0) [ 2415.962548][T24239] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:56:48 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x8, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) [ 2416.163772][T24239] 8021q: adding VLAN 0 to HW filter on device bond361 [ 2416.264794][T24243] device bridge309 entered promiscuous mode [ 2416.277613][T24243] bond299: (slave vlan199): Enslaving as a backup interface with a down link [ 2416.322351][T20092] bond299: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2416.488139][T24268] bond361: (slave gretap279): Enslaving as a backup interface with an up link [ 2416.519726][T24280] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2416.596899][T14622] bond361: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2416.615527][T24282] device bridge368 entered promiscuous mode [ 2416.630947][T24282] bond361: (slave vlan257): Enslaving as a backup interface with a down link 00:56:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd8, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa8, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x98, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd8}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:48 executing program 3: r0 = socket(0x2, 0x3, 0x8) setsockopt$inet_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) 00:56:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x68}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x1, @random="2b1f52dbc496"}]}, 0x2c}}, 0x0) 00:56:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_newaddr={0x54, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_CACHEINFO={0x14}, @IFA_ADDRESS={0x14, 0x1, @empty}, @IFA_LOCAL={0x14, 0x2, @private2}]}, 0x54}}, 0x0) [ 2416.671629][ T5665] IPv6: ADDRCONF(NETDEV_CHANGE): bond299: link becomes ready [ 2416.708445][ T5665] IPv6: ADDRCONF(NETDEV_CHANGE): bond361: link becomes ready [ 2416.752205][T14622] bond361: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2416.866022][T24346] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:56:49 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0xffffff92, 0x2103, 0x0, 0x0) 00:56:49 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0xa, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) [ 2417.051173][T24346] 8021q: adding VLAN 0 to HW filter on device bond300 00:56:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x1}]}, 0x10) 00:56:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_newaddr={0x2c, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x3f, 0x1, @empty}]}, 0x2c}}, 0x0) [ 2417.410309][T24349] bond300: (slave gretap220): Enslaving as a backup interface with an up link [ 2417.485983][T24362] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2417.509805][ T91] bond300: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2417.684162][T24362] 8021q: adding VLAN 0 to HW filter on device bond362 00:56:49 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@cipso={0x86, 0xa, 0x1, [{0x0, 0x2}, {0x0, 0x2}]}]}}}], 0x20}, 0x0) 00:56:49 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@setlink={0x54, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xffffbd80}}]}]}]}]}, 0x54}}, 0x0) [ 2417.785093][T24387] device bridge310 entered promiscuous mode [ 2417.816285][T20092] bond300: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2417.844958][T24387] bond300: (slave vlan200): Enslaving as a backup interface with a down link 00:56:50 executing program 1: r0 = socket(0x11, 0xa, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={0x0}}, 0x0) [ 2418.056719][T24389] bond362: (slave gretap280): Enslaving as a backup interface with an up link [ 2418.076801][T24392] __nla_validate_parse: 1 callbacks suppressed [ 2418.076822][T24392] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2418.409793][T25832] IPv6: ADDRCONF(NETDEV_CHANGE): bond300: link becomes ready [ 2418.432386][T25832] IPv6: ADDRCONF(NETDEV_CHANGE): bond362: link becomes ready 00:56:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd8, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa8, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x98, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd8}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:50 executing program 1: sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x815fe434959722b2) [ 2418.501933][T24407] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 00:56:50 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x14, 0x0, 0x7, {[@rr={0x7, 0x3, 0x81}]}}}], 0x18}, 0x0) [ 2418.620472][T24463] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:56:50 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0xd, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:56:50 executing program 1: syz_emit_ethernet(0x62, &(0x7f0000000080)={@local, @random="e280000000ec", @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "1bf020", 0x2c, 0x6, 0x0, @private1, @dev={0xfe, 0x80, '\x00', 0x2c}, {[], @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb}}}}}}}}}}}, 0x0) 00:56:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom(r0, 0x0, 0x0, 0x5, 0x0, 0x0) [ 2418.991251][T24463] 8021q: adding VLAN 0 to HW filter on device bond301 00:56:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)={0x0, 0x200000000000012b, '\x00', [@calipso={0x7, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}, 0x4f) 00:56:51 executing program 1: syz_emit_ethernet(0x62, &(0x7f0000000080)={@local, @random="e280000000ec", @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "1bf020", 0x2c, 0x6, 0x0, @private1, @dev={0xfe, 0x80, '\x00', 0x2c}, {[], @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb}}}}}}}}}}}, 0x0) 00:56:51 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) [ 2419.228898][T24466] bond301: (slave gretap221): Enslaving as a backup interface with an up link [ 2419.267511][T14622] net_ratelimit: 2 callbacks suppressed [ 2419.267531][T14622] bond301: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2419.277832][T24469] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 00:56:51 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @dev}}}], 0x20}, 0x0) 00:56:51 executing program 1: syz_emit_ethernet(0x62, &(0x7f0000000080)={@local, @random="e280000000ec", @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "1bf020", 0x2c, 0x6, 0x0, @private1, @dev={0xfe, 0x80, '\x00', 0x2c}, {[], @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb}}}}}}}}}}}, 0x0) [ 2419.427453][T24471] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2419.596120][T24471] 8021q: adding VLAN 0 to HW filter on device bond363 [ 2419.672860][T14629] bond301: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2419.750018][T24472] device bridge311 entered promiscuous mode [ 2419.807291][T24472] bond301: (slave vlan201): Enslaving as a backup interface with a down link [ 2419.982644][T24467] bond363: (slave gretap281): Enslaving as a backup interface with an up link [ 2420.021344][T24499] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:56:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd8, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa8, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x98, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd8}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xa) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:56:52 executing program 1: syz_emit_ethernet(0x62, &(0x7f0000000080)={@local, @random="e280000000ec", @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "1bf020", 0x2c, 0x6, 0x0, @private1, @dev={0xfe, 0x80, '\x00', 0x2c}, {[], @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb}}}}}}}}}}}, 0x0) 00:56:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000004f00)=[{{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000000200)=""/4096, 0x1000}, {0x0}, {0x0, 0xffffffffffffffc0}], 0x3}}, {{0x0, 0x0, &(0x7f0000004600), 0x3}}], 0x2, 0x0, &(0x7f0000005000)) [ 2420.088548][ T2441] bond363: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2420.232307][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): bond301: link becomes ready [ 2420.243803][ T2441] bond363: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2420.272903][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): bond363: link becomes ready [ 2420.374216][T24591] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2420.495993][T24591] 8021q: adding VLAN 0 to HW filter on device bond364 [ 2420.560798][T24593] bond364: (slave gretap282): Enslaving as a backup interface with an up link [ 2420.580411][T24591] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:56:52 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x21, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:56:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x6, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 00:56:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc) 00:56:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8913, &(0x7f0000000080)={'vlan0\x00', @ifru_settings={0x0, 0x0, @te1=0x0}}) [ 2420.636486][T14514] bond364: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2420.654794][ T5665] IPv6: ADDRCONF(NETDEV_CHANGE): bond364: link becomes ready 00:56:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}}, 0x0) [ 2420.870476][T24638] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2420.937389][T14514] bond364: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2421.005993][T24638] 8021q: adding VLAN 0 to HW filter on device bond302 [ 2421.044867][T24647] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 00:56:53 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x50, 0x13, 0x11d, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x50}}, 0x0) 00:56:53 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x14, 0x3, 0x1, 0x801}, 0x14}}, 0x0) 00:56:53 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x21, 0x0, 0x0) 00:56:53 executing program 3: syz_emit_ethernet(0x46, &(0x7f0000000100)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1, {[@cipso={0x86, 0x6}]}}, @redirect={0x5, 0x0, 0x0, @empty, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) [ 2421.331106][T14622] bond302: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2421.373734][T24642] bond302: (slave gretap222): Enslaving as an active interface with an up link 00:56:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000000), 0x4) [ 2421.429959][T24681] device bridge312 entered promiscuous mode 00:56:53 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2421.551176][T24681] bond302: (slave vlan202): Enslaving as a backup interface with a down link [ 2421.590135][ T2441] bond302: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2421.653610][T24685] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:56:53 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) [ 2421.791668][T24685] 8021q: adding VLAN 0 to HW filter on device bond365 00:56:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:53 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}], 0x18}, 0x0) 00:56:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}]}, 0x1c}}, 0x0) 00:56:53 executing program 1: socketpair(0x10, 0x2, 0x7, 0x0) [ 2422.071959][T24687] bond365: (slave gretap283): Enslaving as a backup interface with an up link [ 2422.229848][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): bond302: link becomes ready [ 2422.285891][T24691] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2422.309122][T14622] bond365: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2422.353461][T24695] device bridge372 entered promiscuous mode [ 2422.397705][T24695] bond365: (slave vlan258): Enslaving as a backup interface with a down link [ 2422.442125][T24756] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2422.498146][T14622] bond365: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2422.623999][T24756] 8021q: adding VLAN 0 to HW filter on device bond303 00:56:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}}, 0x0) 00:56:54 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs, 0x6e) sendto$unix(r1, 0x0, 0x0, 0x4052, 0x0, 0x0) 00:56:54 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs, 0x6e) 00:56:54 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x10c}, 0x40) 00:56:54 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) accept4(r0, 0x0, 0x0, 0x0) 00:56:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newrule={0x1c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) 00:56:54 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000000300)={&(0x7f0000000200)=@isdn, 0x80, 0x0}, 0x0) [ 2422.872061][T24758] bond303: (slave gretap223): Enslaving as a backup interface with an up link [ 2422.948013][T24759] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2423.021936][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): bond365: link becomes ready [ 2423.099431][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): bond303: link becomes ready [ 2423.162029][T24761] device bridge313 entered promiscuous mode [ 2423.198834][T24761] bond303: (slave vlan203): Enslaving as a backup interface with a down link 00:56:55 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x0, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) [ 2423.288118][T24810] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 2423.415558][T24810] 8021q: adding VLAN 0 to HW filter on device bond366 [ 2423.586926][T24817] bond366: (slave gretap284): Enslaving as a backup interface with an up link 00:56:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:55 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@abs, 0x6e) 00:56:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@delneigh={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0) 00:56:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'bridge0\x00'}) [ 2423.636605][T24822] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2423.749222][T24823] device bridge373 entered promiscuous mode [ 2423.787735][T24823] bond366: (slave vlan259): Enslaving as a backup interface with a down link 00:56:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}}, 0x0) 00:56:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000040)={0x8, 'vlan0\x00', {'gretap0\x00'}}) [ 2423.802180][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): bond366: link becomes ready 00:56:55 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0xc, 0x6, 0x101}, 0x14}}, 0x0) [ 2423.909267][T24870] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:56:56 executing program 3: r0 = socket$inet(0x2, 0x3, 0x8) recvmmsg(r0, &(0x7f0000001780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 2424.176496][T24870] 8021q: adding VLAN 0 to HW filter on device bond304 [ 2424.361728][T24869] bond304: (slave gretap224): Enslaving as a backup interface with an up link [ 2424.401173][T14514] net_ratelimit: 4 callbacks suppressed [ 2424.401193][T14514] bond304: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2424.451840][T24879] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 00:56:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet6(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24000041) [ 2424.635988][T24880] device bridge314 entered promiscuous mode [ 2424.752384][T20092] bond304: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2424.785598][T24880] bond304: (slave vlan204): Enslaving as a backup interface with a down link 00:56:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000021c0)=ANY=[@ANYBLOB="680000001600010027bd7000fedbdf250a08", @ANYRES32, @ANYBLOB="1400060004"], 0x68}}, 0x0) [ 2424.882704][T24885] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:56:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2424.944251][T24900] batman_adv: Cannot find parent device [ 2425.057873][T24945] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2425.174541][T24906] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2425.359144][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): bond304: link becomes ready 00:56:57 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x3, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:56:57 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000000301010100000000000000000000000006b9"], 0x28}}, 0x0) 00:56:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000024c0)={0x10, 0x1e, 0x1}, 0x10}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000005000)={0x0, 0x989680}) 00:56:57 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f000000b880)=[{&(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}], 0x1, 0x0) [ 2425.556345][T24948] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2425.599302][T24964] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 00:56:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000340), 0x4) [ 2425.817301][T24948] 8021q: adding VLAN 0 to HW filter on device bond305 [ 2426.081534][T24952] bond305: (slave gretap225): Enslaving as a backup interface with an up link [ 2426.146227][T24955] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2426.192231][T14514] bond305: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2426.264569][T24958] device bridge315 entered promiscuous mode [ 2426.334071][T20496] bond305: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2426.375146][T24958] bond305: (slave vlan205): Enslaving as a backup interface with a down link [ 2426.440308][T14514] bond276: (slave vlan176): failed to get link speed/duplex [ 2426.465428][T24970] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2426.507465][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): bond305: link becomes ready 00:56:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='reno\x00', 0x5) 00:56:58 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}, 0x0) 00:56:58 executing program 3: unshare(0x4000000) unshare(0x24000200) [ 2426.666799][T25020] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 00:56:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000180)=0xfffffe01, 0x4) 00:56:58 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0xe48, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:56:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000340)={&(0x7f0000000040), 0xff0c, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "935fb28389"}]}, 0x3c}}, 0x0) 00:56:58 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000100)=0xc) [ 2426.856753][T25025] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:56:59 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000c40001"], 0x2c}}, 0x0) 00:56:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000100)=0x18) 00:56:59 executing program 3: syz_emit_ethernet(0x91, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "fb7227", 0x0, 0x6, 0x0, @private2, @dev, {[@fragment, @dstopts={0x0, 0x0, '\x00', [@hao={0xc9, 0x0, @rand_addr=' \x01\x00'}, @enc_lim, @hao={0xc9, 0x0, @dev}, @hao={0xc9, 0x0, @loopback}]}, @routing={0x0, 0x0, 0x0, 0x0, 0x0, [@private1, @mcast2, @local]}, @hopopts={0x0, 0x0, '\x00', [@calipso={0x7, 0x0, {0x0, 0x0, 0x0, 0x0, [0x0, 0x0]}}, @enc_lim]}, @hopopts={0x0, 0x0, '\x00', [@ra]}, @routing={0x0, 0x0, 0x0, 0x0, 0x0, [@private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}], @payload_mcast={{}, [0x0, 0x0, 0x0]}}}}}}, 0x0) 00:56:59 executing program 4: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000180), 0xb7a1ebf4fdc0c3bb) [ 2427.280479][T25025] 8021q: adding VLAN 0 to HW filter on device bond306 [ 2427.505884][ T91] bond306: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2427.533439][T25030] bond306: (slave gretap226): Enslaving as an active interface with an up link [ 2427.606089][T25034] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 00:56:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) 00:56:59 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080), 0x4) 00:56:59 executing program 0: r0 = socket(0x1, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) 00:56:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:56:59 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1}, @info_reply}}}}, 0x0) [ 2427.721924][T25066] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2427.783783][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): bond306: link becomes ready [ 2427.824839][T14514] bond306: Warning: No 802.3ad response from the link partner for any adapters in the bond 00:57:00 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0xec0, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:57:00 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x3, 0x4) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}, 0x0) 00:57:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) 00:57:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0xc398edc8cf865dc8, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}, ["", "", "", "", "", "", "", "", ""]}, 0xfffffffffffffff2}}, 0x0) 00:57:00 executing program 3: syz_genetlink_get_family_id$devlink(0xffffffffffffffff, 0xffffffffffffffff) [ 2428.161354][T25100] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:57:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x5, &(0x7f0000000440)="b2ae11e4", 