b, 0x6c}, {0x6, 0x11, 0xe48}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x9}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6}}]}, 0x22c}, 0x1, 0x0, 0x0, 0x43}, 0x240044c1) [ 2249.011630][ T4822] bond167: (slave veth737): Enslaving as a backup interface with a down link [ 2249.040369][ T4823] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:14:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0xffffa888, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) [ 2249.109577][ T4780] bond123: (slave veth453): Enslaving as an active interface with an up link [ 2249.128288][ T4845] bond167 (unregistering): (slave veth737): Releasing backup interface [ 2249.234482][ T4885] can: request_module (can-proto-0) failed. [ 2249.377865][ T4845] bond167 (unregistering): Released all slaves 00:14:29 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pread64(r1, 0x0, 0x0, 0x5a7) [ 2249.509246][ T4927] can: request_module (can-proto-0) failed. [ 2249.571784][ T4890] bond124: (slave veth455): Enslaving as an active interface with an up link [ 2249.580798][ T4816] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:14:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0xde6, 0xa00) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)=@bridge_dellink={0xa0, 0x11, 0x100, 0x70bd25, 0x25dfdbfe, {0x7, 0x0, 0x0, r2, 0x80, 0x4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'virt_wifi0\x00'}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x1688}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x9}, @IFLA_OPERSTATE={0x5, 0x10, 0x8}, @IFLA_PROP_LIST={0x54, 0x34, 0x0, 0x1, [{0x14, 0x35, 'team0\x00'}, {0x14, 0x35, 'veth0_to_team\x00'}, {0x14, 0x35, 'wg0\x00'}, {0x14, 0x35, 'veth0_to_bond\x00'}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x640008c1}, 0x80) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x20000, 0x0) ioctl$SIOCAX25CTLCON(r5, 0x89e8, &(0x7f0000000180)={@bcast, @default, @null, 0x63, 0x9, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, 0x1, 0x8, 0x104, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x50}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x20}]}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x4000000}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x890d}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000044}, 0x4) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sysfs$1(0x1, &(0x7f0000000500)='bond_slave_1\x00') write$P9_RLOCK(r7, &(0x7f0000000300)={0x8, 0x35, 0x1}, 0x8) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x4}]}}]}, 0x3c}}, 0x0) getsockname$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10) 00:14:29 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') r0 = socket(0x11, 0x1, 0xfffffffc) socketpair(0xf, 0x5, 0xf0, &(0x7f0000000100)={0xffffffffffffffff}) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socket(0x1e, 0x6, 0x6) socket(0x11, 0x800000003, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r6, 0xc0245720, &(0x7f0000000040)={0x1}) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000000)=0x2, 0x4) 00:14:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xf000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:14:29 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) pread64(r0, 0x0, 0xfffffe89, 0x5a7) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000180)={{&(0x7f0000000040)=""/208, 0xd0}, &(0x7f0000000140), 0x21}, 0x20) 00:14:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0xfffff000, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:14:29 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x50) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x2400, 0x0) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0xd23c) 00:14:29 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10, 0x800) fsetxattr(r0, &(0x7f0000000000)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) 00:14:29 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) pread64(r0, 0x0, 0xfffffe89, 0x5a7) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040)=0x8, 0x4) 00:14:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="3fe160c3dd2d53d6b68cbd2b7647575d5428a8c27dfbccf200007957371893b5ff898437be90cb31e8d47952e5e243b9fbf2fa30c3d94890bc86de52a6c8fe21662c4419a0212ee2fb39ab0fcd", @ANYRES16=r1, @ANYBLOB="f5df00000000000000002a000000"], 0x14}}, 0x0) read(r0, &(0x7f0000000040)=""/169, 0xa9) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) pread64(r2, 0x0, 0x0, 0x50) [ 2249.973079][ T4999] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:14:30 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsa\x00', 0x2d0000, 0x0) perf_event_open(&(0x7f0000000280)={0xb, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x13008, 0x0, 0x2}, 0x0, 0xff7ffffffffffffa, r0, 0xa) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x4}]}}]}, 0x3c}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_REFRESH(r6, 0x2402, 0x8e) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000080)={r9, 0x40, 0x3, 0x1, 0x101, 0x63d0}, &(0x7f0000000100)=0x14) acct(&(0x7f00000000c0)='./file0\x00') [ 2250.141091][ T5039] bond167: (slave veth739): Enslaving as a backup interface with a down link 00:14:30 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f0000000080)={0x556, 0x600, 0x140, 0x20, 0x4, 0x0, 0x18, 0x1, {0x7, 0x3}, {0x6, 0x4b4f}, {0x8001, 0xb47, 0x1}, {0x4, 0x80}, 0x3, 0x80, 0x0, 0x3, 0x0, 0x7, 0xfffffff7, 0x5, 0x5, 0xa8ab, 0x53796cc2, 0x40, 0x1c, 0x1, 0x1, 0x2}) pread64(r0, 0x0, 0xfffffe89, 0x5a7) [ 2250.193779][ T5042] bond167 (unregistering): (slave veth739): Releasing backup interface 00:14:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0xffffff7f, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:14:30 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x0, 0xf1a}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f0000000240)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x7, r1}, 0x8) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)={0xfffffffc, r1}, 0x8) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000100)={0x6, r2}, 0x8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r3, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x400100, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r5, 0x80045300, &(0x7f00000001c0)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x4}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x3c}}, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x0, &(0x7f0000000000)=0x7, 0x4) 00:14:30 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) pread64(r0, 0x0, 0xcb4a4bb2, 0x5a7) [ 2250.618072][ T5042] bond167 (unregistering): Released all slaves [ 2250.688641][ T5094] __nla_validate_parse: 4 callbacks suppressed [ 2250.688655][ T5094] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2250.786905][ T5098] bond126: (slave veth457): Enslaving as an active interface with an up link [ 2250.825395][ T4999] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2250.894774][ T5098] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:14:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xf618, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:14:31 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) pread64(r0, 0x0, 0xfffffe89, 0x5a7) socket$rds(0x15, 0x5, 0x0) 00:14:31 executing program 2: acct(&(0x7f0000000000)='./file0\x00') sysfs$3(0x3) 00:14:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x4}]}}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x2f, 0x3f, 0x2, 0xfffffffa, 0x28, @remote, @private1={0xfc, 0x1, [], 0x1}, 0x20, 0x7800, 0xff, 0x7}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x4}]}}]}, 0x3c}}, 0x0) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x4}]}}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000005c0)={0x1c4, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_STRSET_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xbc, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7f7d1e817566524e}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 00:14:31 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x64) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'os2.', '/proc/cgroups\x00'}) pread64(r0, 0x0, 0x0, 0x50) [ 2251.032403][ T5098] bond126: (slave veth459): Enslaving as an active interface with an up link 00:14:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0xffffff9e, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:14:31 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x4}]}}]}, 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000180)={0x11, 0x7, r2, 0x1, 0x7f, 0x6, @multicast}, 0x14) pread64(r0, 0x0, 0xfffffe89, 0x5a7) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r5, r0}}, 0x18) 00:14:31 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$phonet_pipe(r1, &(0x7f0000000100)={0x23, 0x2, 0x2, 0x3}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r3, 0xc0385720, &(0x7f0000000080)) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x202000, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00000009942200020005409d49730a0000fbdbdf250a10800106003c040100010005c46b94f179bb6cd9a3d819492cf25c90b4791be4b5da210a18f54def792215e205917da37d92770bcaea0ba46e38a6b0d80e647228633dfc0f1b26690fab572786bafde5a4f4624497607bb762bfbebde8465216989a44966987268badc4a3ebecca877f1c55ea5a0d805a38520945433444340299963d57b00031949d49c30c5658c78735487d2ed2370d00222ea2d5dfdcda7d712e28718d5b11ec84c844ce2f865c89cad9270edcff2c53600a3a09a9532e962f3e0698"], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x60) r6 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000000)={0x9, 0xff6, 0x0, 0x1, 0x2}) [ 2251.121361][ T5201] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2251.345954][ T5204] bond167: (slave veth741): Enslaving as a backup interface with a down link 00:14:31 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x50) mq_timedreceive(r0, &(0x7f0000000040)=""/235, 0xeb, 0x3f, &(0x7f0000000140)={0x77359400}) [ 2251.389203][ T5254] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2251.503062][ T5201] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2251.618368][ T5204] bond167: (slave veth743): Enslaving as a backup interface with a down link 00:14:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x40000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) [ 2251.718177][ T5257] bond127: (slave veth461): Enslaving as an active interface with an up link 00:14:31 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) pread64(r0, 0x0, 0xfffffe89, 0x5a7) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ftruncate(r3, 0xfffffffffffffff8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x2, {0x5, 0x6, "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", 0x40, 0x8, 0x4, 0x2, 0x0, 0x7, 0x48, 0x1}, r4}}, 0x128) 00:14:31 executing program 1: r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000080)='\v', 0x1, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, 0x0, 0x0, 0x0) r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000600)="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", 0x101, 0xfffffffffffffffe) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(0x0, r4, 0x0) r5 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000280)={{{@in=@multicast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@dev}}, &(0x7f0000000080)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) setresgid(0x0, r7, r7) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000480)=ANY=[@ANYRES32, @ANYBLOB="02000100", @ANYRES32=r6, @ANYBLOB="04400700fcff000008000100", @ANYBLOB="08000200", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="10000200000000002000020000000000"], 0x4c, 0x1) keyctl$chown(0x4, r2, r4, r7) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x0, 0x0) pread64(r8, 0x0, 0x0, 0x50) [ 2251.851017][ T5254] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:14:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x4}]}}]}, 0x3c}}, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000024000b0f00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000009000100636183b63b29295944d502000800040000000000"], 0x3c}}, 0x0) connect$packet(r3, &(0x7f0000000000)={0x11, 0x10, r5, 0x1, 0x3, 0x6, @local}, 0x14) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) [ 2251.960560][ T5282] bond127: (slave veth463): Enslaving as an active interface with an up link [ 2252.004920][ T5315] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:14:32 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pread64(r0, 0x0, 0x0, 0xab59) 00:14:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0xffffffc3, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:14:32 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() ptrace(0x10, r0) ptrace$getregset(0x4203, r0, 0x0, &(0x7f0000000180)={0x0, 0x8}) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x35, 0x7f, 0x3, 0x7, 0x0, 0xc0e0, 0x690c8, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x2000, 0x7fff, 0xfffffffe, 0x8, 0x3, 0xfff, 0xff}, r0, 0x4, 0xffffffffffffffff, 0x2) acct(&(0x7f00000000c0)='./file0\x00') r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x10000, 0x0) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @local}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7a, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b005) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000001c0)={r5, 0xff}, 0x8) [ 2252.129597][ T5321] bond168: (slave veth745): Enslaving as a backup interface with a down link [ 2252.194288][ T5327] bond168 (unregistering): (slave veth745): Releasing backup interface 00:14:32 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = socket(0x0, 0x6, 0x3) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f00000000c0)={0x3ff, {{0xa, 0x4e21, 0x7, @ipv4={[], [], @loopback}, 0x6}}}, 0x88) pread64(r1, 0x0, 0x0, 0x50) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000040)={'HL\x00'}, &(0x7f0000000080)=0x1e) 00:14:32 executing program 2: prctl$PR_SET_ENDIAN(0x14, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$CAPI_GET_FLAGS(r1, 0x80044323, &(0x7f0000000000)) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x4}]}}]}, 0x3c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, 0x2, 0x3, 0x101, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x7, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x1f}}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x9298cead45cb40e9}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x80000001, 0x1}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xf213}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x29}]}, 0x54}, 0x1, 0x0, 0x0, 0x44}, 0x44050) acct(&(0x7f00000000c0)='./file0\x00') 00:14:32 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x50) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = openat$full(0xffffffffffffff9c, 0x0, 0xd4180, 0x0) r3 = open(&(0x7f00000000c0)='./file1\x00', 0x109242, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getpeername$qrtr(r4, &(0x7f0000000180), &(0x7f00000001c0)=0xc) sendfile(r3, r4, 0x0, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r5, r2}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x3, r5, 0x1c, 0x0, @in6={0xa, 0x4e24, 0xa7ed, @ipv4={[], [], @local}, 0xb51}}}, 0xa0) [ 2252.580169][ T5327] bond168 (unregistering): Released all slaves [ 2252.673686][ T5376] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:14:32 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x8001) [ 2252.798372][ T5379] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 00:14:32 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x20, 0x20100) getsockname$llc(r2, &(0x7f0000000140), &(0x7f0000000180)=0x10) read$char_raw(r1, &(0x7f0000000200)={""/16766}, 0x4200) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) pread64(r3, 0x0, 0x0, 0xffffffffffff4001) [ 2252.897613][ T5383] bond128: (slave veth465): Enslaving as an active interface with an up link [ 2252.932156][ T5315] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2252.996786][ T5383] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:14:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x80000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:14:33 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) pread64(r0, 0x0, 0xfffffe89, 0x5a7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = fcntl$dupfd(r3, 0x0, r0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={[], [], @loopback}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004800) 