0x4) [ 2428.244000][T25100] 8021q: adding VLAN 0 to HW filter on device bond307 00:57:00 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @multicast2}, @private1, @private2}) 00:57:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0xa, &(0x7f0000000440)="b2", 0x1) [ 2428.467196][T25107] bond307: (slave gretap227): Enslaving as a backup interface with an up link [ 2428.472916][ T2441] bond307: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2428.483484][T25100] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 00:57:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {0xa}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x2c}}, 0x0) 00:57:00 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x20044005, &(0x7f00000003c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) [ 2428.658348][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): bond307: link becomes ready 00:57:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:57:00 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x7, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:57:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000680)={'wg2\x00'}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000100)={0x0, 'veth1_to_bond\x00', {}, 0x55b}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x34}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @empty}}}, @ip_tos_u8={{0x11}}], 0x38}, 0x0) [ 2428.810400][T20496] bond307: Warning: No 802.3ad response from the link partner for any adapters in the bond 00:57:00 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001000)=[{{&(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x44, 0x10, "0cb2c0477571a67e46ab946e5fdb"}]}}}], 0x20}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8000) [ 2428.916614][T25168] netlink: 'syz-executor.2': attribute type 7 has an invalid length. 00:57:01 executing program 1: sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000e80)) [ 2429.029554][T25171] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:57:01 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001000)=[{{&(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4}, @generic={0x0, 0x4, 'sd'}]}}}], 0x18}}, {{&(0x7f0000000800)={0x2, 0x0, @empty}, 0x2, 0x0, 0x0, &(0x7f00000010c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4}]}}}], 0x18}}], 0x2, 0x0) 00:57:01 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x8, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) [ 2429.224023][T25171] 8021q: adding VLAN 0 to HW filter on device bond308 00:57:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x2c}}, 0x0) 00:57:01 executing program 3: socket(0x0, 0xdde15fa61c02a851, 0x0) [ 2429.310984][T25178] bond308: (slave gretap228): Enslaving as a backup interface with an up link [ 2429.400319][T25179] __nla_validate_parse: 1 callbacks suppressed [ 2429.400339][T25179] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 00:57:01 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 00:57:01 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$sock(r0, 0x0, 0x0, 0x0) [ 2429.510942][T20496] bond308: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2429.611896][T25217] device bridge318 entered promiscuous mode 00:57:01 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001000)=[{{&(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4}, @generic={0x44, 0x4, 'sd'}]}}}], 0x18}}, {{&(0x7f0000000800)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f00000010c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) [ 2429.757714][T25217] bond308: (slave vlan208): Enslaving as a backup interface with a down link [ 2429.808801][T10825] IPv6: ADDRCONF(NETDEV_CHANGE): bond308: link becomes ready 00:57:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:57:02 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0xa, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:57:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {0x9}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x2c}}, 0x0) 00:57:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x16, &(0x7f0000000440)="b2", 0x1) 00:57:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x11, 0x64, &(0x7f0000000440)="b2ae11e4", 0x4) [ 2429.981713][ T2441] bond308: Warning: No 802.3ad response from the link partner for any adapters in the bond 00:57:02 executing program 0: sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x39aa0e41a72daa1e) [ 2430.268698][T25254] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:57:02 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001000)=[{{&(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10, 0x0}}, {{&(0x7f0000000800)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f00000010c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x7, 0x2}]}}}], 0x18}}], 0x2, 0x0) 00:57:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x12803116}, 0xc, &(0x7f0000000080)={0x0}}, 0x0) 00:57:02 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001ec0), r1) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r2, 0x68bc0c894447dbf9}, 0x14}}, 0x0) [ 2430.544485][T25254] 8021q: adding VLAN 0 to HW filter on device bond309 00:57:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0xffffff7f}, 0x0) 00:57:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x15, &(0x7f0000000440)="b2", 0x1) 00:57:02 executing program 1: socket$inet6(0xa, 0x2, 0x5) [ 2430.807153][T25258] bond309: (slave gretap229): Enslaving as a backup interface with an up link [ 2430.871495][T14514] bond309: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2430.872693][T25259] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 2430.998721][T25279] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2431.132108][ T91] bond309: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2431.319490][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): bond309: link becomes ready 00:57:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2431.457165][ T2441] bond278: (slave vlan173): failed to get link speed/duplex 00:57:03 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0xd, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:57:03 executing program 0: syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 00:57:03 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000050c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x4000000) 00:57:03 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001000)=[{{&(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4}, @generic={0x44, 0x4, 'sd'}]}}}], 0x18}}, {{&(0x7f0000000800)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f00000010c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0xf2}, @generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) 00:57:03 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, 0x0, 0x20080001) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) [ 2431.634356][T25333] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:57:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x32, &(0x7f0000000440)="b2ae11e4", 0x4) 00:57:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {0x2}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x2c}}, 0x0) 00:57:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x21, &(0x7f0000000440)="b2", 0x1) 00:57:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) [ 2431.935032][T25333] 8021q: adding VLAN 0 to HW filter on device bond310 [ 2432.014748][T25337] netlink: 'syz-executor.2': attribute type 13 has an invalid length. 00:57:04 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, 0x0, 0x0) [ 2432.151425][T25336] bond310: (slave gretap230): Enslaving as a backup interface with an up link [ 2432.185528][T20496] bond310: Warning: No 802.3ad response from the link partner for any adapters in the bond 00:57:04 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in={0xa, 0x4e22, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000000540)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x0) [ 2432.197736][T25338] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2432.347811][T25363] device bridge320 entered promiscuous mode [ 2432.388415][T14622] bond310: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2432.400871][T25363] bond310: (slave vlan210): Enslaving as a backup interface with a down link [ 2432.484301][T10825] IPv6: ADDRCONF(NETDEV_CHANGE): bond310: link becomes ready [ 2432.597600][T20503] bond271: (slave vlan171): failed to get link speed/duplex 00:57:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:57:04 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x33fe0}}, 0x0) 00:57:04 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000001a0e93"], 0x4c}}, 0x0) 00:57:04 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x21, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:57:04 executing program 4: mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x1010, 0xffffffffffffffff, 0x0) 00:57:04 executing program 1: sendmsg$unix(0xffffffffffffff9c, 0x0, 0x0) [ 2432.742968][T14622] bond278: (slave vlan173): failed to get link speed/duplex [ 2432.761996][T20092] bond280: (slave vlan175): failed to get link speed/duplex 00:57:04 executing program 4: mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) 00:57:04 executing program 0: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x1819, 0xffffffffffffffff, 0x0) 00:57:04 executing program 1: socket(0x11, 0x0, 0x68) [ 2432.884210][T25408] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2432.989464][T25408] 8021q: adding VLAN 0 to HW filter on device bond311 00:57:05 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000100)=""/82, 0x52) [ 2433.099533][T25410] bond311: (slave gretap231): Enslaving as a backup interface with an up link [ 2433.179581][T25434] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 00:57:05 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:57:05 executing program 4: socketpair(0x10, 0x3, 0x9, &(0x7f00000003c0)) [ 2433.260051][T25408] device bridge321 entered promiscuous mode [ 2433.341908][T25408] bond311: (slave vlan211): Enslaving as a backup interface with a down link [ 2433.379306][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): bond311: link becomes ready 00:57:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:57:05 executing program 1: socketpair(0x18, 0x0, 0x4, &(0x7f0000000000)) 00:57:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001240)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000002500)={0x0, 0x0, 0x0}, 0x0) 00:57:05 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x8}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:57:05 executing program 4: recvmsg(0xffffffffffffffff, 0x0, 0x47b5850ca5ab8334) 00:57:05 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000004c0)="b9", 0x101d0}], 0x1}, 0x0) 00:57:05 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xa}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) [ 2433.744604][T25472] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:57:05 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc600a0002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) [ 2433.911866][T25472] 8021q: adding VLAN 0 to HW filter on device bond312 [ 2434.009092][T25516] netlink: 207496 bytes leftover after parsing attributes in process `syz-executor.4'. 