00:14:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0xfffffff0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) [ 2253.285063][ T5496] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:14:33 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000480)={0x0, 0x9, "024758", 0x5, 0x7f}) r3 = socket(0x10, 0x3, 0x0) connect$l2tp(r3, &(0x7f00000004c0)={0x2, 0x0, @multicast2, 0x1}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x4}]}}]}, 0x3c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x1, 0x4, 0x301, 0x0, 0x0, {0xc, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x1000}, @NFULA_CFG_MODE={0xa, 0x2, {0x63, 0x3}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000014}, 0x20000088) acct(&(0x7f00000000c0)='./file0\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/152, 0x98}, {&(0x7f0000000280)=""/245, 0xf5}, {&(0x7f0000000040)=""/4, 0x4}], 0x3, 0x40) 00:14:33 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) pread64(r0, 0x0, 0xfffffe89, 0x5a7) getegid() [ 2253.507966][ T5498] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2253.716881][ T5502] bond168: (slave veth749): Enslaving as a backup interface with a down link [ 2253.772075][ T5503] bond129: (slave veth467): Enslaving as an active interface with an up link 00:14:33 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x1409, 0x20, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40050}, 0xc4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x5a7) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x10001, 0x3, 0x2}) 00:14:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x8, 0x0) semop(r1, &(0x7f0000000100), 0x2d) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) r3 = inotify_init() inotify_rm_watch(r3, 0x0) inotify_rm_watch(r2, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000000)=[0x8000, 0x8, 0xfbc, 0x7a, 0x8bd, 0x7]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) setresgid(0x0, r4, r4) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="04400700fcff000008000100", @ANYBLOB="fadee31bb8bb032ddeb1001bde6f00"/25, @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="10000200000000002000020000000000"], 0x4c, 0x1) chown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, r4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f00000000c0)={0x0, 0x25}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400264) ioctl$SNDRV_CTL_IOCTL_PVERSION(r6, 0x80045500, &(0x7f0000000080)) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) [ 2253.814543][ T5509] bond168 (unregistering): (slave veth749): Releasing backup interface [ 2254.226172][ T5509] bond168 (unregistering): Released all slaves [ 2254.382802][ T5498] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2254.518540][ T5511] bond129: (slave veth469): Enslaving as an active interface with an up link [ 2254.560458][ T5496] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:14:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0xfffffffe, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:14:34 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090050ac68383aaf20d342c16a3046010063000000"], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000040)={0xa521, 0x101, 0x7f, 0x3}, 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f00000000c0)) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r6, 0xc08c5335, &(0x7f0000000280)={0x4, 0x4, 0x1, 'queue0\x00', 0x3f}) ioctl$KVM_RUN(r5, 0xae80, 0x0) pread64(r5, 0x0, 0x0, 0x4005a8) r7 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SIOCGSTAMP(r7, 0x8906, &(0x7f0000000180)) 00:14:34 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000040)={0xffffffffffff7fff, 0x8}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) pread64(r2, 0x0, 0x0, 0x50) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @local}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7a, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b005) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x958, 0x104, 0xffff0000, 0xffff0001, 0x200001}, 0x14) [ 2254.752784][ T5655] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:14:34 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x1, 0x0) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_XCRS(r3, 0x4188aea7, &(0x7f00000001c0)=ANY=[@ANYBLOB="08000000ad0e00000100000000000000af0000000000000000010000000000ab00871a3834d5eb0051f6ffffffffffff000100000000000000000000010000000400000000000000030000000000000000000000000000000200000000000000090000000000000006000000000000000002000000000000040000000000000051000000000000008290000000000000"]) 00:14:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000040)=0xfffffff7) r3 = openat$cgroup_devices(r2, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000180)="0ddd094f25a6d76853b7226863fae3460586197f075caeae01973fc32b30a6a7b1b822576a0b5b573010c385566102591e2c736b865635ee55905bcc4621642686c4f060a529e830d3ef60a8799b2a04e564802b48404187aa32813cc170f260452acb1f0fc4f9861f7a24c4a19f9920d30cc7d8a31ecac01a8b686b55d1eda0a8402982", 0x84) 00:14:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x100000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:14:35 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000040)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x50) [ 2255.114015][ T5681] bond130: (slave veth471): Enslaving as an active interface with an up link [ 2255.143993][ T5716] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:14:35 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xe9, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xef4f, 0x200100000001}, 0x68fc41a9651994b0, 0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0xc, 0xffffffffffffffff, 0x6) acct(&(0x7f00000000c0)='./file0\x00') 00:14:35 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r2, 0x5, 0x0, 0x1, 0x3ff}) read$alg(r0, &(0x7f0000000040)=""/30, 0x1e) pread64(r0, 0x0, 0x0, 0x3) [ 2255.418791][ T5723] bond168: (slave veth751): Enslaving as a backup interface with a down link 00:14:35 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x20000, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000000c0)={&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000180)=""/215, 0xd7}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r1, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) 00:14:35 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x408302, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept$alg(r2, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x10) acct(&(0x7f00000000c0)='./file0\x00') r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x4}]}}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6_vti0\x00', r5, 0x29, 0x3f, 0x8, 0x8001, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @private1={0xfc, 0x1, [], 0x1}, 0x8, 0x1, 0xfffffffd, 0x5}}) memfd_create(&(0x7f0000000000)=',(\x00', 0x3) [ 2255.536441][ T5695] bond130: (slave veth473): Enslaving as an active interface with an up link [ 2255.581972][ T5730] bond168 (unregistering): (slave veth751): Releasing backup interface 00:14:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:14:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@random={'trusted.', '/\x9f\x0f\x00\x00kvm\x00'}, 0x0, 0x0, 0x0) 00:14:35 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r1, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x70) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r2, 0x4) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) pread64(r3, 0x0, 0xfffffe89, 0x5a7) 00:14:35 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x5) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x2e}}, 0x0) accept(r3, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast1}, &(0x7f00000001c0)=0x80) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x14, r4, 0x1, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x2, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000) pread64(r0, 0x0, 0x0, 0x50) 00:14:35 executing program 5: fsetxattr(0xffffffffffffffff, &(0x7f0000000040)=@known='com.apple.system.Security\x00', 0x0, 0x0, 0x0) 00:14:36 executing program 1: io_uring_setup(0x87c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x349}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) [ 2256.141464][ T5730] bond168 (unregistering): Released all slaves [ 2256.250005][ T5796] __nla_validate_parse: 3 callbacks suppressed [ 2256.250019][ T5796] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2256.377680][ T5716] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2256.488670][ T5801] bond131: (slave veth475): Enslaving as an active interface with an up link [ 2256.507553][ T5801] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:14:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xf0ffff, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:14:36 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) pread64(r0, 0x0, 0xfffffe89, 0x5a7) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x4}]}}]}, 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r4, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x14, r5, 0x309}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r5, 0x2, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0x44}}, 0x44) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) mmap$perf(&(0x7f0000fe9000/0x14000)=nil, 0x14000, 0x1, 0x13, r7, 0x800) 00:14:36 executing program 1: sigaltstack(&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000040)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) pread64(r0, 0x0, 0x0, 0x50) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00$?\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00000000ffffffff000000000900010063616b65000000000c0002000800040000000000"], 0x3c}}, 0x0) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @local}, 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x7a, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b005) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000100)={r7, 0x2}, &(0x7f0000000140)=0x8) r8 = pidfd_open(0xffffffffffffffff, 0x0) fcntl$getflags(r8, 0x1) 00:14:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) setresgid(0x0, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="026602923e3b40dc0c0126", @ANYRES32, @ANYBLOB="04400700fcff000008000100", @ANYBLOB="08000200", @ANYRES32, @ANYRESHEX=r0, @ANYRES32, @ANYBLOB="10000200000000002000020000000000"], 0x4c, 0x1) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x1, 0x7}, [{0x2, 0x6}, {0x2, 0x6}, {0x2, 0x1}, {}], {0x4, 0x1}, [{0x8, 0x2}, {}], {0x10, 0x7}, {0x20, 0x7}}, 0x54, 0x3) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = dup(r4) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) mmap$snddsp_control(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000001, 0x110, r7, 0x83000000) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$NBD_DO_IT(r5, 0xab03) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3cf3ffff23000b0f2000006b4900000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000900010063616b65000000000c0002000800040000000000", @ANYRESHEX], 0x3c}}, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) 00:14:36 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x4}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x3c}}, 0x0) r3 = accept(r2, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @local}}, &(0x7f0000000440)=0x80) ioctl$IMHOLD_L1(r3, 0x80044948, &(0x7f0000000480)=0x8) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$USBDEVFS_CLAIMINTERFACE(r4, 0x8004550f, &(0x7f0000000000)=0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clone(0x40041be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = getpid() rt_tgsigqueueinfo(r5, r5, 0x4000000000000016, &(0x7f00000004c0)) ptrace(0x4206, r5) rt_tgsigqueueinfo(r5, r5, 0x12, &(0x7f0000001180)={0x0, 0x0, 0xffffc58b}) ptrace(0x11, r5) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x9d0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') [ 2256.603835][ T5801] bond131: (slave veth477): Enslaving as an active interface with an up link 00:14:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x2, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) [ 2256.741616][ T5917] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:14:36 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) pread64(r0, 0x0, 0xfffffe89, 0x5a7) 00:14:36 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x50) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000100)) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0x10, r4, 0x7a109000) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000040)=0x401) [ 2256.856555][ T5937] bond168: (slave veth753): Enslaving as a backup interface with a down link [ 2256.889376][ T5917] bond168 (unregistering): (slave veth753): Releasing backup interface 00:14:36 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 00:14:36 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) pread64(r0, 0x0, 0xfffffe89, 0x5a7) r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a0500000000000000422cb4963a160161b1cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x34d, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r2, r1, r2}, &(0x7f0000000240)=""/112, 0x70, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000040)={r2, 0x5d, 0x45}, &(0x7f0000000080)={'enc=', 'pkcs1', ' hash=', {'sha1-avx2\x00'}}, &(0x7f0000000100)="48717a78370d264d9c548b6b2caef7f797b75371e048df7e3f71c6fc4f7b829271ff4ecaaaf45059106a08c779f29bfa75f0b8e7b9a1b2280cbeace0651667d7500058e46aefedd452410c752010ddd5456757dd5e21f1b2a0f2c82be0", &(0x7f0000000180)=""/69) 00:14:37 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) pread64(r0, 0x0, 0xfffffe89, 0x5a7) mkdir(&(0x7f0000000040)='./file0\x00', 0x40) 00:14:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x72100, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) futimesat(r2, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x0, 0xea60}, {0x0, 0xea60}}) [ 2257.343920][ T5917] bond168 (unregistering): Released all slaves [ 2257.458989][ T5964] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2257.549268][ T5968] bond132: (slave veth479): Enslaving as an active interface with an up link [ 2257.580606][ T5937] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2257.655469][ T5964] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2257.709592][ T5973] bond132: (slave veth481): Enslaving as an active interface with an up link 00:14:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x1000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:14:37 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r4) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@mcast2, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000040)=0xe8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) pread64(r3, 0x0, 0x0, 0x5a0) 00:14:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000180)=@random={'system.', '\x00'}, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) ptrace$getregset(0x4204, r1, 0x1, &(0x7f0000000100)={&(0x7f0000000080)=""/93, 0x5d}) 00:14:37 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap$qrtrtun(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000009, 0x110, r1, 0x7) 00:14:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x3, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:14:37 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000240)={0x6, 0x3, 0x4, 0x1000, 0x1d4022cc, {0x77359400}, {0x1, 0x2, 0x3, 0x1, 0x20, 0x4, "7dcc49d0"}, 0x100, 0x3, @offset=0x5655907, 0x8, 0x0, r2}) fcntl$setlease(r3, 0x400, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f0000000140)=[{}, {0xffffffffffffffff, 0x8}], 0x2, &(0x7f00000001c0)={r4, r5+10000000}, &(0x7f0000000200)={[0xfffffffffffffedb]}, 0x8) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', r0}, 0x10) r6 = openat2(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x400000, 0x80, 0x1}, 0x18) ioctl$IMCLEAR_L2(r6, 0x80044946, &(0x7f0000000340)=0x8) pread64(r0, 0x0, 0x0, 0x8000102) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x1, 0x8, 0x9, 0x8}, {0xfff9, 0x4, 0x8, 0x400}]}) [ 2257.868646][ T6096] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:14:38 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x0, 0x0) pread64(r0, 0x0, 0xfffffe89, 0x5a7) [ 2258.080634][ T6107] bond133: (slave veth483): Enslaving as an active interface with an up link 00:14:38 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) socket(0x28, 0x2, 0x7) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000080)=0x619, 0x4) pread64(r0, 0x0, 0xfffffe89, 0x5a7) [ 