00:57:06 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000030c0)={0x15}, 0x40) 00:57:06 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)="7f", 0x1}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000001fc0)={0x0, 0x0, 0x0}, 0x0) [ 2434.146276][T25474] bond312: (slave gretap232): Enslaving as a backup interface with an up link [ 2434.162306][T25482] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2434.292298][T10825] IPv6: ADDRCONF(NETDEV_CHANGE): bond312: link becomes ready 00:57:06 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000300)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1}}, 0x10, 0x0}, 0x0) [ 2434.351500][T25513] device bridge322 entered promiscuous mode 00:57:06 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000004c0)="b9", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000006140)=[{&(0x7f0000005a40)=""/212, 0xd4}], 0x1, &(0x7f0000006200)=""/90, 0x5a}, 0x0) [ 2434.440636][T25513] bond312: (slave vlan212): Enslaving as a backup interface with a down link [ 2434.636969][ T2441] net_ratelimit: 17 callbacks suppressed [ 2434.636991][ T2441] bond275: (slave vlan175): failed to get link speed/duplex 00:57:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2434.730588][ T2441] bond269: (slave vlan169): failed to get link speed/duplex 00:57:06 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000300)={&(0x7f0000000040)=@name, 0x10, 0x0}, 0x0) 00:57:06 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xd}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:57:06 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000004c0)="b9", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000006140)=[{&(0x7f0000005a40)=""/212, 0xd4}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000006200)=""/90, 0x5a}, 0x42) 00:57:06 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x16, 0x0, 0x8, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x40) 00:57:06 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x1a, 0xa, &(0x7f0000000300)=ANY=[@ANYBLOB="18160000", @ANYRES32, @ANYBLOB="00000000000000008d34ffff01000000181b0000", @ANYRES32=0x1, @ANYBLOB="000000000000000018200000", @ANYRES32, @ANYBLOB="0000000006000000183100000300000000000000000000009500000000000000b6536a2884a1e9d0463601b61c1862e4ac9908a5f503d6692352f945f97884b507cd671568"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 2434.879959][T25553] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:57:07 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:57:07 executing program 4: socketpair$tipc(0x1e, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)) [ 2435.112994][T25553] 8021q: adding VLAN 0 to HW filter on device bond313 00:57:07 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000006340)={0x0, 0x200000000000025e, &(0x7f0000000100)=@raw=[@generic], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 2435.221553][T25556] bond313: (slave gretap233): Enslaving as a backup interface with an up link [ 2435.258091][T25561] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 00:57:07 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) close(r0) sendmsg(r0, 0x0, 0x0) 00:57:07 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) [ 2435.350964][ T91] bond313: Warning: No 802.3ad response from the link partner for any adapters in the bond 00:57:07 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_devices(r0, &(0x7f0000000440)={'a', ' *:* ', 'rw\x00'}, 0x9) [ 2435.502805][T25578] device bridge323 entered promiscuous mode [ 2435.627078][T25578] bond313: (slave vlan213): Enslaving as a backup interface with a down link [ 2435.653283][ T91] bond313: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2435.725694][ T5665] IPv6: ADDRCONF(NETDEV_CHANGE): bond313: link becomes ready 00:57:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:57:07 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000300)={&(0x7f0000000580)=@name, 0x10, 0x0, 0x44}, 0x0) [ 2435.839936][ T2441] bond278: (slave vlan173): failed to get link speed/duplex [ 2435.889920][T14622] bond270: (slave vlan170): failed to get link speed/duplex 00:57:07 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x21}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:57:07 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000002dc0)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000006140)=[{&(0x7f0000005a40)=""/212, 0xd4}], 0x1}, 0x0) 00:57:07 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000004c0)="b9", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000006280)={&(0x7f00000059c0)=@can, 0x80, &(0x7f0000006140)=[{&(0x7f0000005a40)=""/212, 0xd4}], 0x1}, 0x0) 00:57:07 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10, 0x0}, 0x0) [ 2435.931739][T14622] bond273: (slave vlan173): failed to get link speed/duplex 00:57:08 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000080)="e4da6383577d31c5976db7dd5b248a1de44c1fcf554708924e3eb767581fccbd1151d855e9adc513bf444b63362359462705281677a22db24035856ab0e2da64df9969200cd6fa3c2d59ab", 0x4b}, {&(0x7f0000000100)="f1b589195d232f8edb1a362f797daab09c3f2df624eb0f6b39ac086ea297abbe438b1f7b7f0d6a789071891b26d21b81b714abfabe65c51b2d71a0a9fdf4be235042c68327c166370075d3ea3a0e8a766e3d7023ab4217cdd9459fffff8d6b5870d68fa09ffc9bc46b51f4072d2052556c488a6addc8f9c5d4cacf9d62e8a8d393505427072f8e81e9e3e8a2117473fbc5c6775df2cc669beb725c3b4315a72fc74ee8d8a64f4fd758546007eac19ef9c3833cc996d2bd8a1c40067ac0fde0fdd84f1aab460d5f794b08b7b34b333fcc97b09af6a5e9a754dcabefc07d03", 0xde}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000000200)="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", 0xfc}, {&(0x7f0000000300)="d0f72b892446e16a63d4057f66e7e6efe209a23c794716c37785e1c5c36f6f3f5371d39a07c38b2aa98de0b6f88e78719d43f66eda141f93927142b7c99007aa0f99504b5429c49eb6552ad99eb9f9ef9022fc594c407bdc59813d9f2e749fc0c8f8ed5548acd18798f952f854068364ea8cbac0331ef52c10c35db1ca617b87c96f9d20f83cfa9627badd3e7b82b294382a6274598df2bb9b215d990dbc79b964e4297c9320111f325517d4cebbcd4a9d79b472f2fb16dd6c9db2d0757cac36469dcc38b1d67a9686d8", 0xca}, {&(0x7f0000001980)="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", 0xada}], 0x6}, 0x0) [ 2436.036039][ T2441] bond278: (slave vlan173): failed to get link speed/duplex 00:57:08 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f00000000c0)=@framed={{}, [@call, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000040)='GPL\x00', 0x3, 0xf3, &(0x7f0000000140)=""/243, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 2436.118531][T25630] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2436.340501][T25630] 8021q: adding VLAN 0 to HW filter on device bond314 00:57:08 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000300)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x10, 0x0}, 0x0) [ 2436.437461][T25634] bond314: (slave gretap234): Enslaving as a backup interface with an up link [ 2436.462420][T25638] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2436.523411][ T91] bond314: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2436.543323][ T2690] IPv6: ADDRCONF(NETDEV_CHANGE): bond314: link becomes ready 00:57:08 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) close(r0) 00:57:08 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_devices(r0, 0x0, 0x0) 00:57:08 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xc0000000}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:57:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2436.716503][T20092] bond278: (slave vlan173): failed to get link speed/duplex 00:57:08 executing program 1: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 00:57:08 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) [ 2436.893103][T25695] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2437.016673][T25695] 8021q: adding VLAN 0 to HW filter on device bond315 00:57:09 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/113, 0x71}], 0x1}, 0x0) sendmsg(r1, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000004c0)="b9", 0x101d0}], 0x1}, 0x0) 00:57:09 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, r0, 0x353d98bf35b4be0d, 0x0, 0x0, {{}, {@void, @val={0xc, 0x117}}}}, 0x20}}, 0x0) 00:57:09 executing program 0: socket$inet6(0xa, 0x3, 0x7f) [ 2437.065184][T25730] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 00:57:09 executing program 0: socketpair(0x25, 0x1, 0x5, &(0x7f0000000100)) 00:57:09 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x3}}, 0x10, 0x0}, 0x0) [ 2437.253708][T25698] bond315: (slave gretap235): Enslaving as a backup interface with an up link 00:57:09 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000004c0)="b9", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000006280)={&(0x7f00000059c0)=@can={0x1d, 0x0}, 0x80, &(0x7f0000006140)=[{&(0x7f0000005a40)=""/212, 0xd4}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000006340)={0x0, 0x1, &(0x7f0000000100)=@raw=[@alu], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 2437.341109][T25695] device bridge325 entered promiscuous mode 00:57:09 executing program 0: syz_emit_ethernet(0x22, &(0x7f0000000040)={@broadcast, @multicast, @val={@void}, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "2fb4c0a25b6985d3"}}}}, 0x0) [ 2437.450082][T25695] bond315: (slave vlan215): Enslaving as a backup interface with a down link [ 2437.516941][ T5665] IPv6: ADDRCONF(NETDEV_CHANGE): bond315: link becomes ready 00:57:09 executing program 3: socketpair(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) recvfrom$inet(r0, 0x0, 0x0, 0x40000160, 0x0, 0x33) 00:57:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:57:09 executing program 1: socketpair(0x2, 0x2, 0x0, &(0x7f0000000240)) 00:57:09 