2258.131658][ T6105] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:14:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cachefiles\x00', 0x240142, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000280)={0x2, 0x9}) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x3, 0x2}, 0xffd4) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = getpid() ptrace(0x10, r5) ptrace$getregset(0x4203, r5, 0x0, &(0x7f0000000180)={0x0, 0x8}) fcntl$lock(r4, 0x24, &(0x7f0000000100)={0x2, 0x1, 0x29c, 0x200, r5}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r7, 0x522f58c7ff5ac83f, 0x0, 0x0, {}, [@FOU_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x54, r7, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x20000910) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000180)={[0x6000000000000, 0x9, 0x5, 0x100000001, 0x8, 0x7e, 0x3ff, 0x6, 0x0, 0x0, 0x4, 0x100000001, 0x800, 0x8001, 0x10000, 0x6], 0x4}) dup(r1) [ 2258.344395][ T6141] bond168: (slave veth755): Enslaving as a backup interface with a down link 00:14:38 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) vmsplice(r1, &(0x7f00000016c0)=[{&(0x7f00000001c0)="eeee438fc749c9c535afaafd2d09acc5266c7f8462734d247fe5e045c6e161ccb9d4c2a302d63d587906ac7af17cc896b667a46eff64ef3960aeb28f3b65c0be4a165c433e5b6b78fb538577372c6762dfbd93c685dc40f4744f744f7f195fa2c4f24605429c8bfaf1b08b6cf100191b", 0x70}, {&(0x7f0000000240)="73a6df636344e9456ed73a034e1b0480071acbbd2181a01a1a43dc076a31b65ffea5a11d90a0bafd2e1e9db9b694030a2136ecd268f2b1931a74af20b6d0e3d6aa26a86cf6993bccb4d2d95c71095d0dfe19d0ced3e8907c3f6b15bad60b812e4c30fae23d9c616eff2aaf139ddb694e4b4735790a8ec485832db6269b5e07b8ef", 0x81}, {&(0x7f0000000300)="794a762c0dde80997add58b672924b5bccc86676d3f7c5e12720df0de960925482c52bc41edad19837f009640c33ca1fcdf21e4ce9b3392a2b04f3a8a25a13b04d09369dd19c06415bac46ff8a365eca9298fc58559087851661d59179be2c0af935974e97d21a79c732969da497eb551e5828a19c5d7b65f8ec3b612ca6228fd30688b7ee92c30645dc33bd61df9e315a69c13f1de7ca1a6fe4b20d96e2e6d1ff86694d1353e82b422c78d182db3347f72ec219475c26ac1f1726f72df6ac4275c28889b8fd2779415bca77ec9abe79c94f8ff506a368ecf549cf61bc15144ff4991a81e04bffc44a", 0xe9}, {&(0x7f0000000400)="356de91a74ade42b858b0a93f5d147adc7dc79362542c6b0626023a3529257a9d9826fd229f04663e3cff246cb51b963de8b4a2b8ed00a99087a6a6dcafcfaa659f8e1e66e2497c3c8f8f886e21aa1c99e26f55acf341d494880487aea2ab8c55faf5fb99dbd40e5047214e5fa0ce10dbf00bbfae859cb4fbcd0f8f87304a46459c287f140a8df957ba17fe0a033b11aff17e410d403386e687ebe471fcdafdf6403e37b08dab303a86b5b5abcad81a1bdc5cfd792081b517a82a788648640", 0xbf}, {&(0x7f00000004c0)="4e5fcd530be1843fbb4a0b00bf3e565e1b27bb47a2129960bbc870115d2b39c981a634254df57ab917422376dd3e1eccfd21beb295fdcc41a6b608facad77c88d336d195b334c5bc5369f6002e2c64d68b79bb2faa124a2344c027f9db69e3b4afe229d7d6e1251281da74356901d081ee656c64bcfa36bd2c6350295eb77cae5a1d131e4c49051e3541784c2b47d653da1f83cf9396ed780b96624b69ed10d4a000e894b9a077ffa6e3d8f2e2a7cb0d98d80313e94ec3850b8ec352c2539f0b5b88c34ed09e4681b21f1852118ec4eb160ab76b6dfe6f4d39b6d0aa98be4ec937b102f3502221a1a8ea4b1275523977b4", 0xf1}, {&(0x7f00000005c0)="77849fafacb60703ac0bd81b8f61708e6171e10107beea3a18bab578fc479465a1a3b49eb9827da19d63d642b33a80e4e83f6f14c6b4b5ab738ad25b5954ad", 0x3f}, {&(0x7f0000000600)="883ec05c1e56333e1ebcfd578a7ff1b2e4975b169bba0860b96359d2bd3ae2c687aee896966ed2b107971d83a77e48f26e70cf64d74df0085f8ff624", 0x3c}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001640)="0ead147959051d276dc0880253d3d9f24e67a0f9796b77bcd9e6e59623e5dc6d4be0342655cc14e021ac493027d0df09fce3002ef5a2582ae5789e76b8d36c61c2b092f104f5d09ebd0da895939235a0af", 0x51}], 0x9, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000040)={&(0x7f0000000000), 0x0, 0x20, 0x2, 0x9, 0x101, 0x2, 0x200, {0x4, 0x2, 0x7f, 0x9, 0x4, 0x9, 0x41, 0x200, 0x8001, 0x5, 0x67, 0xffe1, 0x37, 0x1, "5af045bf956f6a30fd9efe8050f0f5d4b3a078e7e9aa0801ce7cf8f6b1784d05"}}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') 00:14:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000000)=""/29, 0x1d}, {&(0x7f0000000100)}, {&(0x7f0000000180)=""/26, 0x1a}, {&(0x7f00000001c0)=""/53, 0x35}, {&(0x7f0000000200)=""/50, 0x32}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/59, 0x3b}, {&(0x7f0000001280)=""/35, 0x23}], 0x8, &(0x7f0000001340)=""/248, 0xf8}, 0x40000000) readv(r1, &(0x7f0000001580)=[{&(0x7f0000001480)=""/108, 0x6c}, {&(0x7f0000001500)=""/112, 0x70}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r4, 0xf504, 0x0) [ 2258.443849][ T6158] bond168 (unregistering): (slave veth755): Releasing backup interface 00:14:38 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f00000000c0)={0xa10000, 0x800, 0x5, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9909df, 0x1b, [], @string=&(0x7f0000000040)}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) preadv(r6, &(0x7f0000000600)=[{&(0x7f0000000200)=""/43, 0x2b}, {&(0x7f0000000240)=""/149, 0x95}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f00000003c0)=""/133, 0x85}, {&(0x7f0000000480)=""/9, 0x9}, {&(0x7f00000004c0)=""/36, 0x24}, {&(0x7f0000000500)=""/12, 0xc}, {&(0x7f0000000540)=""/113, 0x71}, {&(0x7f00000005c0)=""/35, 0x23}], 0x9, 0x1) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000140)={0x0, 0x7aab, 0x6, 0x7, 0x9, 0x7f, 0x8, 0x0, 0x0, 0x8, 0x7, 0x6}) ioctl$CHAR_RAW_ROGET(r2, 0x125e, &(0x7f0000000100)) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) pread64(r7, 0x0, 0x0, 0x80000050) [ 2258.814253][ T6158] bond168 (unregistering): Released all slaves [ 2258.883024][ T6107] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2258.954031][ T6122] bond133: (slave veth485): Enslaving as an active interface with an up link [ 2258.972753][ T6105] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:14:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x4, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:14:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000000)=""/9) 00:14:39 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0xa, 0xa, 0x401, 0x0, 0x0, {0xc, 0x0, 0x7}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x8a}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) pread64(r0, 0x0, 0xfffffe89, 0x5a7) pread64(r0, &(0x7f0000000140)=""/4096, 0x1000, 0x8000) 00:14:39 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x50) write$capi20(r0, &(0x7f0000000040)={0x10, 0x7, 0x80, 0x82, 0xfeff, 0x9}, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0xcc1, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000000c0)={0x5, 0x9, 0x2, 0x1, 0x6, "4c61e2c40969b17a021f6d57bfc91ff920dee6"}) 00:14:39 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') dup(r0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/partitions\x00', 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) fcntl$getflags(r1, 0x3) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x4}]}}]}, 0x3c}}, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x3f7, 0x800, 0x70bd2d, 0x25dfdbfb, {0x7, 0xd, './file0', './file0/file0'}, ["", "", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040844}, 0x8081) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x4}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000200)={0x2, 'veth0_to_hsr\x00', {0x8}, 0x1ff}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) ioctl$TUNSETVNETLE(r6, 0x400454dc, &(0x7f0000000280)) 00:14:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x2000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) [ 2259.264390][ T6301] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:14:39 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1ff, 0x2200) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000080)={0x14, 0x1}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x7f) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000000c0)=0x7, 0x4) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) pread64(r7, 0x0, 0x0, 0x51) 00:14:39 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000080), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000040)=0x1, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x6) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0x201a}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x4) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000a, 0x50, r8, 0x34000) pread64(r0, 0x0, 0xfffffe89, 0x5a7) 00:14:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) fcntl$getflags(r1, 0x401) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000180)="fe7935cf6c2079d891e1419cd8c5f1177edf95160b801f3c56565b2b231efdd1d2a075706fb10c80a5c5c7761532a1eb8353ef9cadc3920087ea9550a1049d91ba3aa38b37497d8871b0fd0692398d0adf47c20700f041ba989027b96752c2615c838393808cc0d8cd52d6d221d3b1bf1938facb1cbb00e796b2f13cb6fae0576f3aca11bfa9554edc65b66199da64184f768cd484c7b357391b211ab331fdf7dd70fb20ffc97452eb564671afed513392", 0xb1) ioctl$KVM_KVMCLOCK_CTRL(r3, 0xaead) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) [ 2259.471483][ T6308] bond134: (slave veth487): Enslaving as an active interface with an up link [ 2259.519266][ T6312] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:14:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) setresgid(0x0, r1, r1) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000480)=ANY=[@ANYRES32, @ANYBLOB="02020100", @ANYRES32, @ANYBLOB="04400700fcff000008000100", @ANYBLOB="08000200", @ANYRES32=r1, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="10000200000000002000020000000000"], 0x4c, 0x1) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(0x0, r3, 0x0) r4 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000280)={{{@in=@multicast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@dev}}, &(0x7f0000000080)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) setresgid(0x0, r6, r6) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000480)=ANY=[@ANYRES32, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="04400700fcff000008000100", @ANYBLOB="08000200", @ANYRES32=r6, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="10000200000000002000020000000000"], 0x4c, 0x1) r7 = getpid() ptrace(0x10, r7) ptrace$getregset(0x4203, r7, 0x0, &(0x7f0000000180)={0x0, 0x8}) r8 = getpid() ptrace(0x10, r8) ptrace$getregset(0x4203, r8, 0x0, &(0x7f0000000180)={0x0, 0x8}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, r1, r3, r6, 0xa2}, 0x0, 0xff, 0x9, 0x401, r7, r8, 0x1}) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) [ 2259.756166][ T6350] bond168: (slave veth757): Enslaving as a backup interface with a down link [ 2259.794094][ T6358] bond168 (unregistering): (slave veth757): Releasing backup interface [ 2260.008804][ T6358] bond168 (unregistering): Released all slaves [ 2260.079861][ T6301] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:14:40 executing program 1: pwrite64(0xffffffffffffffff, &(0x7f0000000080)="a1d37267f120d13ead95c5981a0b08551d2926c601caeade0c0269397686a7c856cb49685d34de61ebd8d092a7b7081b42dc5c6afaec000e07314f8e82fc2163d2b71cdcca6b21af90eabd9c3f30d14c47186d1154d4a7367eb50d894ba142f35295fff2b38a5c0f31adc25f6243294f47851e65f6d69475bd4c7df9eef380fba15f18d17a8e79b132daf27d43fc0d", 0x8f, 0x4) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x50) r1 = accept4$alg(r0, 0x0, 0x0, 0x80400) fcntl$getown(r1, 0x9) [ 2260.127906][ T6312] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:14:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) getegid() socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x101081) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50, 0x8bb5e8f9724a4789, 0x5, {0x7, 0x1f, 0x10000, 0x100, 0x800, 0x1, 0x3f, 0x4}}, 0x50) setresgid(0x0, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="db8f16f6919b2b940f2e247b9665eaa29b9ca2c86745b3565b6db7a9d3bbd9a564357ca7b7fbd287f076c95fccc4", @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="010000bc0100000000000000", @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="10000200000000002000020000000000"], 0x4c, 0x1) r4 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000600)={{{@in=@multicast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@dev}}, &(0x7f0000000080)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) setresgid(0x0, r6, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000400)=ANY=[@ANYRESDEC=r4, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="04400700fcff000008000100", @ANYRES32, @ANYRES32=r6, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="10000200000000002000020000000000"], 0x4c, 0x1) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {}, [{0x2, 0x4}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x4}, {0x2, 0x2}, {0x2, 0x1}, {0x2, 0x4}], {0x4, 0x4}, [{}, {0x8, 0x1, r6}], {}, {0x20, 0x2}}, 0x7c, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x4}]}}]}, 0x3c}}, 0x0) getsockopt$inet6_mreq(r7, 0x29, 0x1c, &(0x7f0000000000)={@initdev}, &(0x7f0000000080)=0x14) 00:14:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x5, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:14:40 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x840, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r0, 0x80304d65, &(0x7f0000000040)) 00:14:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="69aa000010000100000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100766c616e00000000040002800500100005000000"], 0x3c}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'veth0_virt_wifi\x00', {0x4}, 0x101}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) pread64(r1, 0x0, 0xfffffe89, 0x5a7) 00:14:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x3000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) [ 2260.384014][ T6477] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:14:40 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x50) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x7) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000080)=0x6) socket$kcm(0x29, 0x3, 0x0) 00:14:40 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xe9, 0x5c, 0xfe, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x910, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') [ 2260.573281][ T6483] bond135: (slave veth489): Enslaving as an active interface with an up link [ 2260.612127][ T6528] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:14:40 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000040)={0x3}) pread64(r0, 0x0, 0x0, 0x50) 00:14:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x18000, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='trusted.overlay.opaque\x00', 0x0, 0xfffffffffffffe52, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000040)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = dup3(r6, r7, 0x80000) close_range(r3, r8, 0x0) 00:14:40 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f00000013c0)={0x990000, 0x6, 0xff5, 0xffffffffffffffff, 0x0, &(0x7f0000001380)={0x990903, 0x7ff, [], @ptr=0x7ff}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r4, 0x1ad, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x6c, r4, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @loopback}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40004}, 0x8084) acct(&(0x7f00000000c0)='./file0\x00') [ 2260.854711][ T6477] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2260.875806][ T6539] bond168 (unregistering): Released all slaves 00:14:41 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$phonet(r1, &(0x7f0000000040)={0x23, 0x20, 0xfa, 0xc0}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0xb, &(0x7f0000000080)=""/236, &(0x7f0000000180)=0xec) pread64(r2, 0x0, 0xfffffe89, 0x5a7) 00:14:41 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r0 = socket$isdn_base(0x22, 0x3, 0x0) pread64(r0, 0x0, 0xfffffe9d, 0x7fff) [ 2261.093952][ T6504] bond135: (slave veth491): Enslaving as an active interface with an up link 00:14:41 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x50) [ 2261.169294][ T6528] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:14:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x6, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:14:41 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x101140, 0x0) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @local}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7a, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b005) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000001c0)={r4, @in={{0x2, 0x4e24, @private=0xa010102}}, [0x2, 0x7, 0x7f, 0x800, 0x4776, 0x1, 0x100000000, 0x3ff, 0x7, 0x6, 0x0, 0x7, 0x401, 0x0, 0x7fff]}, &(0x7f0000000040)=0x100) 00:14:41 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000005000062f0a1fe334eabfaa3b60039ee681d9f5404159d0cee891353e61a565fa7aa3938b1ab95aa829fc3eff1efebac0f13c0c57f3ac6930a4481c7fd7e6c311485b26cffbb5d34d760415ac41cf07f05f9d25b34", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000900010063616b65000000000c0002000800040000000000"], 0x3c}}, 0x0) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(0x0, r4, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private0={0xfc, 0x0, [], 0x1}, @in6=@mcast1, 0x4e20, 0x3, 0x4e22, 0x8, 0xa, 0xa0, 0x80, 0x16, 0x0, r4}, {0x3, 0x800, 0x401, 0xfffffffeffffffff, 0xd70, 0x8, 0xfffffffffffff001, 0x80}, {0x5, 0x0, 0xfffffffffffffff8, 0x6}, 0x7, 0x6e6bbb, 0x0, 0x0, 0x2, 0x1}, {{@in6=@loopback, 0x4d4, 0xff}, 0x2, @in6=@private1, 0x3503, 0x0, 0x1, 0x9, 0xff, 0x80, 0xfcb3}}, 0xe8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r6 = socket(0x11, 0x800000003, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(r6, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r8, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008814}, 0x24000800) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) ioctl$IMGETVERSION(r6, 0x80044942, &(0x7f0000000000)) fsetxattr(r5, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) 00:14:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x4000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:14:41 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0xf0, 0x117, 0x2, 0xd5, "05dc66b319ab83e97af48f4520db0f8be7643335600a52a5f3de5b21f63af0c889546790e4edb38865e24c50942597ff8f4a5793eab7bf8bec7f5dcb5b7b3c23726cd0f90d8556256a8391fa7888a56423f98a38ee5e02b8399b038d5196e8230bd86734e1dbb918c9708fb3c24bcc2b7569513c355a925b492bd06a88341fe93682ffcdc0054cad9f5dc067d2fc7d0a325a1d3a693ca813bde4048e0e303a32d44e8c3d64d8fe7ac214da5023ee9ab81ef193152a97b78ec29b634a6e8f5390e5f34740a569335104a4ca4966e30607d90b5a43f5"}, @op={0x18}, @iv={0x18, 0x117, 0x2, 0x1, "9f"}, @iv={0x20, 0x117, 0x2, 0xc, "f58deedc31d2306ee8e71101"}], 0x158, 0x40040}], 0x1, 0x800) pread64(r0, 0x0, 0xfffffe89, 0x5a7) [ 2261.391121][ T6657] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:14:41 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/devices\x00', 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x5, 0x8, 0x8, 0xfc}, {0x9, 0x40, 0x8, 0x1}]}, 0x10) pread64(r0, 0x0, 0x0, 0x50) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r3, 0x11d, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x2c}, 0x1, 0x6c}, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x4000, 0x0) read$usbfs(r4, &(0x7f0000000400)=""/199, 0xc7) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x120, 0x70bd2b, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x1c}}, 0x4000) 00:14:41 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66004, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') 00:14:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x88000) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000080)={[0xdcc, 0x40, 0x7f, 0x20, 0xb2b, 0xb1, 0x8948, 0x8, 0x10000, 0x9, 0x8, 0x87, 0x1, 0xe29d, 0x6, 0x9], 0x10000, 0x20000}) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCGKEYCODE(r6, 0x80084504, &(0x7f0000000280)=""/126) setsockopt$ax25_SO_BINDTODEVICE(r6, 0x101, 0x19, &(0x7f00000001c0)=@rose={'rose', 0x0}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x4}]}}]}, 0x3c}}, 0x0) ioctl$SIOCGIFMTU(r4, 0x8921, &(0x7f0000000180)) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) dup(r0) [ 2261.550426][ T6662] bond136: (slave veth493): Enslaving as an active interface with an up link [ 2261.564428][ T6663] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:14:41 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x32) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r2, &(0x7f0000000080)={0x8, {"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", 0x1000}}, 0x1006) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000000)=@get={0x1, &(0x7f0000001100)=""/98, 0x7}) 00:14:41 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x8) [ 2261.792354][ T6708] bond168 (unregistering): Released all slaves 00:14:41 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001980)={{{@in=@multicast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@dev}}, &(0x7f0000001940)=0x64) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) setresgid(0x0, r5, r5) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000480)=ANY=[@ANYRES32, @ANYBLOB="02000100", @ANYRES32=r3, @ANYBLOB="04400700fcff000008000100", @ANYBLOB="08000200", @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="ffff0012000000000000010000800000"], 0x4c, 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x8, 0x0, &(0x7f00000012c0), 0x1804, &(0x7f0000001a80)=ANY=[@ANYBLOB="67727069642c7573726a73756f74613d2c6e6f62682c7265736769643df20128baa9bff8fb4a41e0711e7e7d67784bb0ff9126785c39c2a9eb9a54d47b288f4c0ac393a042a50ad1afb7be4bf711bebd0a86614fde2bfffe9c80a494496848c2738feb991f056e4ee722b1da30", @ANYRESHEX, @ANYRESOCT=r3, @ANYRES16=r4]) sendfile(r1, r0, 0x0, 0x7) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x8c000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x4}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x3c}}, 0x0) recvmmsg(r7, &(0x7f0000001880)=[{{&(0x7f00000001c0)=@x25, 0x80, &(0x7f0000001800)=[{&(0x7f00000004c0)=""/112, 0x70}, {&(0x7f0000000540)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/107, 0x6b}, {&(0x7f0000001640)=""/243, 0xf3}, {&(0x7f0000001740)=""/154, 0x9a}], 0x6}, 0x3}], 0x1, 0x2002, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000000100)={0x1, 'batadv_slave_1\x00', 0x4}, 0x18) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000380)=0x4) r8 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$FUSE_STATFS(r8, &(0x7f00000018c0)={0x60, 0x0, 0x5, {{0x200, 0xfffffffffffffff7, 0xffffffff, 0x64fc, 0x6, 0x2, 0x7, 0x6}}}, 0x60) [ 2261.890330][ T6669] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2261.966803][ T6663] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:14:42 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x50) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x400000, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x141) fsync(r1) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=@gcm_128={{0x304}, "91428478af6c079e", "e0cfab1d02a30e59d1fb7a11fdee21dc", "9e61040d", "9d2573e507a2b290"}, 0x28) 00:14:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x7, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:14:42 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000040)=0x80c2) pread64(r0, 0x0, 0xfffffe89, 0x5a7) 00:14:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x5000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) [ 2262.187468][ T6834] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:14:42 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x81, 0x9, 0xf39, 0x4d, @rand_addr=' \x01\x00', @remote, 0x7, 0x619, 0xfff, 0x7}}) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x4}]}}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x4}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000640)={0x0, @empty, @broadcast}, &(0x7f0000000680)=0xc) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x4}]}}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x160, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4000000}, 0x58) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) pread64(r10, 0x0, 0x0, 0x50) 00:14:42 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) pread64(r0, 0x0, 0xfffffe89, 0x5a7) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) 00:14:42 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) acct(&(0x7f00000000c0)='./file0\x00') [ 2262.288671][ T6869] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2262.306307][ T6870] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:14:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) write(r3, &(0x7f0000000080)="58de2b12e3ce7a9f3552b7abe76ecfe91033b28bce97a535cca47a5b93ba0634c44121bf5787083bd118acbddb31757abb47888af0b1902da493b2bb2d1eb2a3c2362391f9514f742f9195ff1683af63f7ebf565d412bd5ad8df2ea3981d", 0x5e) 00:14:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x8, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:14:42 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)="e5c291629a4556630b7bf63db9690310e712873ea90bbab9342f60a4934ae056bb777d7bdeb8f35513daa8de1382ef515708459c44394acfe5555fe2375f6beb5c55d56d2dc5dc4167ef817fda04eeb8680205ce4a73316dc031f34dcd8ea4fb5199eb0a2135e5c31b2d7979192e25cfca80080c920bd0a20c132c81e3a266b738be64dad9bca231b7be98181f1bd67e1115cf093d4937b61676ee2b3f3cd7ebf43090bcac5d14a3eb21df08c09ae21f6c86dc245d56c1524cfcd6897b83008e2cdb9fcd094cb0568d2c2a6a3e94c2a7b4c3d00067bfe9", 0xd7}, {&(0x7f0000000200)="535f2a7f2d6797c7107c04f12a02dc2c2637f720d3523e00eba38599577dc40d6bb904588938326088", 0x29}], 0x2, &(0x7f0000000840)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001ec0)=""/102389, 0x18ff5}], 0x1}, 0x2142) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x20000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x3c}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000040)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x37, r7}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r3, 0x800442d3, &(0x7f0000000000)={0x7fff, 0x0, 0x6, @remote, 'batadv0\x00'}) 00:14:42 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) pread64(r1, 0x0, 0xfffffe89, 0x5a7) [ 2262.638035][ T6881] bond168: (slave veth761): Enslaving as a backup interface with a down link 00:14:42 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r1, 0xc0245720, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r2, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) [ 2262.723622][ T6887] bond168 (unregistering): (slave veth761): Releasing backup interface 00:14:42 executing program 4: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000040)={0x1, 0x1f}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, &(0x7f0000000080)="d7cd7e6ca11d889157cceb5d6c78b078f63e9795606e287a15f09cabe973d8c9dc42a6e56820acf336cacd437fe5488483dc54b7593fec331919abade3c021e2422a10dba6b0f228a5ad8226b98fcf9ca93f146c6accd97a7a6f7003", 0x5c) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000100)=0x5482a168629f949f, 0x4) pread64(r3, 0x0, 0xfffffe89, 0x5a7) [ 2263.032083][ T6887] bond168 (unregistering): Released all slaves [ 2263.112892][ T6924] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:14:43 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x88000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x5b230915b9c52359, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fsetxattr(r1, &(0x7f0000000000)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) [ 2263.315788][ T6937] bond138: (slave veth497): Enslaving as an active interface with an up link [ 2263.333994][ T6870] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:14:43 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x7) [ 2263.454461][ T6924] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2263.566125][ T7045] bond138: (slave veth499): Enslaving as an active interface with an up link 00:14:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x6000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:14:43 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$char_raw(r1, &(0x7f00000054c0)=ANY=[@ANYBLOB="9e1763a163c81f249c267c7c4426de7f8ab2a350312eac44949ab04321185efebd78876295b67797cb1fc0e7fc9338f0bd96b60130c79253d6d6e73f48e9ecda03754d67bd3d3a79eb12b07506f00dc6b69e5dda83c080abfee769c0026146c310449d7ef0a2e0cc024d21481c59f5098ba72a933447e4550e22295aa721ceb795858e63f136227ade55c99f4480776646fded81e359c5f99dd4c40b8e5c82cdf3c56d6840583fd7a2fdb12c96b5972aa56f4ea460e8974403f1df8695e418c371fb0cd40a8f66495df450c8e5669f279454236d820e80c2ca26a9e812ecad86bf7fd39eb087acf822d0a01d36aeae01c006ba01de43e357f48738405b2446e5e1efdf37449cf8a89a2f8dc020ab744c33168d026ce943432b0fb2ae97a48f9602190e8e08e6edde91f7a53b071c88c281263002c818c2cf54b9b90866906ae735ebc5542036946d8cb044c1eca53f1427b535f17b0f9bccc8438f790663a0d648fb923e4ebc6c41923c6812675b1e7d2dc7471e58f34836b5f6df242cb6491903d65b180bc416ea8638ceaead4ef321e606df32d5c0551a9abde71cf9e2ca7dbe621a543fb32a8ae2f22984fb5345496ca47d72650b13b1cb51cf09f9a778416c28ea7ff47d354162dd9473a2d97b2bbacc5a6282803a984b50f8c49660476f94ac993928e56c7ebfb8f0570a3d794497699217a6612206ecceebcde20fa248e641bb19a0f85f3eeadf8d048cee77e41cb02891365dc43209ddd3f6a8607496e59c5e0def6505b94e4c6a862f6f5b1c73fe4450a10f53eb9fb37176b726471272883671e22c72d658da61c4c4b8bf3683448e02e3a79b9d652991d2304120dd2b8a5698ba9a3437f344bfd49fe5e22b89ec4bc36cfa0101dc4280892ac65adbf5b429ddd5d08b145675dddcb865a707afbad78be09d18edc16d7716979928f796336d9c701039412d4a33ee0d06a9811b1b3c9d14c05f28724bb22ce54117568d0a236d1445d816ffed99ec63eeb003e996bb1ec6d9d343648b383b94719110b1482f4c99a4fb18ee14ef3d450ec68d6d812d7c92eddf095284c47fb38c0a6d0a04d2d370e639c4039dfa82837a3948b835e51c01373c6230ca6623e9a5b2e9df288533209da722275aa5b85d478708eb080ae01b6f27cfe0f7347d72ddf61b9c469df5d84e0775bc40d0a725662708182d8914b5c683665e911abce90a9da025627bd29fdb5036cdf2eab17ea58d53f4b98cc382fdde5f47a5f356782e7be545977a54aa59d992f8817e87a6b388dc0126b7f1f597a0e0cd107d446d224cddf2750ef8c2740ba49e062f63bbd6ad4faccb25e8ac0bdd0284bcc33952adddf17cad5a8b5a8002f265db5d198803be441dd5287c615d7c8d0dde11c6a3ad07b4da44afc7e3ddc4597c323ae58987927817907a050ceebf95d6d531e91f0f8b84ef87d66d30bd78c1fc7c08bfd3f9d57712877737de83970416d3a6f329fcbba570a2b5da9936799f40c43d09fc64d06cb53a8b07b45b35f2721f1e3c19a4b71cb5854233c687eee687d14e3ebaec228d852e5e4357fa55f343a80eb3b6c8ae0e4ad446290c15056d46ec95a7ab61efba514ef3b22f630e5a13a0e99311f33c73ef52c67c2887b72cabb22c23c6d44befe389e81c63fd45794569f836aeeec5fb6438989a1e676ef8ba2fd442fc2c58cf218078f1a05d1271ce2fd960a5dcb4d9da0363df83e043d0474490621e35d966ddc871c6865b82de35e56588dfe2dfb4f947b2fe4ced71d202eabbca2b4ab4b76fb1d08f64fbca85c7f348d17fb27e28ab852cea16462fece009c43eefc891a6a02c24eb2e90e6eb0daea9ed00ea50638135f58b7cb69a96f1afbf0ae2daffa43b2cc17cb46d7add2b7900d17a8e7581b5e58724acaf732307625c634adf32249de302d521a691416a4b5002cbc55a2c925701ce2a90bf58913e2a922df010674330f0476149783537ad0f7e4c5d4acfe3d6821450d78535b4b85946db99fc277cfa33e2ec4f569823e02f9e00bcefe736817fc06a6b7201b916111e9dd5f7de28ed4c4d60a1cecd8ad5ebbe4d9acd7e319d5317cdf093df63b9e05705332fa89266c6e6dd623f8b763a9a09919a1a1efd581c1b205fed7a60b36d0b3b68bee1dab039a896eccd3fe2802f28ec7828a72d7eaa920470a0688cf65704a82d022af3d06dd9f6f348b4a9a34217ecccb90e54fab77e6b30824bc76ac731f1be2e6e38aab157e9f843a775037662b7ea8fd9e9eaf3a55978c7f60f655f89580d068c1230ea93136b4549f9384b7c73d56422ab7450329399678dbe720a23fca13c6cb3098fe052c194d52b3732548ee9958009f90b8a7edae9b8f974b60ce21cca00096ede366f85caf854d2f472ea93b5b1acbe2dfa6adb36dd69721fe98b234a751694c4d6bbbf5fb6aac7c9c8e64be341b36e165962660f15b91f7c961f3c541fcc2550837bdb4aa6804d4cf24b41a61ffb59e3ee6d958eeb3da25e60dddc89fea8e574801865d833e358ea1bfa01632319734a571004e5886eb7c32b5545484928a66f4af016e16e976556fce05d06dc2e57aff1b939c38ff83906614cc53297d6c5c13ddaed0eb8302cf2a714d07227b5eba8fe445bcb469231cda2ad6ba2fe8bb97a58a123fe8eea5837de3bd635b2113f1a00da42572553be773b45047c054ed05f7ec37985753c67600a0d4d04bea1a9950b96ed588685eb42142e8d8dd1adcb75bff8f9b81432fa46319a579e7fe591928ae6e2a9d15ab1363f521db75395ae944ea0fb1ca029b975eaafe54fdccc1763ee667b18f0f4d459f7b8f6b32771a4b677a2da9b47c2c89ec8f4690c37f64f39a05a0010ff5fda93288c476922192f3cd03ec32db2cb6c405f1dcdc4c07f27a6dfeb8b679249f57787f0f1df8b1066c0abf9dfd26f5d597510c623c379e77bbd3d3b84f6452778bc5c2f10069943f43d8c53f8c439ca934398fb66e330eff3e1e19dc7686f6b9d382d0fd3b24dd7ee943feb129aadc7c159ba1ad513cf7c364c7ec9418b8a84425ce00b3e0129827f1811f422f701c995d56308fe13d0ff064fcbaf46c44cdf039852c93cbb3d6953007f04da94ce8afc4ef9ffbe6777bca070ce38bff0c87a91839e3ea1e4b0afd024a5f52b2ca30aa62ea914b73f63c7e5e127e80889db1333dd728ceb5203e65bf7b5b0fb5144282629e8e04e77bc207c2f35528b9395bc79d480e5be6915a5d486a92624f965d1544d7ebb41f916e04729a6ab74a19625eb56cc826742da5444fd629f4a42115a13bd5dd2d43293fa27bf231108f48c8fdaf0954c1a42909f37fe3918852b7793746a089dd52f01f326e3ab22e2e402db28f4207585658b166374fa4776fb4bc855b9322f73f6cbc02245a443d19a08658aedafff621f3b75ec813c95abb023f0db3e3c3d121a2f813271d14ab7b2ef3bcff722283b96ea96c14429b9bdfef579d2abac233c637029125245dacf2127ff579efb65a1bcf33036f812f2374dda20b170bf757453f5efcad1ffe84d51806282e173ae91bc8d342664a5a16d7dc542743eebbf90aaf3ac7c678ea20982d6306a3b57766