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2, 0x2}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:57:09 executing program 4: setsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x11, &(0x7f0000000b80)={0x0, 0x0, 0xffffffffffffffff}, 0xc) 00:57:09 executing program 0: ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)) mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz0\x00', 0x1ff) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000240)={'veth0_to_team\x00'}) syz_open_procfs$namespace(0x0, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:57:09 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000004c0)="b9", 0x101d0}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000005ec0)={0x0, 0x0, &(0x7f0000005d80)=[{0x0}, {0x0}, {&(0x7f0000004a40)=""/114, 0x72}], 0x3}, 0x0) [ 2437.826166][T25771] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:57:10 executing program 4: syz_emit_ethernet(0x42, &(0x7f0000000680)={@link_local, @link_local, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "f74979", 0x8, 0x11, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {0x0, 0x0, 0x8}}}}}}, 0x0) 00:57:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x4}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000002c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) [ 2438.003475][T25771] 8021q: adding VLAN 0 to HW filter on device bond316 00:57:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_MODES_OURS={0xe0c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x81, 0x5, "a25e2e2e7334db13d24f4805b1c5f3043690db7cdffb0bd0b1bb282a4940f830da72c9e3498a0c5984b80b01f649c7737ba24d15574bae9aedafbd880ed5123e20f18e9be6c98e487e5c8ca23b9aaaad5d74876b3eeb995e7f33d786770a5b885a488af011de3560797307e11348be1e2e0f2816ef2857a68bc2b62a34"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0x84, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '!)\xcd!\xc4{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '}}{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xfa{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_MASK={0xcf5, 0x5, "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"}]}]}, 0xec4}}, 0x0) 00:57:10 executing program 0: syz_emit_ethernet(0x5a, &(0x7f0000000000)={@link_local, @link_local, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "3e63f0", 0x20, 0x0, 0x0, @loopback, @dev, {[@hopopts={0x0, 0x2, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}}}}}, 0x0) 00:57:10 executing program 4: syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @dev, @void, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "cdf9825f23d4acaefcad3e68d72633b02bf7c1c8f4d598fbaaebd28ef0af64aa24c143379e1d3b788578e9a818920e0be65671b07f7058866c321bec61d0b613"}}}}, 0x0) [ 2438.299463][T25775] bond316: (slave gretap236): Enslaving as an active interface with an up link [ 2438.335306][T25779] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2438.396946][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): bond316: link becomes ready 00:57:10 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @random="5adf395e385e", @dev, @dev, @empty}}}}, 0x0) [ 2438.476559][T25815] device bridge326 entered promiscuous mode [ 2438.568713][T25815] bond316: (slave vlan216): Enslaving as a backup interface with a down link 00:57:10 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="060080c3"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:57:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 00:57:10 executing program 1: syz_emit_ethernet(0x48, &(0x7f0000000080)={@local, @random="e0b5691915d5", @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"74c5cf75b7529b7551d3379a7a0a"}}}}}}, 0x0) 00:57:10 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) 00:57:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:57:10 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2, 0x3}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) [ 2438.813932][T25848] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:57:10 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000080)={@local, @random="e0b5691915d5", @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, {[@sack={0x5, 0x16, [0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x9, 0xf989, "bbbc955323"}]}}}}}}}, 0x0) 00:57:10 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000540)={@link_local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "cb1b3b", 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 00:57:11 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) pselect6(0x40, &(0x7f0000000180), &(0x7f00000002c0)={0x7}, &(0x7f0000000300)={0x9}, 0x0, 0x0) [ 2438.978493][T25848] 8021q: adding VLAN 0 to HW filter on device bond317 00:57:11 executing program 0: syz_emit_ethernet(0x56, &(0x7f0000000040)={@link_local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "3e63f0", 0x20, 0x0, 0x0, @loopback, @dev, {[@dstopts={0x0, 0x3, '\x00', [@calipso={0x7, 0x8}, @calipso={0x7, 0x8}, @ra]}]}}}}}, 0x0) 00:57:11 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000080)={{0x2, 0x0, @multicast2}, {}, 0x76, {0x2, 0x0, @empty}, 'veth0_vlan\x00'}) 00:57:11 executing program 3: syz_emit_ethernet(0x62, &(0x7f0000000600)={@link_local, @link_local, @val={@void}, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "b23477", 0x28, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}, 0x0) 00:57:11 executing program 4: syz_emit_ethernet(0x3a, &(0x7f0000000000)={@link_local, @link_local, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "3e63f0", 0x0, 0x0, 0x0, @loopback, @dev}}}}, 0x0) [ 2439.319090][T25855] bond317: (slave gretap237): Enslaving as an active interface with an up link 00:57:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000002c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000003200), r0) [ 2439.487719][T25873] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 00:57:11 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', 0x0}) [ 2439.635814][T25880] device bridge327 entered promiscuous mode [ 2439.648867][T25880] bond317: (slave vlan217): Enslaving as a backup interface with a down link 00:57:11 executing program 4: accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x100000) [ 2439.708810][ T5665] IPv6: ADDRCONF(NETDEV_CHANGE): bond317: link becomes ready 00:57:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:57:11 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2, 0x4}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:57:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000cd23e1"], 0x14}}, 0x0) 00:57:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 2439.871728][T20496] net_ratelimit: 55 callbacks suppressed [ 2439.871750][T20496] bond276: (slave vlan176): failed to get link speed/duplex 00:57:11 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000080)={{0x2, 0x0, @private}, {}, 0x0, {0x2, 0x0, @remote}, 'veth0_vlan\x00'}) [ 2439.980162][T14629] bond274: (slave vlan174): failed to get link speed/duplex 00:57:12 executing program 0: syz_emit_ethernet(0x5a, &(0x7f0000000000)={@link_local, @link_local, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "3e63f0", 0x20, 0x0, 0x0, @loopback, @dev, {[@hopopts={0x0, 0x2, '\x00', [@pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}}}}}, 0x0) [ 2440.082917][ T91] bond271: (slave vlan171): failed to get link speed/duplex [ 2440.090630][ T91] bond284: (slave vlan179): failed to get link speed/duplex 00:57:12 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local, @link_local, @val={@void}, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "17720e", 0x2c, 0x6, 0x0, @empty, @remote, {[], @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb}}}}}}}}}}}, 0x0) [ 2440.143498][T25929] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:57:12 executing program 4: syz_emit_ethernet(0x3a, &(0x7f0000000000)={@link_local, @link_local, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "3e63f0", 0x0, 0x6c, 0x0, @loopback, @dev}}}}, 0x0) [ 2440.266305][T25929] 8021q: adding VLAN 0 to HW filter on device bond318 00:57:12 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2, 0x5}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:57:12 executing program 0: syz_emit_ethernet(0xe, &(0x7f0000000040)={@local, @broadcast, @void, {@generic={0x88ca}}}, 0x0) 00:57:12 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@empty, 0x0, r2}) 00:57:12 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8970, &(0x7f0000000100)={'veth1_macvtap\x00', @ifru_addrs=@ethernet={0x0, @random}}) [ 2440.580138][T25933] bond318: (slave gretap238): Enslaving as a backup interface with an up link [ 2440.601853][T20503] bond318: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2440.722234][T25974] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2440.879748][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): bond318: link becomes ready [ 2440.994888][T20496] bond318: Warning: No 802.3ad response from the link partner for any adapters in the bond 00:57:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xe0, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xb0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xa0, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffa, 0x56}}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) [ 2441.051313][T20092] bond280: (slave vlan175): failed to get link speed/duplex 00:57:13 executing program 4: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:57:13 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'veth1\x00', &(0x7f0000000000)=@ethtool_per_queue_op={0x4b, 0xf}}) 00:57:13 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003280)=ANY=[], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) close(r0) 00:57:13 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2, 0x6}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) [ 2441.162256][ T2441] bond278: (slave vlan173): failed to get link speed/duplex [ 2441.255561][T14514] bond280: (slave vlan175): failed to get link speed/duplex 00:57:13 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000480)={0x2, 0x16, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x15}, @sadb_key={0x1, 0x8}]}, 0x20}}, 0x0) [ 2441.295760][ T2441] bond284: (slave vlan179): failed to get link speed/duplex 00:57:13 executing program 1: syz_emit_ethernet(0x1e6, &(0x7f0000000300)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "aa0a1c", 0x1b0, 0x2f, 0x0, @dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x800, 0xfff]}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x6, 