e202488953c272e0ba0c58f02ab6fd8833e4fa7385e6c8bd0f6531708939f9b73958ec57595caa2c815ca509ad605b2d1440ff2b73364ddb83b37e6b40a765486fba437b09f62fead50b7552da2e4ff585138e0d9d8593929858a51269cf64f06f749312ff6216e4f94b06e1c8811ee3945e4b2bd435f85af0945403fdcaa230eff073181cd3f831641f862da9ab4d2c3dc07b63329bcc18bf1d89bad376e4c43ac5d24bebfc4ca0ff17d827e67f2880c6b85dd77a3e2f1212d6a93b100bb7fd5893b5fbd513d57747de8e95812b8d17871392a7db5c1537ec2d21d7d917bfd769dd57507dbc522df4e1a1538e5e972c162bb9483f213eb65ba5dc9dbc608277ace1447adfb6c6937d70cd27e633a15dde5dcc5f96474e61fd31a5713a0ea11bc33ee1fcbde5498b87301f945b1a857dad65c74a69d7dd22ba329fe2e0c62f104d42a6be96de3602efc635e0f9ceac4cc421c2066e5f1ee91430c302aae88a3696ef60c6682fe7e328e56df9fa55738491dd8905bd5a19610e6b99bc5e90a7931139a28b01fe2aac8c16358fe9caf7e55a2f92ef1a4df4778a2d0d25270e7ce14547b3fb56c4242ec03844c06b5d4447c459f830769e1a6ae11cda6769edc77ed9781e95171ea58ec6df5c04ce32f2f76a04a5da562950ef27ce272d708121bf1b3e726abba4a6d04a1b2ad5bbacf8e18a61f07e6d8267dd4cf8aea0c5a0e2408abf87cd9adabd1ea5b332f7588e9448bebf82799f2d53c8a5fd664717ac8dcd2d11613bd0b57ac34f9f4ccc7d3165e64b222b8f0cbc6a2e938d683dab8603913680b83d84c3eeb50f1e59e3d19ccf39cf881a7d37810ede2052cce99671259e4f1cbb25c8e14fc8e57d20edb99860be2b8152f6bd20dce7586a65f733f40cacdd7e24e2625786aacda365472cb9bdbbd4005525b15fd9ae5ffa7186374f1357afad9aacd53a28c972ff7fd75376f401f4d3454170ea66bc77754abe9fc05db3cc676ce7a29d8303b5f80ea2e888d16bdd24a3f2cb1f79a6131ae349cf6063e2e7dd2cc2ae4e6ac4feadfbd0c8bdad6f8f86a1a4f687bd65edc3d5fe5ca07133a75cadec6aaa3356e52520852ffe21a908d897020bb9eccfe54efe4303008becec64ab579d74949b972482e762a4b414d0cfc93c87f5fd56e0616715e43d18cfc3a272a94b6eda6f1044e0e69c42a219bcffd8f75ec37a4a5adbbc164454146c1b13f2ea23fe248c4eed8ab31d47df03ec1b6c416d17433d0a9aee6afc6aa433fd0d8e10dc06bc6427680eb101b961ba12a4b89eba4f8a30dd5d96561d4bd9fb0e8abefbf3f752c97495db7b54e38be78961a4090bf4134cfa45f21acfddbd8af165a9ad6158dd9fa1e56f45040354ef81457d1a41cc0e916f4fa45d33801be2957fafb5e0f5bbf5bc58aacd14c755ce028abc3710a2c5e4e20bd322df459ef2a73371f8792aa67d9e2284315ba0e8358daf9d148a85151463cf8c8a72f77d0b21276dbe10a138b39f4143bc75f5f7e5f1823ef180ee63bc69ce51f3789453df43432a74d13ed637721b4722b2dd2e9331b420e02ba33c1767bee5b6877e932cd944cd63c21be21ffd9dd30494e89cc32bad8d920777b6ca79a524925fab050c254d474cf6e7da92dc47576b9c5240ff66189c8acd46254ff18fa5ba37055a984acae24d529904895f373167e2dc75997328f7e68d02c5731c417f71ec7a71daf434877cea4bcd08ba2b23bbb3209bd90c545c66de4e40260a07dc933910b0225db637df61c866cc44d486c116e14befe2fa956105baa41bf03dded20c382ef56bad279161397c38d461e336a9c34793c5fc84f2e2efe72de2e8d12401a964a4acea873fb20d88cb0c7262750344534a2fd51a38cd9a575bce728b132ce9e8efb32e54ed4feba3526a559f2ab115f3d355f4f8110c8ea4b3fb480993d32400c5efdf909b9a6f0a114c883405b4b9279c056046c91dbedbc76eebd0e60510d57937c6f51b06ac035dfefc9c974703bfd5cbee89df42f44ecb04435d3ba8a5221491e8b1d7e997a54584d27631fce92f178813b24100dcd36f650b4d85bc074890ad76131be4a18f0460a6f49cc9cb8e6de65085f4943d88c793a8962016676488e68a75286d8ab2679e08c8ee5c9adad2d71644e22efc093429db2aa41ce0ec5a7aa1f69968587418b1dbb923b5981fb8571fb633958486767ed68ca304574e38f97fa9f64bc08f8903522dd5275688f5fa1a04d90bb0aef81ab0cf96052f26f8b9df8afb2e898013b4794fafda82b7fb6a7f55659005c0956e3d787e6040189b16d7fd714ba2fc42d68f896544bb698e657cf41b10af736de0d912b6fd21c458b3731e577a56627b08a2a856ec0cf6d70b76c886096a587d1c50f0052b9ae30328e6635b1e192bc0d64b761018c73863c8b2c8ed8b25bf1cf46a990db08005f85c4587845ce2fcd0fd481fe27e58da643e2b082a93ab7c08b995494437cec7a3ab2d9d7cdc7ed0551eeb1422826756caa17315326e92daa3f743b2fff3b723159db963978b2375687b6b331d70927a5f836298739c2ddb905a214da5ae276303fcde9ca07f628d3091a2823fd3a0305a8d55d688449bf68990eff566f5e788e6ac21f976a1628ce3dca181e687511f19e35f3080b5d2958051934b5bd8097823a89200c69f0c4ea50741642231b7d3de97abcae05122c0ef3bb7a38b0ea9600678fcbcb628a97a8fd0434e25fb507bf42dcdabdbf1c1b230fd93b5d540c4ecb9f550641861acccc2c2bb7ba12b1f7e38f811076fe9b2cd2708efef4934199d1833694e534c85470b9538704db6e81c1b68930ea53328ba5bccde2e24f353c2023b33461ec696f96b05462c8057f7a49382350ce0612b39d4986c26bcd7b47be8a3534b0eda13d86f767d75afe912ceab395ffa74746e82ea73c8e0ff14b93327d5a68e8d152b323c475ebe17612c85595472d320ddf83a20e927d2a897382916d4f28e3402f703848259ce41f1c0ba500ce1141862aaa6a6bf07459ec763bb89cbe9e8a8d939eb475c0ac6f0e3e7b1df435ec5a65b2572cd7b83f478798ff0dd4e319216a0d0bbd431698cdad1879f6a207dd5b866c7a19540afe95345224925c3a8c8da6581e566aa3d33905808c057294ab5f41e32422af04b29ebf133ba9510e5824312d5f5a3a682452404ada8029537746ef2cfe327d4a7ff7d6f8b30df8e76fa790ba593c30e75251a21fa2add7903b94f792f1415cbf55b582b3afacd79f5801af99cec10201e8c3f74001834ab6c40c6249920dcda0f7b363fff1b2af0b0e44767613f803283ab6f47ef1d7152ddc112288133ebc18092f5d638d03086f1ffaf9fbe5d491bfd5a551ffdf2ca89fa34fcd6ed9b0ac83559b1f914d6581960889f4be8132201f224c62131c33efc545d74c6b4da4578a9a0652856fbaebddfff4508d86614700db3c818b9da8e3324c9e6b2975a4cb426c082c25a7e3b9c19e4772af3ab7e46c28660a4544c3c7504298ead0b023709e5891ba9d02c68e93a1154f05cd7497c647d6b93c5025230ebc5e375e3b5215b5a1d53cd74a4210f41edad087d5fc37b22cdeacddb7f5ead2a52ec4abdd68166c44a75ef1eb4102ddd1c2afc45f1e6c137a676679973f2de815569cdb6b3e5000f57b05911284badf9bf9d4b6ba4c6154a5d321e5c0a73bdff66177011cd0c5e60a8aeb319f158b498fc97b911fc3931fe10eaed8acc626583d250cad982f5b532aa22098be6a62dd4f91f10bf4d11784de532d4c7c01fb803d4fcfdcec286eaf2e1397f646998e58ad172a008e111a436b11191bda050218100dd4d33094f3c42a65af041c0bf80b168ccddb62beca68278b2437cba7b1ca0225721c19a6a758c614dd46fee08166dad02b898525e41c0e67d036baf7fc7bed06c7a632a42dd60dcf6eb84a25093d30276b421b7f68ae834eedb6cded49ed4fa5464aa1290735476131d070143076604b86e202480ceaa64a27eaf65dd6ae3c12a5d3e60e221eb2397aa223e94e860d4684fc35a6a7755335c6e0113cd831258b26d3e83796e04b7bcbd5f2b88eab86861bd13e4cb71837aca98dde76a5c7dd865c6cd27b83e8d463c25e8484657f59edbfda6f9a30431722e3211c082127e9b1db8319c1720f3742531efe2b0d09c5b3c5e3d4f050a866239289cd5bc76a69d0a03d3f4b2a2372c974a71ee27521120a08b9a7c154c9697c648f30c5aa9b5be3fba78b0e422003461d729d4c3db954f6e3f34f3ac5c9a42928f979eda6c63e273b782edcb07f2261ed3ff1a5d4fb703e944d0779a408128f5a0c602d5855db9b50e1e7e7c1d4b6af74959986aee834c25481028596309c52a675933864730e4a1b370572e6657b60e72ab085f177c48c1873487ed46af46c76cbc747f70be444a4c04e4b5c494a900c11222130f60cf613fbd01fe9c3bff75982cbdd8b34da4a31f93954b8fbbf959d94cfe15476898d4abb8a3f8ffd4f3bdd599eb26c7ad6f6c92b19bf9b25bf1cb4f5a6d6e8bc20be6895d07b1517e2592713c63a0b036b3cb5e1b39ad65b325154329e58a45634e561c000d26b0b3221a1216d453bb2471fb7a1e803157e6b8a1422fa93a2f92d4ceeef79a393207431939a7398cd7b0923d3d01bbdeaf4dd3c1f6f93084654dd6827ca8a481f1c903c7cc744f3bee5094411c4e2fb3dcf6ec293771758396ee2a976b2a0b24fe860dae63f3c4b51b10da7df6e27aadd5c457998a556149e3f443ad4a05dea8ef5cc4c97a221ac00de7e8b334b177554e2396324c1f1d08427325086c03fb7f9df973846dafe6c0e809c5240b425d8553124f1c8c996fb53eb7f612d3441463f5f45e77f94f2a59091892f6131caad5d4136cadd0042ec387ac15bf2ffd1c135ef5b85fdc5317e080e48479251cd665c6193ae2e1acc55e69289860df32e6ab20d08dcdf33a9431f82dd9052343b83bb3f6ef48026a5d2c595a006fa273b19462ca14eab312b1bba8cab09d008b0ecb3cb62c74f91c680a1922fce07a8c06c65501770c5ecca5b72b0247ea66716b46c92e505e39baab914d0ef12feb98536c4a74bd352c33cc1f49451dd5102c1e2d2532f7e4d848c7a04a5a7f19a2ea9ed7482856d731293fcdbdc677fb3027d0d69b156b98b8848f6a8701c12d93ac4bc7e6771936f85ee492560c283326ea7018caf8e0ccde061ac554342f1d44339bc08f183cb665b02fb6e62369b9833a728abbbbf2d113019e31c541da2a2a9af9f1752adad95a5473af81cbe661b414a2d0a7f8068961fe6627514045c436371b72a1b59ec30f9f75789c0ddbb804748e76672a3a671ae14fdbaa90f274cdd73cb810b7b4b4e1ed8124d9c8b693114e7d73f05495544520713d8db4b139fa083c60395248adb15ccd1830ccee4b0ba4296c798a26ca364456fb1a795863ea63a81bf9eb3862750e1e66c5bf0a6b3e7bc9ab52f3160f54c56dfbb22e140cccaa655034784c218c01c59f60ec97bc1b5eb93e152bea4dd071ad950b9458e4a3d4a9c29faeed281d07b06dbb2b52ed7bb36028ced2a040a86de28b7070a3936d220f6eaec8a754c0a2bb35d62ea215ffbed17184d6b1b70bc70a03bb29d0a3cf51d351d780757cf33dd1ac29be050edba1f048150b6d26e8676cc612a6d45265bf9430da2b8c743948bf5e311674511693bc6e84e0d21b6c7f54b4309220aefc18d8846ac59233a6453a48e43d87059168bd10db7d5594c910b108c0ff77e6803d61cc69a8b461b75d110222122de656d07df28974353a5a76ab2630d93dcd8de25f5a4cf74819f4ca764f18e38e8ba7a2af5c12d9333accc23a67b0c62ebcdef0002c7577edd912167106c662cb1487db65920650fd354de41bdeb25ddd124812150e4f9c28491a7628d897437ebf660f1b72e0effd26e2c898fd7cac5b3e75cf2faa9d8c07cc84748d3bd09e45b3cf8b4f24a196ad7f9d88430590554845008e9619a9ebbdf2d04b94c7da232500cb90286e7743192df182a868bdfadb98bb2779e6cf3e425585dcf9b2d24ae9fb3ce5d85f39baf86a7a441e03925033b884a2543b86c1a737cb8c364ae79a5ba3d96e9394306da6b54534770f8ace57a1a09b5a224bb656afe94cb032d4b7513c0b231e19c4703226602d84625277d6641d62431fb8184744d9cfff47340c8132321c68c674775e530b449610d01b684c52e45ab003c79e25285df7143067693ffb5c73f0810adc23099353fecb77acc51cb44baef45f0eae921b0c5caba0a8d8c6718e9e8876666e8d61614341ffa769230e2b155e29527224f12f6ebc771789aa3f7a72adb38b5c81f2603f69e49b125e24db73acedc839815327b3e2281153a3b9ccbb3584398e648dd0905c2317d8d57562c80d547b3625a1e0538400e8475c2b4038b96f7efac378587a3375ee471d3c547727e11fb90d2589e432447623775623d9023888b30ed59fe174b83e1af5acc07b14a5daa9f316e0a0bd9fdd3353a0e37f3da8dd3f174612c2e9a919b6fb9f63e83540e47b7f2f8bb588c6c8ecf7c9d0d8008a23a3c43e842fd954bb8d5b1a90c39c16bb04a8458d8a5e672109b50005263d696c5735e956c803a85de97d5d18eda9457c83801a957600e95e03959ab6c513299959154d413d25e97e26cb15cbcb95d0805b2903b08a26c07b5f0bc25a3dee91642f346f68e034db33f689aa6bffea9b8cad73030936a234f922edc3b6d1d49a13162dad31da01bf4a5965c8b80c476ddd43f48d5677e3dad27dd7e0e843b80a7b5e0eceaf5d0fdf4f5e167bd5ddc4b13c036f40b439088939adc26c60f61dd550bd41503b1a497a8976b21d7fcdc4b03b58fe939d6a0499b909bb2e0b47be3dc3cc2c9b7f9eab9938885acd87a2ad800e630c1108e51dc39456acc3fe9da33dab5ecf8d331e15bc8f5d9f4bf557a9b7c1ff2ffa796bba250884ebeeaec12132dbf0492f551858b618c1951f3240dc84194593e62c3b7f54e4590c8b66ed5deb6bdcb1048cf7ede74d6b65e8aa6edd5a7e632904847549b72ba03323ec4042f4339bafcf1490a59f0cce3356826e058cb69c7d2b7399579e1b2f430daafd0ab6be8640c701c4ae5efa15e72962ab20e338b5212a09ed8aaa9800cae4574072bdcc5ab565c098679b33f57c0306467d0a7ca04f2e2d5bd41768f99d90fe7381401dcdf5df801e1d93ab87d29de00dd3e61ee21069041d425ade3d307ec8a551fe4e9fd6df33f99d1c729e7f1df6189c3963f97e0cff03af83e084a39b0641122c7ad1db648b4c6afc1ab192f13b267ec2e6b884497165528be006b3c324f790226ad0c4cfdbee23e8400e21bc69c366fbdccf0729c002b825e96c72888e7ff9b9b3209bb6b905d4991bdff87073ac3e3256dafc3cba15beb6c4453536b0baf8f10e32a1ad346dc9f53476cad3e77866fdf8dbd13d496307c6a8c1de488ccfd771e3ec75d3f37741a577888c6beb4432773a3ea0e63d12be0c528fa09dfe85d4ca3c5e0272673fc6f8d1632696bffd110318e55e75fff758e2ea3fc7d630e4e7d139b11fa81e6237081df2940980d91f1dfd80c0ff06324316c6994b997fb497f6fc3c9f424315dc8ca44405e88b10032f42432d2d4717d47f9a4a8f6761ae13178762c81d69fee2eed1f7007978caf24e2fda228f9d93d594a9dd1e03e7590bdf703808cf53baefec0292142380e9b7cb7b69746229e087ece1fb2c3cf427f13ab7f96a86b86babe0ae3439fa3b2bf0081ccf41a49bc6d978efb8a3f70e26d9d99116683f5acfd23e1463812a9e5a62baf03e2d1b18ee92c28a2065799518ab32ee31fb2655922910984dd100896943e0b787d2a20f62cc25fe8413f349492fae53eb332dde2afa0b77c8785b0ccbe0532d656286e7a0e6e2a9149702d6f2e154aeb8a47316959665b12d965a3446719e6db6ec834165f0423750f04ef69b8fcda43e57d2b3b4813d3cadb2be34a0a7d0ac2d56993fddb0648d7f285d390dcdcf89f7a8fdc5beb31875065d85bddeb88fc7d690e5794e164bd87f97fefcfa1b100c15b9a2adbb37712c7c7b0e01bb3f1ac180a11cdc9605ce293310dcd8e2d7f65b5238a86bb70cfa7b61092245905155243606599a57ef8c6551df304b5d587ad9f823cce106c2e42a82a9df1d8ce9c092255fd9a4ad5bb244c826a6222e8cdd9bb4fe09094cd6d2c0bbdccf3d0c048801f56bbb390db8027d0ac65f7083230711533e8bb7e40bd805f6f4979f778b86795027fd438cd1ce40ad0f290605ccee85cf1296f4b1a62b6973e87e8b3de0da208fe5fde61e6c3f278f66231a1bb8558ae38ad00a830b77cac3cceb833912c9fc551484e561c0e3ccdd3ba134196ae43eae9fbdc906c681d7a405e85a5a10d6b4e87da8e51e919d583cec9e7a95afe240e77eaf57a056343e7c7928c80c1808a0dd04bfe4e0c1fe0a7805fab2a9a23b4750d2e422b912ba022f2babecec121a39888f8fc040369744fac86ac068b7d8c7ec4360587d46c18375db47fb4dab7854fc87c150c6ab6cc148868138296c6a089ae4a38484996e5458fbb78fe9ea0837002717e99129c8cdfce8c0e73e36cc716c8c2426e4ee6646b704f18b709b4fc652f7ca52815ceb80a9ee02be79511c9cd18f72cd15cae621c1d79d8378c0bd1cb2ea3b858784304bceed8d973670cf1c1ba63b800f2f047cf88fff8c5dfc7fdd5d859a32c6b909fbeeb70624b2d776b53f72e2afef7d38bc3538487d146c98499135876ebff97f966eb6dcdb3baecf8f595b844e8b8452cafe8710d4ec341d992d6ac00547f28d853ebb7fb457d9cc46f8afc874662e0e9bcd264a9b6a8a5e58adea02c1e32d90292a8c64a9aabb9c11e276554e7368abad9270764978f87faf58d1ccae7ec91f412b64c842165da78e0eaf257c8837d7e93c46984c67342deaa9b7c1499a42c2a17525c49a57e0455a7fa892dee69b9529d71f3e5138936af287c6168c166153c815e7405ed3eb6537fa2fe8d11565877e3a890b9fa849e341fcbb242028c80fbe586809bc00465c720acbe3785c5a54ec188e2a899bbe72c487d6ef494811ac1f43580072bf651dd30bd93d7e3eaebef0f076567da03950c6ed3cb67f81adbde5bb6e4e4e39f2f2676c282a3914db52e38eed321abc15df4f75574192bababbd22111a13c9d31bef123fd654310bfcd41421a4eb8d721c6116b8d953a3559fadbc77e6a64064eb90cf85ba3199864f5442f12d6beca7160848f9b6b63e010b0d88a20eb1be95b39572e08397d04a3079bba443cd46a2efe8492ce84164e76424fff270941fe928b7ecd9dda7a5c5454e1dd1112b0ac7219cde9ff78d3058dd09ff241efa719115b5745e81e93c2e7f4c9936de28dfa4c3061bfbb80af7c8236dff4bbb134fc02428e26a04fb8c9872c68aa0ff7e3a6188d5c9922a584a2252851d4e96558b0683fdf40ac0dc427be58532444e3811dff3b70dad63bcedb2a3f58eef334dfdeccd632565ff9dc4a67df7fcd48f1b70ef71fb55197bdb1bd451711d10c74689b8b21eae5b0d740c1bf37b46220ae0f290d1f1c86be303bfc1abbac08583ef1804de705844e2d74a77e1630140feb7ec09e984a427fba5303080b53fb0bee026d8a00c9e013d9e6f832dbaf6fab05c74006f456c1ee1d716f823836473a0894ae2665f7346b32fa444d121f7639c263cc4cfb2958d05fbda7fc7d8f6e31cabd6c48840c443f3dec3ba12b7300788b589f98b0b43912969d5ce229103e6ba008eba1da4f10e53808e7547b63268cf8187929fcfc35f7e9da0b8c38919e7e9a4fc3fb62fcf53bf19c10475eff71034aadec2b5ab795672814357b767e4a7493b77c73273590b3b7413462a869e1fa92ed19b20ec2ed8a8012a45a2637e7c705020d5b691a7145100a1c12213f9ffb8610170e5fb9c1c4fa2f527dce7b0c72a35d6446e02af5b43c7edabb1bac225ed5ef3ae114c4324acdbf225563c1ae525e2571c305f4727cb8cf3e55fb9a413d26aa183cc9861121b68491a404fcc110d7a3090ef8184437312e313cd38a5095e2dfb67437c174c99568543f28d98dd09dc8b28559e3850be9e8229d30ac9244f0853eccdd0397afa31dfcfc89b5a3eb9474b3c8efeebc628f9b30547dd3646b301a27ea267d0da4fb768f39946a9a2fdee6baf498ca8a1072362e507e05a2a12f46c1edc95cec7e0f0729e0d7513150aa53bf4772a09fb40aeb0c2a4509dc3d028e03ace4e6f1116333d36b329d15932f8eff6c4035632d4349a9c0b2c037dfbabb1a8aa8023d26c9b23f3463f6190554467856eda055df9911ddbac0e2bfeff3b14cafb7baf1217307a91a140aaf673ea4ac01236b143c27082701d5211a90195d1c9178578c302e76144577cc96b595b2354a27bf36f8727843d958772d6f1000b0182b7ed674633d48ecd8ebd29f97732d9d89cc1fa23e4ce66a7f3ce9795f6e674adf9c634f6eecf03df13ba870475e1f4f96bd177186ab50c8abf950b9b2d47bb82fb1dcd9e3ff2d689ac51d7cffee308dd15ae840af3fc391491a946c93ab33a62df19ae9ce1a32abdfdc377d6e9b9f45fa0d8c2a5a4ab84563e7c9ccb949ec7ffbbbb3364157dd253a73758c35ee2fedfc05cc292a5a884ede592a1dbba8a8fc68762d4d074ec5d262414ed22f7eb68d77ad3e3eb2d9f98e33d50953a34061c30e83077df3ce9d44291b6743a7603473d5487ea872b76a4173f60532445866aad410f5944ecb524d39ccf82fa216a885abf99c9c3a3a88358507c82cc5bcc084f3f9842127d4e6124464f9c0cc74479043113302e34de854890b4aa87ec2643251bc16ed5150a24a3c1d9f379ed1317d3f52091c0e9d42fbc83268cf2a6f8ae8c5b7eeddf6284f65c56d0a385ccbe363d073f90df8152c00f2eb5af05cb662685f56247da8f37eec7ad6eb323556208d99a30d74d1f0b77348721127f29d587c5981bd3f485737420b17c35e316d12dc5eb81e42d181bc4b08aeeea5965dd8466af9aac7afb9942ca96888f90466ad41b6f286af8335af33d814e27e28f16c7fda641b4d35dccad0df7535b3b76287e473ae470268ffe8d25e054869c1bb1d196ac669d1ec4612acde998934b133b4a6e0374e38ede88c051d61aca2dacca15087e910565e797efc3b9e1d1c633e03ae2559c91d32f58fb704f444ed720923ff4b3442b61a9c57fc6f2862795d1ad3879d75e83de57852776b46bda894bb62b9c4cb82279222e2bab86ef80e815fb9a297fca0514649f1a7dce2dc2a390ce40ee2a6e85c4b310204ecc57af2737a43ec247ef852ca9f6dee2964404aa0ac91001a0ce26c61c22eb8aef0e2687611ecff2970f333daa91fe34b5bd18632ad25328e3b820231fefa4710161bde93d6ebb9a1433a4a07635add374dd52ca4481ccb3341dc54b9b5d18f100f824109c837568d669e7597fe223eb8a931ef0d93d2839026d4986a36152355c3817e47e199092f26ef843c6484e0f608a734dd6a202d2d1d844587a3bafe565c43dc21914a190dc627d32057f7b2d144f1c05cd50102313cc7bcebc049b8c26c47fc5da68cf947b9ecb56d84ddcbe2646aa6c1b3c5a798831a36f947b59c4463665fcf4d411ea35157cc621a5867c2808bbdbb41e4ad9c1c1dc8262c5c360cc6b398ae809d272015b9dbaa23959b10277de9b4d7aca5a84b6c59b36cd99a0bb8abef1bd219d0522328f109a4cdf6fb17c00cd800faa2a7084ef96c2a0ee54045942e421610f5a687498a176dffed327b166894f63f4b0fc5c0e34d764fc5a422700a72c4c5b67e30b6ae45712929f1313774ee623480e83aa5e6ccdf303d468c07735c1060214bbe69a61a26811dd2347927cc20380402c9fe9f4dc0812e598f01bbab7abbd71fb3bd077b36e7930338da6ccd8e01248d29136daffb28d7280708a922e4c974b0784f30bcc4a2a7be0ac609a77acfe7bfa19bc90b7021ac557b991bea866aa5ded6cbf82f855cd2fdf106411c60add8f7b3b7b635e1169405df9cfefbcef019f7653950cdb5e3513a51b425a1c28fe86b72cbc468022ff4c37290cb04886f4a1b907941c215e444d0b96130aa8e8bde9bd45abb13fc5f7665e326416c81b382af576985335dc1ebd81c7fcd3b2624f39c9ed384cb2972eca2bd6d89d2d8d263ba08288b72ab646939f46d10a703d4efc360ad28707429d81ae3a9bd96cb515df1eb7e708fecb27b8918123a107142fe6ccdb0aba5047da133ee131cfea7d9e9473d13f5f298adb87c2eaba5f3c845ff18ec1876cd5cb607a28589e424f4e49e9b1b9eab5bd229e17069f6064cf568699b8500b976c1f7f87b4f791dfb4083ef1eaf35c83d806127b50ca066860aa387b3632c439bda73a32f41cd27e26689ab9f2f86e80e3d93e7d8f7aff9c3fcd13146cf221521176ea5bd824e11dc2ebbc7924838394935de02692e29627eca3ff7dd25c7629987a228a84719308deb9d2f3ff3a0bcd57c6421f6e190e193413f4faecd2f9fb19f93dea28bb51e4dc84d5519467a8db850b4931420a722618f8e8aaf1651dbf85c356021d5d388f2c0e42702ec61b6cd3e6b14ffdaf071be817e086640e4da9a8ed202c11d4654503166f975a657d819a4e1a01c4a56a8033df2e9af1820517c426e41daec391e7ac98ec42fdf9a5df7f676b738da0a78465985ccd930f26b8a9c0f707d77dd4216bd26a418053b2adff7efca3ce477453e334486b90d3e8398bebecaa6b6b85be141e1c34b706aa78a837d76ec09ae9ab5e38b06c4b28d36d33704cbfed1a0c2ee9d6181b9960fdee9c3cf2cb0739bf59c9c167b793e1133b96ae2337df24a03e8d9701ede991de6e7e65aa019be9825a12bb494e2f7a9d69dec1069f193e08ca0935b36b4d81ded4594e0de2066b166d0ddb0b8c7d51ae28fd8557815b4ebabbac0c99a1b286823f1dc91161993167e077eaf700b5da785a32cb4d108161c5cf362142d5fcfc618386c6aaa2f30ea718a85250388592b12f19c91946d89c43980e591bce1d7a3a2fcd0bb9836480ce0224fa94224dcf81ad211de819ae2979143a7b787a857b172483d0798988fb1fdc369ab8371d8b0e02f4da913b84ff165fd081c9bc3cd03211c36772ae9425cbc142730faaf53f737f4308b1ffc75edd38f9a821622636dd9190d287525e4d7edc846f70d16ba5f76a0d1cc3a7c29818736108b251abf065ec41a8297302e68c01e9c613371faecb9c16b9989e1e6d67a9c2ad753b469efb80431d3e961919db48981c4a205d6fd4f04b44a9e507e888d958c9542f0f01e54286deabe963f176a65eac896cfd28b01aba405495d32d3a459a4addf73ac1a7d02074ebbb2a8f7bfae22b1b2ea7f5f87b7cc3b1d35d44f3849d7da4e4a02e6e373b63fa5c504ac35b90f6040c343b39bff2240dd7e19c10fa10676bc2e9683c5594d36ce5c9b544612c1b02dc88d224c012a4fd8b5ded4023f3a532139d9b0da8510fdb55e0ee804a3efe1cba3f41e7f638a8852172260d775a2fb60da49b1ef2e7af7c3f9f6ee343d15676b5714cee865287d95fd0336fe9aeefb0f1241e52f7e80abf91ee37ebfca7aa7343259329f0d72d5395df88a5a01f05faca3eca2674d3ed2858390719c6e2731ac063190b2ef18fdc2cb02647c41fb037e4805a5d712c3e0fb11ec641529ac081e711233c7cf1a9168b0d0430043e5f9972fedc972f806442ef7f56874c01e3980d71d82b8691261404fa335a8430959669b086ca52c98aa6b73e73b2005fa80922354e566bbc92e455aa0b056f672a97b693b67a56880386a709487d87e40867209d62c36e21e1e4ed478e857b826ef0fed9ea56ab86bc46f09a0506e87543ddb8a64ecb26716b56b3f223878ea459cd39347971b502f22ce9a140283271ee5203dd26484010cfc92a6818821dbe49d0fb3089717257cb10615af00fa5846727ce7c332047d17a4543910596bc7d7067b01358a5ec584adce7bbaa4ae8142fb0ef0ab1496a7c85edefb71640136f04d540f741ab9c0079e23a7a2f03cc338f81a38978c56b8defe5d24a3739a25a4d112dd7760f7d251a1d19729a0519ca5196b920c979ade81803605de6ff49f9761edfab6d596ea3d0bd2e1ed57bf2a17ab5f4d984761596736fad9fc74d0bcab4d819231b90dd4a687c484620b2631cf09695df44d03497dc9959d4438e17d2c2ffa2e24532e3e30c9d0e7dc28968a69e9d97f4d165d36e3790a3358d8aa36519277ee6148606896bc7a6feb57e1785a86601756e3863d90fc90d86b13a3999ddb13b6c197cdc147cb592e0ad7aaf38c02659ce5549831654576e4e9b13024ab77ac46a89db7257add02532114fd4bb9a2ba6f1fb4fdd95dd6b4e0ec821a417ca3c558b28a43119f9c48c5e9a591269e5b9478de5c8fd23dad8b36de919b2bbe481a6c1dc70ad754d81d3093633e14dce9037c00167e6ab78b0fda1173b251ec51bd484473d4d9b10713c6876ade1bd143782f8b79b4afe7ffc6e55659a9aa2d95f364f36f5a354a5258d73e119e7cb4c9cea3c5f97818660f3894c7724f0c3b562947176735199d9cc18af5b9090fa6acf717b0dcbc30af7119741d747b9fe3d084e1ebe232f5d14efcf17e88ee94c6f3b5dcc3d7f42996ec172b10325e5411c5ffab7efc5c1675fb7d35603391f4101fd4e9d2f889dbdf86afc216628fd1d29bfff442400d0405d45f27355838945286f201335b04ddeae61c248b9a0f32e88d45f2063b051cfc1c70d8e37fa939269cd197bd368b401e3242da5e1b8185c3ae0e9d0ff581fc9343b32a47d8e9e19e3b3fdd9e2244228ba9112d9a0f2b151b47ea48f65eec03088606ba7ebff4f54cfb52586ceb1bad288002853a9891ce592542ec3a3539cc3e1b9779d5831cd2a247ce8ae14a2839239786fc4ad847434dd7974604bddbc9ca37a65245290ef41596f835eea245b699c3a29ffaea5890619497bded47c6e94c8262f6dbccae834b431e1d294d4baa3cdc28f9665f3599e24895f785c1acaab15b60892646741d5d8b13f3e88245c9e00b88b16e41a0ce141a3e093d0136baa5a06e8bfaacecf9bbbc1b3d1a9f76f08d0007b80fdf8e9a36da65535993c3ab9a5545f78c6d1259c948a49ce58c68a6199ce4dbfc970947044a43a32f7af7c31b67504da2090f1d98293ae3f1a826f7420a28aceb77fd85594a71d87b5557ceff8dfc4242875ae4b7d5b709fdf43839d9cd66e34c99016199124404e2bffcbb397155fc3adbbf3019fd9e2148ba177769c942760b70aedb2abcb3ec51fc217d0140d81a5f88ed143c5143a75c83289354ca01c7c5f77afb45d2ef3cb9b37bf6cdbd9a39fac90629e3e9b42327a1f7bee91367b9407576dc193eb8018c8382860c85a3670b04cbea53b0ec5be10dea12b9e9f027fb7542af7386d23b5b1d9bd366a1968e7a6741577b1b21eed5f941e63bbf248c00664cd0da409df71f5d95583f79f18630ee74459dfca7293b5dcd5a87a1806629eac1342fc8e4138931a2ee9186c2450f9e9b2956e92426aba956d749bb3976b031dae1a9982d7d23feac3ccb91216df5141c501c5b5bb523803332a50ba287dc41ba3361fdd7bd35030134465a965a52f5d237fe7aaa013b6df00aed8c4bb407bc6172de189aae16dab6aabb2ce38a4ef5623d065a9a521e961ead16227e62198a9e086c269a4a06489631195b848087caecc7e6983b4c27d560a486d042c4c29c976f4f26d5fe68617e25ca808d4d3c6d581913e7c9995ba4bca61d8371fe3f424819b1faf6f119ccc7b45a504c35510a7958467bccb0eda0d435a719418178c307b2ec02d90f36ace28e689eb5f048aef98813e85dc7445af7c224587367d57688669e23e43cfad7f88ea5e83ab6acadf82ebf43bcdca5defb82ea2a383096a05cbf3394e26127e263fc77b8473413ad2b969dc4c5381caaef294cd359314d73be433a71bea558e72bcd97faf33ee4feab838c168abd49ada91ac13b2682f16c3ce672421dd97c33311b624dd9fdbd16d9f99c090c8c464dd1f8b4e3c9cf024c8abb87882315a766550e2b1264b0e9646f45de1320983e3e727ffe704ed129892c85da2aad1e0c1480aa15eccc7d9071ccb16ced581eb87fd8d7ef0d0688bddb3872c5d7d41b957d11cdf6f59dc1772c66747b0592537432501c7e5c18122cdbf5cf2b35b8867469a791e331434c5a7efcebaca035f0a12e5bcb91c0480665bf7b02b6cbf9ea4ac6e0f447d7bf8e6ca150dc177a8fd53ae4eaa2689610262bff5d7bb5917f07ea41b2623480a8b2a7e807c7ca6583c85a79c89fabac34479a507df5d73bbbe495b2032ea34e699a1fc1c95c3fe1aae9f32631b37f18612d19b622cb4c703a13eeec8c4a91937026118c9593cfa678c982d30a8ad6abb48a2f97f88381c986308af27a9d99e651bee31eac9706e33d4695ea98fa19dd9a4102a3a7c143a5d0659b3f62c8ca84da91c70bb12af0742bd88bfc1f7e266190d439f1f49ac9f78b6ef96f2a9404d297458e10083ecd5029e2a1a41a37f06557b74c1534d29b054f989c1a73697802ec9fdd1993ec675681d05bd50e2e62260615d8f1ee4c1272aeae621f44165c1f1d7463bdd88efa7065458f077cfe87c9d5fed0a4cb12c71e6ba99202993502b4cb6120a54793e772426cb8be87597b76021175afaae3da9364ba753cf8312e519c8ce683d891ee34f3004f8d74277726a63f0098285770241ea5c1fba4e79ba9cf0dcb11d4e20ef94cdfe2ea7f7664d9c416d67e3bc938b207a0abf6cf82331ddfd8275b2e9648570192db6a2bb770e3179f32a151d718b588963dc1a830f50d0c8f3fae3723d7ce631a13445a33f3e117cc0e03e2237d1e5da81bbd0781cbf06f5deb03fb80a3d683c1accb67df87cea1999208db9fb6e075d15906b2454a5516412bbb6b12e5cbad8dc71e8a61e9b6d41629099f6e1704748de4ec8f240b3ea39697a5a34b296a81572e3af7332352a7db4fac309e66ce8bfac2a0c563f4259b5d2b372936286971efebf21f17912ac6f83d266472d9a008c6c650506a9aceb26c90729b4794109415d8c1089a017668024c51969f6de82f3dc72081cc0f36a502e061744fd20ff9498aacae1d8dbbdffb0d188d8a737e012721a54ca3f71d9c7c0ede36063ebc8a621a74867b2e77557a38955105c2044b9754ee98cf05da8d37510bfd91b8b3af8bbc6f752749563a26356269739401e241f6af8efbd7740739589397b1c9e5e7e08b2637ee2d707a8ee5d3978d5a2a070ec42768f1b5d97d94b83e9fe272f4370bbbe200cc12d4a618f4c37caec8c63148bd39d744f6c458ab11da249fe242ecf08a046aa595ac02dd988c407d32b4d98ac648defc15ba9825eb57dafdfe80b13daedcd8b5c94bdce7625009c44b77f20dfa5f5b971a8dca9401d102cbc95b7054abd48ec29090e49b5e7ebeadba32bef6252ce754b91eeacbb014e0811fd33dbe35442f1995d53575b7ab844b6e3da99b5c13e1a0c2591cf09044bc750cc5dab9e5a8fec82a093f121ba9c200a993670faf12a5b4dccaf43c0e01373f4ab5148b24c9161fe5ac198dcf89637dc5c7696187615700c10863f5481a44686ce0e1d52c7615f3d59b9aeda7946cd073d19683d74aa87afc0d5891ea1479efd45bcce278efeed9e4cd68b0460a05b8a80b9a64cd6412f5d92f53d5b72bf7547d2bd0448d177ddb261e9056aef40d91be4ffaf8ad81862695f4f9ede1841ce443c68686462e2856cac7543a3ec6e791ee64620a445112231aef9d0892cd72ff9fe8f5c92c74b1454dfe93e39da13f19c04dd965312af899f144377c40f1c9e8184b99ed312c601ab760ea2a67e0b3475fabddf05f0aa8133f212250bce0d1bcb4d02d858d6b2b82db99415a16f4b78625058ca11a36139996ec65cf84b6e156113da94fd0b7aca72b34cd309d94a0952769e2dbabb69515469abef9ff43d9358dcf10e41e258ed4bc9103611dd594c7e67e08037a792a0d11621799bbdd9a9b8cfe43a0f85db5d6e2417781373b1a3bf41fe311c101aee4a461f4c9bc43abce7c479746d4428b6c4c03459948209f9b665f6dd6f41c03455f2d47e8fa46a5d7879620761ee57fb3a71083dfc18911671e4ac54abdaf1fde20385c0c68deb96a9615701dec452d34f7b10881dc1f7c3bb5c121b30303b9b809a699b5bdc231215cbd3e53699bc09e360411dff8816f0c9cf1c65036002875d55f96d58242eeb1d800e97cdd37c0715f0c0884b0c6a51d24a6de27d4e9024610962d532b19c080e1956a2875a8f8b43a7b87c44e4354ab98d033de6cb81c55b606008d557e25b0685518282fcac02aea8c0076a5839f3773275a6d07ffd6513dd99193a5da5aa18dc137fdbc69314416407423338dee343ee40de2c39e128291d68d75926e7a64e108ab17ead7119490cdffc4531fb16195d5a91eb82b535c64a0089da39c890c7c58349a4d0a1fd8e0ea1aef7d671719a91e19f7b0c7506bb0ffb26de43b68f5c2eb2d3e2a9c7904ab98f8a2167e875166207a4d820f3af6545b96cfadc373f9579615beca70deefc6aa0d38a9cb63ff6147a5ebe4ffc266833ff203641575b2c313780c7e5e66e34d2989c59c79e4cd163a0b2dddef5aeb60ec049b5223b635062a700aac963e4034b479caf46a3380cebb0aab537e32f9f871e7c8c6082b7ce722bd650adcd2c3c69030686e08c5856c36457732d7ddff4c0cdcbd578730440790bce7d82382a1ea7f33b8986d607fb71a624223c002c8307c1ff8da24e40f71e833de9a60453dc75f171b1a330391ded3e446ce8fec582f4fc7ff182c554f20b6b9b74447001ffd7801266348646f7a846baf036717214af873d6cd18029417eccf1255769e42ad3870f9990e775d15b60cfe3fd9812d66a062b4e5c24cf3a8fd774e800d7b8709a9e4eee04d6eea58c56d09daddb62e1d0e82f77f5f92eb8591bdc4c154a36977071fb38c757c93fd885e25bb9e3c972ba935f29445d47ad29647f762fb24529c697de0bade5f7c0637ed730e664e37f6ce6a378d359b803e0d1e6447240c78fe1a41e05a3504c87ead72e3752352a8135d65c2bb5cca9d8645b312bef3493d0b54918d840ca454fae5c891c0ea69933817d26ed258fe42052142e7eb2c743d43b8406e3c3ec07cdfa5b69096a6c5fb43c7ec7c894ff36be6f70c04118eaac6e43fb66d72b753c8768b23b1b71a983de99f0bb6f0bdf9f230b272181844bb2d61bf1bb754bb4c318825df82b0680930192aae035803735865b0cdf7c5416e11eb6674b5c4a723d2c9421c3f79d369e0271237987b7949db328d5fba13eab6970827fe006e96794c09af997e9c21b06459396503fef56b4f8f2ac688c22492e820144b5c711ba74aab5cd3da06adf178be33291ba42ec7a7022be6a7e3dd4614e1f3f713f2f1350cd7e3e8f364099a8fb8e01da5f5dfe7d7dbf6b9f141dc069fd19d13023c9019d0c79163810209deba291fffe3a13a41aa8f6ae06537ff3aae47b1d2d6d905e9cd0d1fcca6562e266caf2b81166667bba79f9d1ac17d697a8c9b84305a854ec55fa23c6e3edbff8df6d3b0fd1de4a2fb5b6923630be549cc72bd2d47a414512da10ca2f4a5d81b1ceba981b7f5dc38babe19bbf469f2f5a5c09f3045c8366b95423c4a079c77b1a99d51b3559cd219e654998309507679e3575838389ad0dfe8c45fae2c63112b0bf19f8bfecb18612a9128d8c1eee52a646d9cca230e12665270f58c2906524351f98882c9211ebe0f403812ab53d77224fb12a31219590309107c7f25b185aa0b532364eb766385dcba9e95b8ba5807730196c8a3aa2b7263e5503a1c658f7e632239079fa758011afc771f88c67c266c7b1396f0aab200b647d26cddfecb8637216cb1e9601c649627ca1b8413ca62a71476f11beb4b7b202a5512808fe4c0018dda0146eba74fec4b95554f1d22253c894b654e711a9907e64121c533e65eecf49a8f8c1a0d12a332c25f8aefc25c5850a3e9eff4349ca59a63d05c8b10c8e0e9887baccf0839d78c49384e191b22888dcd1810c84435e25cefbd44c07b0eb7cce653ef3958cac21976d1b634b7dc486da0bb3343766492b2b6f85b7256ee6a8d983add8b0185ceb831b383fe57b0554d600d489dc84290d8925442152741525c1d5a3b9d82a2ee4b9dcc29499c3c41137b11755a0cecc1e66a380444dc187bcc4b0bcc92af86b1f31026c2ee9a12569336845400c30f4bb6594ae99f646daf1abe4cb294c989b7c863c914c1dc019b191553c5ec5141716e1bb31ee82d54f25004949701bb33530c110f03c25beb5fe32afd03738bc110a3dcf8d6512700df55994b58ffbb5c3387512196fd3310fd34b67d56652ff6dfa0429ef5e11de8c9078c24f0565be03445377e91c9f49b458c6db8c6221dcd8979b8b7672a18a9296c4eba26057b3f914b8052b93a1a378164fa3e08039a767bdebc7b779e4fd4b7e1ff58a10f7c3112bc6ebb625e67fcaf09cdde0313e6a6d7faf239400baff15db6f0b59a2aa7bea72a5baba4b89f0aa8aa8455f51c7d6b774de9ba3f3a64a83dd0af79ec8dbb378dfabf2c16e97f408608966e09df08f207a78f392d1521fc1bef260fa572bec24f83d8f49ec1019968b1cdd0561ba7c29a2437998a9a7bd764be8e00da29623dfc1003c46d76ff90668918a84eb2842f28b3463d749330cf1d98eaba946b8496bd97c365cf5287938be2fc89e61af0619415f43f1062737a3269e69fdd62d9b61e99bbc6b2b043b50d4ff898004bd18c1a9967b80e868a06192f8db4a46d61fa092edf07d4994f452264c18d3b309e8325d27d55869f88f73c1be4764805164db94e2e376b49faa8355bdbdf5ce5ac21cb869ccb36831758e637757aad0b4dbe23112340426b2e388f1acf118dde509a1b86d7906c1fc746d78f0e738f4dd74f74ee1faffef716ad15de8bd2bd52f25dea34f31aae7dc7d9ce1e4363e90b64c7ba396b033774d587397bec6e9d7db54faad1d82b19c60263e5761bf96dd8be861e37f050d326d6ccfadfd0035ae716342466480809398f6b5ca184d54afe49361238da092c1eb59752441d4ecb576ad05d06d2bcf533c026be3a3faf2eafa4a82a07ef08f0ec740e9347cdac7c3ea44b242a4cdabed015360501d48fa9bb7f24883b987b8a5a61e9e9441c9128202e82ade627b558fb9a1e9acba02a8ce69cd21a77040442c9b0862be2894adb67fbf5ee0bed24287932b3afb180dc25a8c5d07702f53e852b1e6cd543f04bacbac8d727dbd89a6a5b044794ddd4f516f91de1d5abd990ca865748bbc1cd167729c4532e2169973e4ecbce9f05373ce23994050a58e06569066a76d38bfc4677cfa23cb2ac72ab0ed776233e3a317689453c5c79f68d8ce3a8c0ab0e69cc0105eb4425d3f7f22f9b47cf049d9a49bc91061e943ed3926ee1787a0563e31f8eb443e050ed9171f72e4e0ac1867853c2c17a29ba64360b617e06cd28e87c0a85bad6723ecc61a169a37cc3d8cd215897d5ee7ca05b27feba41ae608bcf1dba23423deaa7d7de791d0ecb297f82d40eb0fcbcc6ec2a614bf707d09f1601874596457d5830f80ea62466c633e2e0028266ada52e1a9fa9c29fe46c3e4ff398599117f724e079debaf3b51f31379c630894a90eb4d1f5f6d3ad23b9a036bc666b0025b57c33b452f16020537d83649048051b9d678d915c68d4e128e6f12a6ad494128e5b6f8ba72426f8806f40ae59069941b58dd55de5fcc5163d00053e0d5bbf54d9df47d34196e9acaaffa83a1cdd5b5eed2ab913e397e126a1f4d4e3297d071f835408d921fe30dcb9524823b746f89a190baa9a48a4a97bf3c5444d62e6e13076c9c49c4c511537806aa2aef475786e795c8066bcb284908a39ceb89d24a37eec229116a32ff7e3c119cd2d43f2f5118b73fce0a1d7952bb4528bc39022ca18679d23f2fd1e412ac8074d4041367445ea258238d717a700dad4d73aadbefe9551f05244ec74817ff9a23351d828035c972bbd2c124a355e27091a8ba8f430c4d79152c82dbc3c98cdc83af26c90e7e6b29786bab8674439d0e9a965edeb237d178345897e70814e13ec86b2bb370a3ce86ed26280d5b95216ed4494ae94a3541a8cb5b1268067202a84a4d312f262a862cbb4f3bce2616ff3f3bb7a07235475134048ea8d7ad62fe27083da2a665f40a3986e61b9976747472035d4100dcec84c55ce570cf3a380e217038e7ee960267cc343cb19c934cdf83b791c6af58b53a29f308858ec5ddc5f9ed7590249b5b99d805174a90211706dd67db03cd2b73901dc519e52a8f5e33685d8f41752e4443211f159fe6e9c47e7f0efb95ac6f14ab828e1e3ea40bb23d4b391f8834584ed02025b8a3396b62fe07561510c0b6a31373ef38b952f58f087a68bee8a69e0ed9bc3bbc41414b41d27e3d9c24802d6553ef38f8560ecce0a6dc3c9bbe84498d8ab3212ef5c1e54fd8c63d02f1c4c5f0161d8d8a11d848ad8835e79a7ad334da208fc82bc94d3b410c051410b3e13282824a68007f52d02b4ed77584bb21c4ef1eca0d19543525c0f16e39afebebe78ed9c03240585e08fe7a697de8edaa95f744611b3b443c209e090e75500da2e4e4a05c4a68551f375efcda07585f9b654688e6bb314104a02ffc12471f0d60959490da6598362d9eecad2b5fa3507357cc044ac76aa330c14f9b87ac34bdb08935b0e06ae3dbb03961ca29a9fd42ec3356aa7489fae967ed1355d936c2f2d26c4610f93190eba3b8a7739ada2b554012cf5b5241fa5632a5b1d53037a2c014472487abfb6b8d2553f8c1475241b08bc48c07ac12c669d17eda8df44fe776ae6e9ead8fd770f63dd8e5e9fbfb5b8471f98e62d1ef4eafb52d2b1d19dda229bde0825435bb4b068c17c71e8fb53bd9c1609eabfab61486f3956e3ae86ed3636e5996685322a5015d4a07feb9d964635b8fb614c7e65a4db4f32a6c4eb3c7d137e0d6a00fbc2da34aae2247535ba67f34cd6a105bab86377c36369d3791a7cb95e3b67a8d746309ef669f560550eac572549fcd17c18031aca1125fb088a1a32c5fdb916130373ade69cf700bbf942354b3f102e41c1b7f6ffd19e481bb70ad9aa26e809d7d0f89af44b30c424fc6e78e2d051f16107b200cbbbe85db76def980b4a2ed216b2724e690d81933bf7818ee588b46a6c19b5176e9d277d042e8ee1f9f700e96ca516b7583bc26c613d81bcefd3fbfd2487ba961a0d6ed40110b1b3a150c02510aa8a1a44