0x9], "d30acab8d9ffe225a6bb2dfce7c1ad54d8284e326cf437c7c014a73434d00c6504dca2673f45628e42cc043217277f9199969933e04d8f6bd3c23578ff5aecaaf55ff24f3745dfdc865bfe504afccb9fe09caf67c32b75476d9b02c5768aa6925483d09bd55c6972eb8e54d9a56fd9270b34b7d6b0770589c8bfa7bacbe0a30dcb629a47272e528d330f7e0b20fcc9a5831d12f157209275069e675ae4c0ca82569e2825a006a0985cf0deb732c689721453854cd9fbab52a96262"}, {0x8, 0x88be, 0x0, {{0x9, 0x1, 0x5, 0x2, 0x1, 0x2, 0x0, 0xdf}, 0x1, {0x200}}}, {0x8, 0x22eb, 0x2, {{0xe, 0x2, 0x8, 0x0, 0x1, 0x2, 0x2, 0x81}, 0x2, {0x0, 0x6, 0x3, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x4, "136a2f116e968b298ab3a1d6b3292bd9a3411b9883925be0d4e8afe13fc073bf681c4e7407eceb59f4b0e6b307e261da03797b974819d8b15378708b4d7c7150103b0042587875640dc326abc4f18424a2bab2836a4336ab4e373a27c7e7bc22d4d49c101896562db3a5603b297fed0eb8800a7e53082adaa56c99e3333f0bd0cca5c4cbf711ee1cc1375968f6720e1e84e4968ec6d8bfc080ac6f8bca9ecab414b88389b7fc32fe56"}}}}}}}, 0x0) [ 2441.431104][T26008] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:57:13 executing program 4: r0 = socket(0x1, 0x3, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x2121, 0x0, 0x0) 00:57:13 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev}) 00:57:13 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2, 0x7}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) [ 2441.518955][T26008] 8021q: adding VLAN 0 to HW filter on device bond319 00:57:13 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 00:57:13 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt(r0, 0x0, 0x8000, 0x0, &(0x7f00000001c0)) [ 2441.642263][T26011] bond319: (slave gretap239): Enslaving as a backup interface with an up link [ 2441.669783][T26008] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2441.760485][T26055] device bridge329 entered promiscuous mode [ 2441.873281][T26055] bond319: (slave vlan219): Enslaving as a backup interface with a down link [ 2441.991215][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): bond319: link becomes ready 00:57:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:57:14 executing program 1: syz_emit_ethernet(0x56, &(0x7f0000000040)={@link_local, @broadcast, @void, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "7ee9002045fb66affeddb71b84eb183c0b01b23f5e121f1abcd3190e774dee402449684b4f948f41f455d1156906c03eb3c20fd2560a100d56a94b4ae356ac3e"}}}}, 0x0) 00:57:14 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000001680)={0x77359400}) 00:57:14 executing program 0: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000001c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 00:57:14 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2, 0x8}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:57:14 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0xe, 0x4, 0x348, 0xffffffff, 0x1b4, 0xc8, 0x1b4, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @private0, [], [], 'netpci0\x00', 'ip6_vti0\x00'}, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}, {{@ipv6={@rand_addr=' \x01\x00', @private2, [], [], 'rose0\x00', 'veth0\x00'}, 0x0, 0xa4, 0xec}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@empty, 'nr0\x00'}}}, {{@ipv6={@dev, @mcast1, [], [], 'ip6_vti0\x00', 'bond_slave_1\x00'}, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3a4) 00:57:14 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_spirange={0x2}, @sadb_lifetime={0x4, 0x3}]}, 0x40}}, 0x0) 00:57:14 executing program 1: syz_emit_ethernet(0xbb, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "b84856", 0x85, 0x11, 0x0, @empty, @local, {[], {0x0, 0x0, 0x85, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "892adb77d60669c6bb18147e59f0e8bcf45faf3a6c03f3739aea672977c09f5c485e71860eaefd5295d2ce7e4994490a1d564d242a0c92f6274fc1268211b5d4f12c4d1142921b34428c81f416c6780b24f1c0a37b5378df70ad48ea9e8acdf02c97c65cc9b963bb9d4f456bdf9280a4695ecdd3801a68fa5e"}}}}}}}, 0x0) 00:57:14 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2, 0x9}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) [ 2442.353271][T26089] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:57:14 executing program 4: pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x4}, 0x0, 0x0, &(0x7f0000000180)={0x0}) 00:57:14 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) accept4(r0, 0x0, 0x0, 0x80800) [ 2442.624497][T26089] 8021q: adding VLAN 0 to HW filter on device bond320 00:57:14 executing program 1: r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000480), r0) [ 2442.856558][T26105] bond320: (slave gretap240): Enslaving as an active interface with an up link [ 2442.899666][T26088] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2443.038699][T26124] device bridge330 entered promiscuous mode [ 2443.070569][T26124] bond320: (slave vlan220): Enslaving as a backup interface with a down link [ 2443.153247][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): bond320: link becomes ready 00:57:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="11c2ef25fdac20dc1c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r4, @ANYBLOB="08000700ffffffff08000a00", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104004755ffffffffffbf000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0xd4, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0xa4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x94, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2009, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x15, 0x11}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24040988}, 0x0) 00:57:15 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}]}, 0x18}}, 0x0) 00:57:15 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xa, 0x0, 0x5, 0x2}, 0x10}}, 0x0) 00:57:15 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_ts_info}) 00:57:15 executing program 1: pselect6(0x40, &(0x7f0000000040)={0x4}, 0x0, &(0x7f00000000c0)={0x6}, &(0x7f0000000100)={0x0, 0x989680}, 0x0) 00:57:15 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf00, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2, 0xa}, 0x2}}]}, {0x4}}}]}]}, 0x50}}, 0x0) 00:57:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, &(0x7f0000000000)={r0, 0x4, 0xf4}) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20004}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 00:57:15 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt(r0, 0x0, 0xb, 0x0, &(0x7f0000000000)) 00:57:15 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000008c0)=@filter={'filter\x00', 0xe, 0x4, 0x3e8, 0xffffffff, 0xec, 0x210, 0x0, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@inet=@ecn={{0x24}}]}, @REJECT={0x24}}, {{@ipv6={@empty, @private2, [], [], 'bridge_slave_1\x00', 'tunl0\x00'}, 0x0, 0xdc, 0x124, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@broadcast, 'nr0\x00'}}}, {{@ipv6={@dev, @mcast1, [], [], 'ip6_vti0\x00', 'bond_slave_1\x00'}, 0x0, 0xec, 0x110, 0x0, {}, [@common=@hl={{0x24}}, @common=@hl={{0x24}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x444) 00:57:15 executing program 4: syz_emit_ethernet(0x3a, &(0x7f0000000100)={@broadcast, @remote, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, @timestamp}}}}, 0x0) [ 2443.546779][T26159] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2443.650726][T26159] 8021q: adding VLAN 0 to HW filter on device bond321 [ 2443.869045][T26165] bond321: (slave gretap241): Enslaving as a backup interface with an up link 00:57:15 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x6, 0x9, 0x0, 0x2, 0x0, 0x70bd2c}, 0x10}}, 0x0) 00:57:16 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080), 0xfffffffffffffe7d) [ 2444.001279][T26202] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2448.838325][T26175] bridge0: port 2(bridge_slave_1) entered disabled state [ 2450.094409][T26175] device batadv0 left promiscuous mode [ 2454.644543][T26175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2455.282946][T26175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2460.544760][T26175] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2460.553656][T26175] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2460.563310][T26175] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2460.572924][T26175] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2462.704267][T26175] device veth35 left promiscuous mode [ 2465.217996][T26175] device veth97 left promiscuous mode [ 2466.934951][ T3248] ieee802154 phy0 wpan0: encryption failed: -22 [ 2466.941687][ T3248] ieee802154 phy1 wpan1: encryption failed: -22 [ 2528.403462][ T3248] ieee802154 phy0 wpan0: encryption failed: -22 [ 2528.410028][ T3248] ieee802154 phy1 wpan1: encryption failed: -22 [ 2589.785549][ T3248] ieee802154 phy0 wpan0: encryption failed: -22 [ 2589.791983][ T3248] ieee802154 phy1 wpan1: encryption failed: -22 [ 2604.467373][ T1643] INFO: task kworker/u4:2:91 blocked for more than 143 seconds. [ 2604.475158][ T1643] Not tainted 5.13.0-rc3-syzkaller #0 [ 2604.497401][ T1643] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2604.506477][ T1643] task:kworker/u4:2 state:D stack:24064 pid: 91 ppid: 2 flags:0x00004000 [ 2604.522690][ T1643] Workqueue: cfg80211 cfg80211_dfs_channels_update_work [ 2604.531576][ T1643] Call Trace: [ 2604.534892][ T1643] __schedule+0x916/0x23e0 [ 2604.541360][ T1643] ? io_schedule_timeout+0x140/0x140 [ 2604.548639][ T1643] schedule+0xcf/0x270 [ 2604.552750][ T1643] schedule_preempt_disabled+0xf/0x20 [ 2604.563805][ T1643] __mutex_lock+0x7d4/0x10c0 [ 2604.572727][ T1643] ? cfg80211_dfs_channels_update_work+0x91/0x5f0 [ 2604.581790][ T1643] ? mutex_lock_io_nested+0xf20/0xf20 [ 2604.589613][ T1643] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2604.596174][ T1643] cfg80211_dfs_channels_update_work+0x91/0x5f0 [ 2604.605719][ T1643] ? cfg80211_sched_dfs_chan_update+0x60/0x60 [ 2604.612931][ T1643] process_one_work+0x98d/0x1600 [ 2604.622710][ T1643] ? pwq_dec_nr_in_flight+0x320/0x320 [ 2604.633285][ T1643] ? rwlock_bug.part.0+0x90/0x90 [ 2604.639213][ T1643] ? _raw_spin_lock_irq+0x41/0x50 [ 2604.644573][ T1643] worker_thread+0x64c/0x1120 [ 2604.651377][ T1643] ? process_one_work+0x1600/0x1600 [ 2604.660422][ T1643] kthread+0x3b1/0x4a0 [ 2604.664557][ T1643] ? __kthread_bind_mask+0xc0/0xc0 [ 2604.670757][ T1643] ret_from_fork+0x1f/0x30 [ 2604.687748][ T1643] INFO: task kworker/1:3:4840 blocked for more than 143 seconds. [ 2604.695524][ T1643] Not tainted 5.13.0-rc3-syzkaller #0 [ 2604.704565][ T1643] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2604.717781][ T1643] task:kworker/1:3 state:D stack:25704 pid: 4840 ppid: 