535a586d7c548c8ccb93e90f1fc8c51cee9455b2cd9bb0727b48de4f30c2253d43b4b76832d58acfce34989821767e6ac22cd3cbccb29284ba5d3a251f83296617b5f53e92d9b06120066693a867bdf8bba285b630f87b1b64fb4785b2ad807a8850e12bc4dc88f84028088a7c9992faf570e90b43bd6ad012e60ff571ade3aaa1c7bdd98754c3824a43dac9c74735a7c72dee65ccd360739534d4d4d723bb6cdf9f3ecda1a0b12e12a543bcfbf132ade40c654625c277c22bee084af47a9bff968e9e57fc651504db8edb48b0f58e5352b60c6687d29a224096cb08a9d4c8bd8b4fc21cd85d422754ae49791b4b95989d8965c8906aa87150e39f062331e61081371c76b674b2d0a705f444b61db46551b66dc2998da90ed53653afc7f22e04a9031989ddd657f932f60a0aa5ddea12e62309b5efadcc74ba97320f978543fcc961ec897403c22b7ad77c3f000ad60c17e953cf613ea7b88673522b4401292a6a94add973dd1e750624a6b8ce21e6d76e26e7de61fbc2126ec55a32ea827e337ae11e8f51896656415f5465aa5ced264176b2fa46aad2c0fc4b4fada40be227dc3c63a8cdb0104714aaef8d384ee71ed6a308593a5afefc95cb8c99fd8ae7aca3546163f27cf7c1cefd5a105e0f34bd15818728622f3b12bdf191debc5edc1b5a6371f5a8bd2dc9326ee89cb0a0c49a4bd35b7917b207790f6e761a61b63fd0c951be5237094d88d34244a6c833fd9208eefe7a665e7ffd0f791cb6b6f476c1e6f4e25554287331c33fa27d64ef60cb3c26073818bfc05efa2c52af116d2625d5429447379c8d9070a7bbb9ba3d9f516b9d62fd4b27b522fbaff826b91a5f39666056d023fdcb635c7f8271f4192e17cec0577b65244f89bdd463d78af35f2a9c258f1aa3fcbb8056f76d7ba958fd40505eaceb31e41e20b37b7473e8d3b2f4dc46b545c4070bf2c752eee80551f4adca51f2949148db85326c20a22ab8c96f7fc7dedd35b3534f14ae55f9239085dd1d8c5fb5115d5d0ab7cef2cbce41b9e674d36b0e8d35b1755698bb6925f206933938c93ed91920b2fe0733cfb06c1d94398a910d29d8d02a1e532b620ba45413ed2ea7d414aedb6976db9d3911542394109736eaef7b535b8bdab1ddac3557d987e35b6a37ee4ab3d88e384c422d9cec0b0e32ef955ae7201000000000000003af3b1b24a1e01dee740fadeeeba04e209888142961fe085c38ffe4ae347d7fb0efc432f05ddcfc90a9b02f4a74122dc71ad85a2541cd2d727fb7df19a56506454d95db7ec86061761789070500fd55c6a23cd820ef041f99082fba848ecedfdaee301616747bcf8266297e22f93e7c6f42783b6671afcdd1a9d924fec401803786579630c8f7d5b2146ed1307ba1c3f0ce3c0bb13e87a39e5a0c349d28ab680b5d27cda1b95ff6adb096366f751819d2df9cd196fee950455ded946c1ea78ae44741d3cb5818c575e59aed18fcf34107784e929a510c70aa66c0fbeb485611492597cf991a1a9e114d2db97e3c8850a24cf9e9041765b77d22b12af8ed06c7d8bf66775a919cd3e683636e07241a87cf156d8d423def78f130c8b67622e932470f87027a77e1fb07d555b69ba2bb3f66a5d2298718c11ecfd05c2d8429d4dd59fd221062e5121c279ed266f076cb8adb87d1dd030b4600d21dd342c132904ec154053a2358a4271b38f046739eddf8464b35003a043fef1c01f8ab624c17463b2f99f3a09ab1397bb61db0afe2233c1c5d15723a2d84782ca971ea8a8978e2244f6b174da55cb86719de801d60db904442026d91b8b542cdf0af8e3bc179b5e434d23172dfda6e92b18e8fbf24e806faac161f098eab67ea144b9410b972d06e83c7f3b3e7be072869699cba2d024c862c80a64ccecb8ff4aa0886ef70331b99eb0638b22d4828a5846680db54faaaf1635063912361b6f239aed579ab883e74fdbd31a1f10958efdccdf1c7da467d52ee3671e1f5db4d76e2972362d10a84c75a013c61755374e75e18987fa1b6b0e8582001a5cdcc37096b344041a77c8f3a16a3067ee3293474e1cbc23e6180b0d749783eac215100500b1dae8ae11e8ee80a7e355e1700d088cc21331f8469ee611379cf356db833a93385275604f86879a238843aaa9efa9fa5b086eb87ef3f8461279c0641b4e5b096c4530edc40b68e745828e20d7847b8e77ec2877a4dd9086c6048a3229dbc187bd68d53c0a51f9d423246d8015450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b5c61349df6b565950d99bdfa226f9cc569409ae0780bf78a15fb36cc9d27ab7d9d869318d29f72dfeee233472bcbb9f8d7ac8d16c7c26cfc8fa6c3804792ae61a3cfb0c8a94a2deb9f92faaddf8c0c83ec8aa4ac155feb21bcc1b1331553c72cd0a79879018576799f705edf8a934291b2ca7cc94b746c2f3b9497a3e5346e5c1a653d9841e517a3d7c06e5be2a69e1c58e5b5c1b95136208534ba23f54e1f25c0b0d4f9a56ce461c3d"], 0x5200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dlm-control\x00', 0x41, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000400), &(0x7f0000000440)=0x4) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'wg2\x00'}]}, 0x28}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x48003804}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r3, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8811) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') 00:14:43 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80, 0x0) r2 = socket$inet(0x2, 0x1, 0x7f8a) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) fcntl$getflags(r5, 0xa) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x4}]}}]}, 0x3c}}, 0x0) r6 = getuid() setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000240)={{{@in=@empty, @in6=@dev={0xfe, 0x80, [], 0x22}, 0x4e24, 0x1, 0x4e20, 0x0, 0xa, 0x20, 0x80, 0x3b, 0x0, r6}, {0x100000001, 0x7, 0x1ff, 0x621, 0x4e7, 0x1, 0x4, 0x4}, {0x6, 0x400, 0x6, 0x4}, 0x7f, 0x0, 0x0, 0x0, 0x2, 0x2}, {{@in=@multicast1, 0x4d2, 0xff}, 0x2, @in6=@empty, 0x0, 0x3, 0x3, 0x1f, 0x61, 0x6, 0x8}}, 0xe8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'batadv_slave_1\x00', &(0x7f00000001c0)=@ethtool_link_settings={0x4c, 0x6, 0x1, 0x5, 0x20, 0x7, 0x3, 0xfd, 0x8, 0x5, [0x8, 0x7f, 0x2, 0x10001, 0x200, 0x8, 0x1, 0x200], [0x10000, 0xc8, 0x80000000, 0x6]}}) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @local}, 0x10) sendto$inet(r3, &(0x7f00000000c0)="379b53352d2c5b8c44f45a7d66de78153486d6350c0549d0857bdc053ea4617a9d2794b0f2caed50001487e66bdd073a2be3691b1a41dc5f32aee25fc8e2b98e37ec7794dc251bee5b8fa6cb48a826695933c03d6bacc9b718b8b84baca59ae5ce131bc74e5cea6d1976661373fd9853cd6e7937766f80087f60ecb52922", 0x7e, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7a, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b005) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000080)={r7, 0x7, 0x9}, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x2, [0x0, 0x0]}, &(0x7f0000000180)=0xc) pread64(r0, 0x0, 0xfffffe89, 0x5a7) 00:14:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(0x0, r2, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000000)) ioctl$TCGETX(r3, 0x5432, &(0x7f0000000500)) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x9, 0x5, &(0x7f0000000400)=[{&(0x7f00000000c0)="fc85046b423d7d46a6fba9370f648ef047b1ad484059074b3c8c4a98da3662eba9e236a980600af8c0745d65", 0x2c, 0xc7d6}, {&(0x7f0000000180)="79ccea87dc29714dd2deaf8b8d560d371e3354b1e613c02081df8a9b2a49a284723e6023ad5caa5f7400f702daa023238e5ab03b688b8a84fcb27beeb0297bc8ae0d52160185e665860c4863c1ba575c494fd3011e5078426bfefd22ef6f1b5060b20221b6371a4bd8afb8237b7e88865a0eacd5ae06a68cdbac7a3e46eefe4b2d3263a201d1ee71922f3e73d6bdb546701293f59c1845072a0199be4479d8", 0x9f, 0x7}, {&(0x7f0000000240)="a294ac748d908da9691b230046b283b7d3cd71d4eb8e685e2e1d72fbf02db357e6572aa2cae3b9fa713c7d4eb98be7a8da2fbab2bb39ad2d3ebcd77a4e9b8c1de8cd7d99fd0ea7c34505bf2b9414c7dc3d4f680f6a7ab0f763caedecb7700298aa8072312c76a8800334395bd38f8765760b84535f05191de74c78b099dcca3dc03339e9356501b93409afaaa67967c40de46bbd977fbcbda13e47e647375ce6f47ff526a2b854d4ad949b7236c016076eab9b9045dcc0586732764fa8f3d5db7b966ee2c096463f", 0xc8, 0x4}, {&(0x7f0000000100)="558b6271412f6f23e82d6248", 0xc, 0x7}, {&(0x7f0000000340)="624ef684027a64cfbde58f3007bd6d9d1882805b70432a6abcbedb76026188c764850681668d362fccd683f14feefc738f607baf0badcc7e8b33d3f27d9f308b93043c689df1d4bfcf719958dfe0f4cb498cfc668b0119e25e58b1410cca15cce2b72e67a1812602f877af6eab7c1990be3ee352983c0081135d2c617a7ef6992cfff751be06b45028c70f5e4505dfa25573b1dcdca15db29e38a060e61270a2070957ca47569a2ef2745ad0ec", 0xad, 0x10000}], 0x100081, &(0x7f0000000480)={[{@dots='dots'}, {@fat=@check_relaxed='check=relaxed'}], [{@euid_gt={'euid>', r2}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}) 00:14:43 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x50) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000040)={0xc407, 0x16, [{0xc}, {0x4, 0x1}, {0xe, 0x1}, {0xc}, {0x8, 0x1}, {}, {0x5}, {0xc}, {0x8, 0x1}, {0x6}, {0xf, 0x1}, {0x2, 0x1}, {0xf, 0x1}, {0xf}, {0xf, 0x1}, {0x9, 0x1}, {0x3}, {0x4}, {0xc, 0x1}, {0xa}, {0x5, 0x1}, {0xf, 0x1}]}) 00:14:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x9, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) [ 2263.802888][ T7071] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 00:14:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x4) [ 2263.854744][ T7079] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2263.859549][ T7071] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 00:14:44 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000080)={0xd9f, "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"}) pread64(r0, 0x0, 0x0, 0x50) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)) ioctl$TCSETXF(r1, 0x5434, &(0x7f0000000040)={0xcfa7, 0x2, [0x895d, 0x6, 0x2, 0x200, 0x8], 0x8}) 00:14:44 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') [ 2263.975384][ T7085] bond168: (slave veth763): Enslaving as a backup interface with a down link [ 2263.992277][ T7084] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:14:44 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_int(r2, 0x0, 0x2, &(0x7f0000000100)=0x7, 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @private=0xa010101}, 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000094128d9c3672fec23bc20d231ea5909ad9bb71bb1813a9c9f9af41a141cef683243cdb8b8c6ab6ea24bb27bddda51057ec1bda729e07d292345d9c6444237f4bf7d44bd6740b9fd8b4cdca64c283e54fc7053851183fce9ee5b04f7a99788b18eee13038afef05cbc061ebe2ea98310eed5d59e74a3c45943c6dccfba41bedd8ca9718303d", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x7a, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b005) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000000)=r7, 0x4) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r8, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x109040, 0x0) sendmsg$xdp(r9, &(0x7f0000000540)={&(0x7f00000001c0)={0x2c, 0xd, r3, 0x1}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000280)="858930eda615f03fafcd2bcd3f958146de988c962a72375f221e613da33715833477463934b649f88b5f848e4233ee91367d5b4ed6ae9cd86ee00b26e8a007f06dc41169c098e81514f980390663b507ca10aa68473f543382dcc8", 0x5b}, {&(0x7f0000000400)="1889fd57355b2d36dc2921911ae73205d0c28bdc38ffc0a6c52fe80640966d82bab9ae1228b132d69cdabb07e3322789c16bf62fb5ac922731e1958668661efb3899e4c18d7dfa6cc46a129089ff419c26a76056073c8404f8529ff538bdec9a5084fce7f88312ed20a4004fb0d1068209cbac6a052d299938fd8be67443feb52f4451d6d419246b693fb3bf1a1dfd6a3b11934e4df76a0ec5b2a62b09d610fa88e7eedb73602599cc50388c67f1b816cea1ed6062b769924f84252b890a8547ee412bff8dffaa02d0ba90af448c88b9e914f701a9e06aaab2844b7906953b6b1ac991876be9632cda9292f1a3c317d5b799de8e0229660c2f", 0xf9}, {&(0x7f0000000300)="862fb64ce28b058cb52974c448413b5d5d776ed638d98172f9077e735b015505b42e4d3f18ec301777feabd8ebde85fe666de10d25c8b0cd032dfe6c8ae749334eeb6736b2ae0a254ddc37fffbbfecb552b672828a7f856ed151bd0a60cfe81cd12a2b295bf019a9b73466d7133dc1d4d6dfddae211e6dd9ea0800fcad358ab13bbbb84d3287ecfc528b7b016e9496a44b4a1753b602af557df4e3a5265d22ebdcaf2f8a06728491115dc07875b4a2ab8ba6e05bd1", 0xb5}], 0x3, 0x0, 0x0, 0x2}, 0x4000890) [ 2264.099376][ T7079] bond168 (unregistering): (slave veth763): Releasing backup interface 00:14:44 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x3) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)={0x8, 0x400, 0x3f54, 0x0, 0x0, 0x3}) 00:14:44 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)=0xfb) acct(&(0x7f00000000c0)='./file0\x00') [ 2264.382904][ T7079] bond168 (unregistering): Released all slaves [ 2264.468442][ T7124] bond139: (slave veth501): Enslaving as an active interface with an up link [ 2264.535601][ T7124] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2264.603841][ T7079] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2264.705019][ T7084] bond139: (slave veth503): Enslaving as an active interface with an up link 00:14:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x7000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:14:44 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x50) 00:14:44 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000100)={&(0x7f0000000040)=[0x0, 0x7, 0x3], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x3, 0x1, 0xc0c0c0c0}) acct(&(0x7f00000000c0)='./file0\x00') r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDCTL_DSP_SETDUPLEX(r5, 0x5016, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_disconnect={0xff}) 00:14:44 executing program 4: pread64(0xffffffffffffffff, 0x0, 0xfffffe89, 0x5a7) 00:14:44 executing program 5: fsetxattr(0xffffffffffffffff, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) 00:14:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0xa, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:14:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x2) [ 2264.879756][ T7253] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:14:44 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x200, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa4, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffb}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x10}}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x29}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfc}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x367}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) pread64(r0, 0x0, 0x0, 0x50) 00:14:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@random={'security.', '\x00'}, 0x0, 0x0, 0x2) getpid() 00:14:45 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x50) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) 00:14:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x1, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x200300, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) [ 2265.320981][ T7267] bond168: (slave veth765): Enslaving as a backup interface with a down link 00:14:45 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x5) [ 2265.480639][ T7278] bond140: (slave veth505): Enslaving as an active interface with an up link [ 2265.514009][ T7285] bond168 (unregistering): (slave veth765): Releasing backup interface [ 2265.841504][ T7285] bond168 (unregistering): Released all slaves [ 2265.981447][ T7297] bond140: (slave veth507): Enslaving as an active interface with an up link [ 2266.010590][ T7253] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2266.110440][ T7267] bond168: (slave veth767): Enslaving as a backup interface with a down link 00:14:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x8000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:14:46 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') 00:14:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@random={'system.', '-\x00'}, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000400000008100000000000000791100000000000000010000000000000700000000000000000000000000000000000000000000000000000000000000ff0300000500000003000000000000000500000000000000df976ea703000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005fa500"/320]) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r7, 0x8004f50e, &(0x7f0000000000)) 00:14:46 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x50) 00:14:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0xb, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:14:46 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) r1 = openat2(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x18400, 0x100, 0x1}, 0x18) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x4}]}}]}, 0x3c}}, 0x0) bind$can_raw(r1, &(0x7f00000000c0)={0x1d, r3}, 0x10) pread64(r0, 0x0, 0x0, 0x50) 00:14:46 executing program 2: getuid() r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x2b8, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000080)={0x9c0000, 0xbd14, 0x8, r0, 0x0, &(0x7f0000000040)={0x9a0921, 0x3, [], @string=&(0x7f0000000000)=0xfd}}) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000100)) [ 2266.489404][ T7457] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:14:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 2266.775692][ T7470] bond141: (slave veth509): Enslaving as an active interface with an up link [ 2266.851841][ T7476] bond169: (slave veth769): Enslaving as a backup interface with a down link [ 2266.880896][ T7497] bond169 (unregistering): (slave veth769): Releasing backup interface 00:14:46 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) 00:14:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000000)={0x24, 0x3, 0x0, {0x5, 0x3, 0x0, '[/#'}}, 0x24) [ 2267.201382][ T7497] bond169 (unregistering): Released all slaves [ 2267.276638][ T7452] __nla_validate_parse: 3 callbacks suppressed [ 2267.276652][ T7452] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:14:47 