2 flags:0x00004000 [ 2604.733377][ T1643] Workqueue: ipv6_addrconf addrconf_dad_work [ 2604.741286][ T1643] Call Trace: [ 2604.744605][ T1643] __schedule+0x916/0x23e0 [ 2604.751195][ T1643] ? io_schedule_timeout+0x140/0x140 [ 2604.759738][ T1643] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2604.764984][ T1643] ? lockdep_hardirqs_on+0x79/0x100 [ 2604.781474][ T1643] schedule+0xcf/0x270 [ 2604.785892][ T1643] schedule_preempt_disabled+0xf/0x20 [ 2604.808938][ T1643] __mutex_lock+0x7d4/0x10c0 [ 2604.813878][ T1643] ? addrconf_dad_work+0xa3/0x1340 [ 2604.823019][ T1643] ? mutex_lock_io_nested+0xf20/0xf20 [ 2604.830572][ T1643] ? debug_object_deactivate+0x264/0x300 [ 2604.836323][ T1643] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2604.844415][ T1643] addrconf_dad_work+0xa3/0x1340 [ 2604.851186][ T1643] ? addrconf_dad_completed+0xd60/0xd60 [ 2604.858873][ T1643] process_one_work+0x98d/0x1600 [ 2604.863920][ T1643] ? pwq_dec_nr_in_flight+0x320/0x320 [ 2604.885438][ T1643] ? rwlock_bug.part.0+0x90/0x90 [ 2604.894069][ T1643] ? _raw_spin_lock_irq+0x41/0x50 [ 2604.913051][ T1643] worker_thread+0x64c/0x1120 [ 2604.931174][ T1643] ? __kthread_parkme+0x13f/0x1e0 [ 2604.936356][ T1643] ? process_one_work+0x1600/0x1600 [ 2604.952380][ T1643] kthread+0x3b1/0x4a0 [ 2604.958816][ T1643] ? __kthread_bind_mask+0xc0/0xc0 [ 2604.964185][ T1643] ret_from_fork+0x1f/0x30 [ 2604.970045][ T1643] INFO: task kworker/0:3:9300 blocked for more than 143 seconds. [ 2604.981831][ T1643] Not tainted 5.13.0-rc3-syzkaller #0 [ 2604.990196][ T1643] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2605.000150][ T1643] task:kworker/0:3 state:D stack:24688 pid: 9300 ppid: 2 flags:0x00004000 [ 2605.011393][ T1643] Workqueue: events linkwatch_event [ 2605.020350][ T1643] Call Trace: [ 2605.023667][ T1643] __schedule+0x916/0x23e0 [ 2605.031277][ T1643] ? io_schedule_timeout+0x140/0x140 [ 2605.040261][ T1643] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2605.045506][ T1643] ? lockdep_hardirqs_on+0x79/0x100 [ 2605.052103][ T1643] schedule+0xcf/0x270 [ 2605.062008][ T1643] schedule_preempt_disabled+0xf/0x20 [ 2605.069908][ T1643] __mutex_lock+0x7d4/0x10c0 [ 2605.074904][ T1643] ? linkwatch_event+0xb/0x60 [ 2605.081460][ T1643] ? mutex_lock_io_nested+0xf20/0xf20 [ 2605.088178][ T1643] ? lock_release+0x720/0x720 [ 2605.093054][ T1643] linkwatch_event+0xb/0x60 [ 2605.099679][ T1643] process_one_work+0x98d/0x1600 [ 2605.105192][ T1643] ? pwq_dec_nr_in_flight+0x320/0x320 [ 2605.145929][ T1643] ? rwlock_bug.part.0+0x90/0x90 [ 2605.153711][ T1643] ? _raw_spin_lock_irq+0x41/0x50 [ 2605.165840][ T1643] worker_thread+0x64c/0x1120 [ 2605.171858][ T1643] ? process_one_work+0x1600/0x1600 [ 2605.177719][ T1643] kthread+0x3b1/0x4a0 [ 2605.182091][ T1643] ? __kthread_bind_mask+0xc0/0xc0 [ 2605.188550][ T1643] ret_from_fork+0x1f/0x30 [ 2605.193436][ T1643] INFO: task kworker/1:0:2690 blocked for more than 144 seconds. [ 2605.207713][ T1643] Not tainted 5.13.0-rc3-syzkaller #0 [ 2605.213741][ T1643] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2605.223963][ T1643] task:kworker/1:0 state:D stack:25640 pid: 2690 ppid: 2 flags:0x00004000 [ 2605.234728][ T1643] Workqueue: events switchdev_deferred_process_work [ 2605.244982][ T1643] Call Trace: [ 2605.249775][ T1643] __schedule+0x916/0x23e0 [ 2605.254348][ T1643] ? io_schedule_timeout+0x140/0x140 [ 2605.262130][ T1643] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2605.269147][ T1643] ? lockdep_hardirqs_on+0x79/0x100 [ 2605.274725][ T1643] schedule+0xcf/0x270 [ 2605.281374][ T1643] schedule_preempt_disabled+0xf/0x20 [ 2605.289350][ T1643] __mutex_lock+0x7d4/0x10c0 [ 2605.295158][ T1643] ? switchdev_deferred_process_work+0xa/0x20 [ 2605.305144][ T1643] ? mutex_lock_io_nested+0xf20/0xf20 [ 2605.313029][ T1643] ? lock_release+0x720/0x720 [ 2605.319532][ T1643] ? lock_downgrade+0x6e0/0x6e0 [ 2605.325075][ T1643] switchdev_deferred_process_work+0xa/0x20 [ 2605.333374][ T1643] process_one_work+0x98d/0x1600 [ 2605.339563][ T1643] ? pwq_dec_nr_in_flight+0x320/0x320 [ 2605.345734][ T1643] ? rwlock_bug.part.0+0x90/0x90 [ 2605.354585][ T1643] ? _raw_spin_lock_irq+0x41/0x50 [ 2605.360882][ T1643] worker_thread+0x64c/0x1120 [ 2605.366058][ T1643] ? __kthread_parkme+0x13f/0x1e0 [ 2605.372779][ T1643] ? process_one_work+0x1600/0x1600 [ 2605.379451][ T1643] kthread+0x3b1/0x4a0 [ 2605.383755][ T1643] ? __kthread_bind_mask+0xc0/0xc0 [ 2605.390662][ T1643] ret_from_fork+0x1f/0x30 [ 2605.408076][ T1643] INFO: task syz-executor.5:26205 blocked for more than 144 seconds. [ 2605.418516][ T1643] Not tainted 5.13.0-rc3-syzkaller #0 [ 2605.425461][ T1643] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2605.436047][ T1643] task:syz-executor.5 state:D stack:28240 pid:26205 ppid: 8694 flags:0x00000004 [ 2605.448037][ T1643] Call Trace: [ 2605.451731][ T1643] __schedule+0x916/0x23e0 [ 2605.456264][ T1643] ? io_schedule_timeout+0x140/0x140 [ 2605.465748][ T1643] schedule+0xcf/0x270 [ 2605.470910][ T1643] schedule_preempt_disabled+0xf/0x20 [ 2605.480483][ T1643] __mutex_lock+0x7d4/0x10c0 [ 2605.485127][ T1643] ? rtnetlink_rcv_msg+0x3f9/0xb70 [ 2605.493772][ T1643] ? mutex_lock_io_nested+0xf20/0xf20 [ 2605.502914][ T1643] ? rtnetlink_rcv_msg+0x3c3/0xb70 [ 2605.509710][ T1643] rtnetlink_rcv_msg+0x3f9/0xb70 [ 2605.515253][ T1643] ? rtnl_newlink+0xa0/0xa0 [ 2605.521314][ T1643] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 2605.527953][ T1643] netlink_rcv_skb+0x153/0x420 [ 2605.533019][ T1643] ? rtnl_newlink+0xa0/0xa0 [ 2605.539104][ T1643] ? netlink_ack+0xaa0/0xaa0 [ 2605.544652][ T1643] ? netlink_deliver_tap+0x227/0xba0 [ 2605.551075][ T1643] netlink_unicast+0x533/0x7d0 [ 2605.556067][ T1643] ? netlink_attachskb+0x870/0x870 [ 2605.562578][ T1643] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2605.582869][ T1643] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2605.594286][ T1643] ? __phys_addr_symbol+0x2c/0x70 [ 2605.601734][ T1643] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2605.610385][ T1643] ? __check_object_size+0x171/0x3f0 [ 2605.618356][ T1643] netlink_sendmsg+0x856/0xd90 [ 2605.624400][ T1643] ? netlink_unicast+0x7d0/0x7d0 [ 2605.631548][ T1643] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2605.640664][ T1643] ? netlink_unicast+0x7d0/0x7d0 [ 2605.645935][ T1643] sock_sendmsg+0xcf/0x120 [ 2605.652379][ T1643] ____sys_sendmsg+0x6e8/0x810 [ 2605.659469][ T1643] ? kernel_sendmsg+0x50/0x50 [ 2605.664317][ T1643] ? do_recvmmsg+0x6d0/0x6d0 [ 2605.672044][ T1643] ? lock_chain_count+0x20/0x20 [ 2605.681431][ T1643] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2605.689312][ T1643] ? tomoyo_path_number_perm+0x441/0x590 [ 2605.695073][ T1643] ___sys_sendmsg+0xf3/0x170 [ 2605.701637][ T1643] ? sendmsg_copy_msghdr+0x160/0x160 [ 2605.708372][ T1643] ? __fget_files+0x266/0x3d0 [ 2605.713859][ T1643] ? lock_downgrade+0x6e0/0x6e0 [ 2605.721281][ T1643] ? __fget_files+0x288/0x3d0 [ 2605.727722][ T1643] ? __fget_light+0xea/0x280 [ 2605.732709][ T1643] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2605.739854][ T1643] __sys_sendmsg+0xe5/0x1b0 [ 2605.744445][ T1643] ? __sys_sendmsg_sock+0x30/0x30 [ 2605.752138][ T1643] ? syscall_enter_from_user_mode+0x27/0x70 [ 2605.761547][ T1643] do_syscall_64+0x3a/0xb0 [ 2605.766284][ T1643] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2605.773354][ T1643] RIP: 0033:0x4665d9 [ 2605.779057][ T1643] RSP: 002b:00007fbe4475a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2605.793895][ T1643] RAX: ffffffffffffffda RBX: 000000000056c1a8 RCX: 00000000004665d9 [ 2605.803463][ T1643] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 2605.813459][ T1643] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 2605.824037][ T1643] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c1a8 [ 2605.834596][ T1643] R13: 00007fffba0e709f R14: 00007fbe4475a300 R15: 0000000000022000 [ 2605.848017][ T1643] INFO: task syz-executor.2:26160 blocked for more than 144 seconds. [ 2605.868782][ T1643] Not tainted 5.13.0-rc3-syzkaller #0 [ 2605.875356][ T1643] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2605.889088][ T1643] task:syz-executor.2 state:D stack:28696 pid:26160 ppid: 8443 flags:0x00004004 [ 2605.903214][ T1643] Call Trace: [ 2605.909153][ T1643] __schedule+0x916/0x23e0 [ 2605.913644][ T1643] ? io_schedule_timeout+0x140/0x140 [ 2605.921789][ T1643] schedule+0xcf/0x270 [ 2605.925932][ T1643] schedule_preempt_disabled+0xf/0x20 [ 2605.933835][ T1643] __mutex_lock+0x7d4/0x10c0 [ 2605.940913][ T1643] ? sock_do_ioctl+0x1f2/0x2d0 [ 2605.945722][ T1643] ? mutex_lock_io_nested+0xf20/0xf20 [ 2605.953023][ T1643] ? lock_downgrade+0x6e0/0x6e0 [ 2605.959550][ T1643] sock_do_ioctl+0x1f2/0x2d0 [ 2605.964266][ T1643] ? compat_ifr_data_ioctl+0x150/0x150 [ 2605.983995][ T1643] ? lock_downgrade+0x6e0/0x6e0 [ 2605.995021][ T1643] sock_ioctl+0x477/0x6a0 [ 2606.001210][ T1643] ? vlan_ioctl_set+0x30/0x30 [ 2606.005931][ T1643] ? __fget_files+0x288/0x3d0 [ 2606.013060][ T1643] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2606.024559][ T1643] ? vlan_ioctl_set+0x30/0x30 [ 2606.031072][ T1643] __x64_sys_ioctl+0x193/0x200 [ 2606.038519][ T1643] do_syscall_64+0x3a/0xb0 [ 2606.042974][ T1643] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2606.051079][ T1643] RIP: 0033:0x4665d9 [ 2606.055347][ T1643] RSP: 002b:00007f9788575188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2606.067331][ T1643] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 2606.075951][ T1643] RDX: 0000000000400308 RSI: 0000000000008912 RDI: 0000000000000004 [ 2606.091132][ T1643] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 2606.102808][ T1643] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 2606.113192][ T1643] R13: 00007fff3812ca0f R14: 00007f9788575300 R15: 0000000000022000 [ 2606.124049][ T1643] INFO: task syz-executor.0:26219 blocked for more than 145 seconds. [ 2606.137698][ T1643] Not tainted 5.13.0-rc3-syzkaller #0 [ 2606.143742][ T1643] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2606.157487][ T1643] task:syz-executor.0 state:D stack:28672 pid:26219 ppid: 8439 flags:0x00000004 [ 2606.168768][ T1643] Call Trace: [ 2606.172282][ T1643] __schedule+0x916/0x23e0 [ 2606.179355][ T1643] ? io_schedule_timeout+0x140/0x140 [ 2606.185066][ T1643] schedule+0xcf/0x270 [ 2606.191366][ T1643] schedule_preempt_disabled+0xf/0x20 [ 2606.198552][ T1643] __mutex_lock+0x7d4/0x10c0 [ 2606.203839][ T1643] ? rtnetlink_rcv_msg+0x3f9/0xb70 [ 2606.212085][ T1643] ? mutex_lock_io_nested+0xf20/0xf20 [ 2606.219796][ T1643] ? rtnetlink_rcv_msg+0x3c3/0xb70 [ 2606.225088][ T1643] rtnetlink_rcv_msg+0x3f9/0xb70 [ 2606.232734][ T1643] ? rtnl_newlink+0xa0/0xa0 [ 2606.239241][ T1643] netlink_rcv_skb+0x153/0x420 [ 2606.244284][ T1643] ? rtnl_newlink+0xa0/0xa0 [ 2606.251981][ T1643] ? netlink_ack+0xaa0/0xaa0 [ 2606.258257][ T1643] ? netlink_deliver_tap+0x227/0xba0 [ 2606.263715][ T1643] netlink_unicast+0x533/0x7d0 [ 2606.270758][ T1643] ? netlink_attachskb+0x870/0x870 [ 2606.275884][ T1643] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2606.283891][ T1643] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2606.292804][ T1643] ? __phys_addr_symbol+0x2c/0x70 [ 2606.299179][ T1643] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 2606.306270][ T1643] ? __check_object_size+0x171/0x3f0 [ 2606.318561][ T1643] netlink_sendmsg+0x856/0xd90 [ 2606.323540][ T1643] ? netlink_unicast+0x7d0/0x7d0 [ 2606.334003][ T1643] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2606.342177][ T1643] ? netlink_unicast+0x7d0/0x7d0 [ 2606.350540][ T1643] sock_sendmsg+0xcf/0x120 [ 2606.359063][ T1643] ____sys_sendmsg+0x6e8/0x810 [ 2606.365202][ T1643] ? kernel_sendmsg+0x50/0x50 [ 2606.378564][ T1643] ? do_recvmmsg+0x6d0/0x6d0 [ 2606.384805][ T1643] ? lock_chain_count+0x20/0x20 [ 2606.393794][ T1643] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2606.402385][ T1643] ___sys_sendmsg+0xf3/0x170 [ 2606.408113][ T1643] ? sendmsg_copy_msghdr+0x160/0x160 [ 2606.418704][ T1643] ? __fget_files+0x266/0x3d0 [ 2606.425649][ T1643] ? lock_downgrade+0x6e0/0x6e0 [ 2606.433249][ T1643] ? __fget_files+0x288/0x3d0 [ 2606.440015][ T1643] ? __fget_light+0xea/0x280 [ 2606.446252][ T1643] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2606.455222][ T1643] __sys_sendmsg+0xe5/0x1b0 [ 2606.469253][ T1643] ? __sys_sendmsg_sock+0x30/0x30 [ 2606.478955][ T1643] ? syscall_enter_from_user_mode+0x27/0x70 [ 2606.490658][ T1643] do_syscall_64+0x3a/0xb0 [ 2606.497711][ T1643] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2606.504625][ T1643] RIP: 0033:0x4665d9 [ 2606.510596][ T1643] RSP: 002b:00007fba047f1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2606.520825][ T1643] RAX: ffffffffffffffda RBX: 000000000056c0f0 RCX: 00000000004665d9 [ 2606.530984][ T1643] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 2606.541226][ T1643] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 2606.554318][ T1643] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c0f0 [ 2606.563306][ T1643] R13: 00007ffef87322bf R14: 00007fba047f1300 R15: 0000000000022000 [ 2606.573200][ T1643] [ 2606.573200][ T1643] Showing all locks held in the system: [ 2606.599522][ T1643] 3 locks held by kworker/u4:2/91: [ 2606.605486][ T1643] #0: ffff88801998c938 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_one_work+0x871/0x1600 [ 2606.629833][ T1643] #1: ffffc900011afda8 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_one_work+0x8a5/0x1600 [ 2606.653475][ T1643] #2: ffffffff8d6a60e8 (rtnl_mutex){+.+.}-{3:3}, at: cfg80211_dfs_channels_update_work+0x91/0x5f0 [ 2606.670280][ T1643] 1 lock held by khungtaskd/1643: [ 2606.683875][ T1643] #0: ffffffff8bf79320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 2606.700484][ T1643] 3 locks held by kworker/1:3/4840: [ 2606.708413][ T1643] #0: ffff888028352938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x871/0x1600 [ 2606.722474][ T1643] #1: ffffc9000162fda8 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8a5/0x1600 [ 2606.738544][ T1643] #2: ffffffff8d6a60e8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xa3/0x1340 [ 2606.750123][ T1643] 1 lock held by in:imklog/8130: [ 2606.756056][ T1643] #0: ffff888018d1a370 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 2606.768885][ T1643] 3 locks held by rs:main Q:Reg/8131: [ 2606.774402][ T1643] 3 locks held by kworker/0:12/13770: [ 2606.781109][ T1643] #0: ffff888028352938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x871/0x1600 [ 2606.793632][ T1643] #1: ffffc90001effda8 ((addr_chk_work).work){+.+.}-{0:0}, at: process_one_work+0x8a5/0x1600 [ 2606.806289][ T1643] #2: ffffffff8d6a60e8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0xa/0x20 [ 2606.819953][ T1643] 3 locks held by kworker/0:3/9300: [ 2606.825460][ T1643] #0: ffff888011064d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x871/0x1600 [ 2606.838152][ T1643] #1: ffffc900173b7da8 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x8a5/0x1600 [ 2606.850921][ T1643] #2: ffffffff8d6a60e8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xb/0x60 [ 2606.862014][ T1643] 2 locks held by kworker/u4:8/20092: [ 2606.870602][ T1643] #0: ffff8880b9d35658 (&rq->lock){-.-.}-{2:2}, at: __schedule+0x21c/0x23e0 [ 2606.885573][ T1643] #1: ffff8880b9d1f988 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x24c/0x670 [ 2606.903440][ T1643] 3 locks held by kworker/1:0/2690: [ 2606.911089][ T1643] #0: ffff888011064d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x871/0x1600 [ 2606.930300][ T1643] #1: ffffc9001abf7da8 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x8a5/0x1600 [ 2606.943222][ T1643] #2: ffffffff8d6a60e8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xa/0x20 [ 2606.955361][ T1643] 2 locks held by kworker/0:0/5785: [ 2606.963444][ T1643] #0: ffff888011066538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x871/0x1600 [ 2606.975495][ T1643] #1: ffffc9000b76fda8 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x8a5/0x1600 [ 2606.989191][ T1643] 1 lock held by syz-executor.5/26205: [ 2606.994770][ T1643] #0: ffffffff8d6a60e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3f9/0xb70 [ 2607.005992][ T1643] 1 lock held by syz-executor.2/26160: [ 2607.012719][ T1643] #0: ffffffff8d6a60e8 (rtnl_mutex){+.+.}-{3:3}, at: sock_do_ioctl+0x1f2/0x2d0 [ 2607.031220][ T1643] 2 locks held by syz-executor.0/26175: [ 2607.042396][ T1643] #0: ffffffff8d6a60e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3f9/0xb70 [ 2607.053364][ T1643] #1: ffffffff8bf82528 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4fa/0x620 [ 2607.066056][ T1643] 1 lock held by syz-executor.0/26219: [ 2607.074067][ T1643] #0: ffffffff8d6a60e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3f9/0xb70 [ 2607.084990][ T1643] [ 2607.095363][ T1643] ============================================= [ 2607.095363][ T1643] [ 2607.105957][ T1643] NMI backtrace for cpu 1 [ 2607.111151][ T1643] CPU: 1 PID: 1643 Comm: khungtaskd Not tainted 5.13.0-rc3-syzkaller #0 [ 2607.119502][ T1643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2607.130000][ T1643] Call Trace: [ 2607.133567][ T1643] dump_stack+0x141/0x1d7 [ 2607.137913][ T1643] nmi_cpu_backtrace.cold+0x44/0xd7 [ 2607.143383][ T1643] ? lapic_can_unplug_cpu+0x80/0x80 [ 2607.148752][ T1643] nmi_trigger_cpumask_backtrace+0x1b3/0x230 [ 2607.154788][ T1643] watchdog+0xd48/0xfb0 [ 2607.159164][ T1643] ? reset_hung_task_detector+0x30/0x30 [ 2607.165044][ T1643] kthread+0x3b1/0x4a0 [ 2607.169128][ T1643] ? __kthread_bind_mask+0xc0/0xc0 [ 2607.174249][ T1643] ret_from_fork+0x1f/0x30 [ 2607.192965][ T1643] Sending NMI from CPU 1 to CPUs 0: [ 2607.198765][ C0] NMI backtrace for cpu 0 [ 2607.198774][ C0] CPU: 0 PID: 25832 Comm: kworker/0:7 Not tainted 5.13.0-rc3-syzkaller #0 [ 2607.198784][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2607.198793][ C0] Workqueue: events iterate_cleanup_work [ 2607.198803][ C0] RIP: 0010:lock_is_held_type+0x83/0x140 [ 2607.198813][ C0] Code: b5 6b 89 31 db e8 cd 10 00 00 41 8b 84 24 f0 09 00 00 4d 8d ac 24 f8 09 00 00 65 ff 05 56 1a eb 76 85 c0 7f 12 e9 88 00 00 00 <83> c3 01 41 3b 9c 24 f0 09 00 00 7d 7b 48 63 c3 48 89 ee 48 8d 04 [ 2607.198826][ C0] RSP: 0018:ffffc90001e6fb60 EFLAGS: 00000046 [ 2607.198836][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 2607.198844][ C0] RDX: 0000000000000000 RSI: ffffffff8bf79260 RDI: ffff88806c1fc278 [ 2607.198852][ C0] RBP: ffffffff8bf79260 R08: 0000000000000001 R09: ffffffff902409af [ 2607.198860][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88806c1fb880 [ 2607.198868][ C0] R13: ffff88806c1fc278 R14: 00000000ffffffff R15: ffff88806c1fc278 [ 2607.198876][ C0] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 2607.198883][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2607.198891][ C0] CR2: 00007f0ca2a30008 CR3: 000000008972c000 CR4: 00000000001506f0 [ 2607.198899][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2607.198907][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2607.198913][ C0] Call Trace: [ 2607.198918][ C0] ___might_sleep+0x23f/0x2c0 [ 2607.198923][ C0] nf_ct_iterate_cleanup+0x16d/0x450 [ 2607.198929][ C0] ? nf_ct_port_nlattr_to_tuple+0x1d0/0x1d0 [ 2607.198935][ C0] nf_ct_iterate_cleanup_net+0x290/0x3f0 [ 2607.198941][ C0] ? nf_nat_masquerade_inet_unregister_notifiers+0x70/0x70 [ 2607.198949][ C0] ? nf_ct_unconfirmed_destroy+0x320/0x320 [ 2607.198955][ C0] ? nf_nat_masquerade_inet_unregister_notifiers+0x70/0x70 [ 2607.198962][ C0] iterate_cleanup_work+0x45/0x130 [ 2607.198967][ C0] process_one_work+0x98d/0x1600 [ 2607.198973][ C0] ? pwq_dec_nr_in_flight+0x320/0x320 [ 2607.198979][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 2607.198984][ C0] ? _raw_spin_lock_irq+0x41/0x50 [ 2607.198990][ C0] worker_thread+0x64c/0x1120 [ 2607.198995][ C0] ? __kthread_parkme+0x13f/0x1e0 [ 2607.199001][ C0] ? process_one_work+0x1600/0x1600 [ 2607.199006][ C0] kthread+0x3b1/0x4a0 [ 2607.199011][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 2607.199017][ C0] ret_from_fork+0x1f/0x30 [ 2607.232383][ T1643] Kernel panic - not syncing: hung_task: blocked tasks [ 2607.458188][ T1643] CPU: 1 PID: 1643 Comm: khungtaskd Not tainted 5.13.0-rc3-syzkaller #0 [ 2607.466590][ T1643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2607.476891][ T1643] Call Trace: [ 2607.480175][ T1643] dump_stack+0x141/0x1d7 [ 2607.484636][ T1643] panic+0x306/0x73d [ 2607.488554][ T1643] ? __warn_printk+0xf3/0xf3 [ 2607.493165][ T1643] ? lapic_can_unplug_cpu+0x80/0x80 [ 2607.498444][ T1643] ? preempt_schedule_thunk+0x16/0x18 [ 2607.503816][ T1643] ? nmi_trigger_cpumask_backtrace+0x196/0x230 [ 2607.509961][ T1643] ? watchdog.cold+0x5/0x158 [ 2607.514581][ T1643] watchdog.cold+0x16/0x158 [ 2607.519103][ T1643] ? reset_hung_task_detector+0x30/0x30 [ 2607.524674][ T1643] kthread+0x3b1/0x4a0 [ 2607.528754][ T1643] ? __kthread_bind_mask+0xc0/0xc0 [ 2607.533861][ T1643] ret_from_fork+0x1f/0x30 [ 2607.540427][ T1643] Kernel Offset: disabled [ 2607.544977][ T1643] Rebooting in 86400 seconds..