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) close(r1) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) 00:14:47 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x228000, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0xede, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000024000b001000"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010063616b65000000000c0002000800040005a7db581945d4c92bdac4e5a26600000000"], 0x3c}}, 0x0) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={@default, @null, 0x3, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES16, @ANYRES16=r3, @ANYRESHEX=r6, @ANYRES32, @ANYBLOB="060002000100000014001f000080000000000004000070d1a7d4bdf7054d5e6faf0fbf78000000000000", @ANYRES64], 0x50}, 0x1, 0x0, 0x0, 0x40044}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$P9_RXATTRCREATE(r8, &(0x7f0000000080)={0x7, 0x21, 0x2}, 0x7) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, @none}, 0xa) [ 2267.399422][ T7496] bond141: (slave veth511): Enslaving as an active interface with an up link [ 2267.448110][ T7457] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:14:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x9000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:14:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0xc, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:14:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @local}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7a, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b005) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080)={0x6e5, 0xffff, 0x20c, 0x7, 0x9, 0x7fff, 0x1, 0x0, r5}, 0x20) 00:14:47 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pread64(r1, 0x0, 0x0, 0x9) 00:14:47 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') [ 2267.694035][ T7624] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2267.763848][ T7625] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:14:47 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x2) acct(&(0x7f00000000c0)='./file0\x00') 00:14:48 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x50) [ 2267.932939][ T7644] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2267.945617][ T7661] bond169 (unregistering): Released all slaves 00:14:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0xd, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:14:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(0x0, r7, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x1184, 0x3d, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@nested={0x1089, 0x84, 0x0, 0x1, [@generic="7d982e55a797906e385a3f8d184b949d50557d8bc701338d3080918afb5bcf60447e82cd57c6ce557e31e69e717d49c10c7a49802bc7b026ff11384db19ea58c442dbab12220de4c66", @generic="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", @typed={0x7, 0x8e, 0x0, 0x0, @str=')[\x00'}, @typed={0x8, 0xd, 0x0, 0x0, @uid=r7}, @typed={0x8, 0x2b, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x22, 0x5, 0x0, 0x0, @binary="a710d224a49432c3ca711d7448d79ec623b2a4923e71cb679bb1676c0b2b"}]}, @typed={0x8, 0x93, 0x0, 0x0, @fd=r5}, @generic="e59837c36072053025dc50514c4a3a8709817110b08d0a03ceb4a121a5902b47ff165b2767161f3f1edc4bae7cf614f9d26840af826c90479ae5d4d63c0155111c08634bd656", @nested={0x10, 0x4d, 0x0, 0x1, [@typed={0x8, 0x29, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic, @typed={0x4, 0x3ffc}]}, @generic="baf37d2aa90ea0e041b514d36a025723f9fe677226f627af6f53d32f0f27d3fe1bbfca460fa6e34eb6ecd64f1a20ab58e5920853e2b1eb50c520d6a8b0aabb9f400c8995ed55d6dc513d137342fdd8e5e1542c9573084c46fca24c6fd8adc72ee7ada2f26f6f75928ea5b5b52c2d4443077a439e75d41c43eaabdf8febd19e9989adc3"]}, 0x1184}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) [ 2268.100764][ T7625] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2268.143164][ T7745] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:14:48 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$CHAR_RAW_BSZSET(r1, 0x40081271, &(0x7f0000000040)=0x7fff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000400)="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", 0x1000}, {&(0x7f00000001c0)="dcfd163705f382b2e8d3070a2e777b32352a0025f8be3e66dd1e585b09a3d8f2a81d1a2a14e0d0a606a79cddc416d543ff1c0718cdd815ea9950a1da5f08bb92ac9470b9d04259d8b4cddcbe4b45e8463eaea422a61371287c84848081111340e1978d8e5fee7c4bd28d05a01c93344da80171b8f1b7a7bc86b69565933337d41bb69818b96bdb9a5632618d627e9f97e803db2eb1122dbfe0f05824a569de3f475703b0391e485849598918b934fbbf03ae77e560561233564cedd3ea92a9cf1acc53ac752fa4a17783020ef1bbb472d125dc897a6a1a184db4a2ea70aab30efb1d5a157e8b08633ce512", 0xeb}, {&(0x7f00000002c0)="b848908fc9c6867fb444025ef90ae5c753a45bd4bb4fed0d173486d7094f57520f572196e916900e92185fb1e7c6f9586afa6e77b6d8ae7c9870efce0aa467a4c8d39aad66d30ec184b1974047dbcff118a6527a83336430707835547c207f29c4fd5e49be444185138e47408f34ada70b378e080cbd5a47ee0a", 0x7a}, {&(0x7f0000001400)="3bed61d2cf0a5a66c88bbb9ccd978fe9fd2456351f03ec092ebbd618afa1abcfbedec4f798686d22f8fe151a53122e843ad43f284151bb87736cfac71f0cc7628c5145d2af328663421262d7df99855d09efc5f74340cbc7fe83f1a07fdfc0a2c1eb77a85cb22d643fb2e6713f221e067e125ad59c9fad849c4cafb449f0dcb350de40f1b24b699af81484b40e948b8e28a7607cc48be83b6b31d72ee55c2a662c97b62725ad7134b82f3b116cdec11764779fde8dbc2148fc4efbe4e66229df1fb2ff9da108fdcd2ed7c8", 0xcb}], 0x4, 0x8001) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) pread64(r5, 0x0, 0x0, 0x8) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000000)) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000100)={0x3}, 0x4) 00:14:48 executing program 2: perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x8, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x7}, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') 00:14:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x20000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:14:48 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') [ 2268.412108][ T7748] bond143: (slave veth513): Enslaving as an active interface with an up link 00:14:48 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r1, 0xc06c4124, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') [ 2268.455191][ T7784] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:14:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) [ 2268.565943][ T7794] bond169: (slave veth773): Enslaving as a backup interface with a down link [ 2268.578673][ T7802] bond169 (unregistering): (slave veth773): Releasing backup interface [ 2268.783096][ T7802] bond169 (unregistering): Released all slaves [ 2268.834881][ T7745] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2268.897093][ T7761] bond143: (slave veth515): Enslaving as an active interface with an up link 00:14:49 executing program 2: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) acct(&(0x7f00000000c0)='./file0\x00') 00:14:49 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x1000000000050) [ 2268.955222][ T7784] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:14:49 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x44) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x48, 0x0, 0x8, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3f}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x8010) fsetxattr(0xffffffffffffffff, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) 00:14:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0xe, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:14:49 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) getpeername$netlink(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc) pread64(r0, 0x0, 0x0, 0x50) [ 2269.189505][ T7915] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:14:49 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') write(r0, &(0x7f0000000000)="1e0daf1445e1f6d8c5311c88bcc6de13c1db72009962f61bd43f6c0e40fdd107d1e8aa5bf4c0e35534ed83e0804de465e2c7669b8712b8c41960859692c6b110b15c9060d93d59b0e41029e4bb3962931de08c603dd7cde9947690223b806e870e3d2537f5e333a9f4771a7afa03616eb16977775714cf7f7d89b4b1eae9e14d2563fde59f90153d8e2d34b1357413b7950b2ec09dfa9183c4b925bb", 0x9c) 00:14:49 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000040)={0x20, 0x0, 0xffff, 0x7fffffff}) fsetxattr(r2, &(0x7f0000000080)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 00:14:49 executing program 2: acct(&(0x7f0000000000)='./file0\x00') [ 2269.406646][ T7924] bond144: (slave veth517): Enslaving as an active interface with an up link 00:14:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x3f000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:14:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0xc, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) [ 2269.503834][ T7915] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2269.660509][ T7971] bond144: (slave veth519): Enslaving as an active interface with an up link 00:14:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) [ 2269.706690][ T7978] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:14:49 executing program 2: r0 = getpid() ptrace(0x10, r0) ptrace$getregset(0x4203, r0, 0x0, &(0x7f0000000180)={0x0, 0x8}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1801, 0x0, 0x0, 0x0, 0x800000}, r0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') [ 2269.771177][ T7979] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 00:14:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0xf, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:14:50 executing program 5: fsetxattr(0xffffffffffffffff, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) 00:14:50 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffffb, 0x0) [ 2270.069458][ T7981] bond169: (slave veth775): Enslaving as a backup interface with a down link [ 2270.157779][ T7982] bond2: (slave veth7): Enslaving as an active interface with an up link [ 2270.199788][ T8061] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:14:50 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x4}]}}]}, 0x3c}}, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000280)='./file0\x00', 0x8, 0x2) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000080)={0x0, 0x3}, 0x8) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x3f, 0x7f, 0x7, 0xb1, 0x0, 0xfff, 0x2001, 0x14, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x10001, 0x2, @perf_config_ext={0x0, 0x100000000}, 0x830, 0x4, 0x5, 0x4, 0xfff, 0xd9a, 0x8}, 0x0, 0x2, r4, 0x8) acct(&(0x7f00000000c0)='./file0\x00') 00:14:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x88000) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000080)={[0xdcc, 0x40, 0x7f, 0x20, 0xb2b, 0xb1, 0x8948, 0x8, 0x10000, 0x9, 0x8, 0x87, 0x1, 0xe29d, 0x6, 0x9], 0x10000, 0x20000}) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCGKEYCODE(r6, 0x80084504, &(0x7f0000000280)=""/126) setsockopt$ax25_SO_BINDTODEVICE(r6, 0x101, 0x19, &(0x7f00000001c0)=@rose={'rose', 0x0}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x4}]}}]}, 0x3c}}, 0x0) ioctl$SIOCGIFMTU(r4, 0x8921, &(0x7f0000000180)) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) dup(r0) [ 2270.440653][ T8064] bond145: (slave veth521): Enslaving as an active interface with an up link [ 2270.479650][ T7978] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2270.509967][ T8015] bond169 (unregistering): (slave veth775): Releasing backup interface 00:14:50 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000100)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) ptrace$cont(0x18, r9, 0x6, 0x80000001) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x1, @dev={[], 0x32}, 'ip6tnl0\x00'}}) fsetxattr(0xffffffffffffffff, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) [ 2270.912390][ T8015] bond169 (unregistering): Released all slaves [ 2271.022307][ T8061] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:14:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x40000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:14:51 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000000)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) 00:14:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x10, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:14:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$IMHOLD_L1(r3, 0x80044948, &(0x7f0000000000)=0x6) r4 = getpid() ptrace(0x10, r4) socket$phonet_pipe(0x23, 0x5, 0x2) ptrace$getregset(0x4203, r4, 0x0, &(0x7f0000000180)={0x0, 0x8}) capset(&(0x7f0000000080)={0x20071026, r4}, &(0x7f00000000c0)={0x8, 0x3, 0x8, 0x1f, 0x7, 0x2}) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) 00:14:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x88000) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000080)={[0xdcc, 0x40, 0x7f, 0x20, 0xb2b, 0xb1, 0x8948, 0x8, 0x10000, 0x9, 0x8, 0x87, 0x1, 0xe29d, 0x6, 0x9], 0x10000, 0x20000}) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCGKEYCODE(r6, 0x80084504, &(0x7f0000000280)=""/126) setsockopt$ax25_SO_BINDTODEVICE(r6, 0x101, 0x19, &(0x7f00000001c0)=@rose={'rose', 0x0}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x4}]}}]}, 0x3c}}, 0x0) ioctl$SIOCGIFMTU(r4, 0x8921, &(0x7f0000000180)) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) dup(r0) [ 2271.424971][ T8188] capability: warning: `syz-executor.5' uses deprecated v2 capabilities in a way that may be insecure [ 2271.454233][ T8169] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2271.610800][ T8187] bond169: (slave veth777): Enslaving as a backup interface with a down link [ 2271.723717][ T8186] bond146: (slave veth523): Enslaving as an active interface with an up link 00:14:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000001cc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001d40)=""/227, 0xe3}], 0x1}, 0x100) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x4}]}}]}, 0x3c}}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000001ec0)={0x0, @multicast1, @broadcast}, &(0x7f0000001f00)=0xc) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f00000020c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002080)={&(0x7f0000001f40)={0x108, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000017c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r9, 0x71adc3c56c3294c5, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r9, 0x800, 0x70bd2d, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x2000040) uselib(&(0x7f0000000000)='./file0\x00') [ 2271.773600][ T8204] bond169 (unregistering): (slave veth777): Releasing backup interface [ 2272.000876][ T8204] bond169 (unregistering): Released all slaves [ 2272.111669][ T8205] bond146: (slave veth525): Enslaving as an active interface with an up link [ 2272.140338][ T8169] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:14:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x11, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:14:52 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001980)={{{@in=@multicast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@dev}}, &(0x7f0000001940)=0x64) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) setresgid(0x0, r5, r5) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000480)=ANY=[@ANYRES32, @ANYBLOB="02000100", @ANYRES32=r3, @ANYBLOB="04400700fcff000008000100", @ANYBLOB="08000200", @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="ffff0012000000000000010000800000"], 0x4c, 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x8, 0x0, &(0x7f00000012c0), 0x1804, &(0x7f0000001a80)=ANY=[@ANYBLOB="67727069642c7573726a73756f74613d2c6e6f62682c7265736769643df20128baa9bff8fb4a41e0711e7e7d67784bb0ff9126785c39c2a9eb9a54d47b288f4c0ac393a042a50ad1afb7be4bf711bebd0a86614fde2bfffe9c80a494496848c2738feb991f056e4ee722b1da30", @ANYRESHEX, @ANYRESOCT=r3, @ANYRES16=r4]) sendfile(r1, r0, 0x0, 0x7) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x8c000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x4}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x3c}}, 0x0) recvmmsg(r7, &(0x7f0000001880)=[{{&(0x7f00000001c0)=@x25, 0x80, &(0x7f0000001800)=[{&(0x7f00000004c0)=""/112, 0x70}, {&(0x7f0000000540)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/107, 0x6b}, {&(0x7f0000001640)=""/243, 0xf3}, {&(0x7f0000001740)=""/154, 0x9a}], 0x6}, 0x3}], 0x1, 0x2002, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000000100)={0x1, 'batadv_slave_1\x00', 0x4}, 0x18) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000380)=0x4) r8 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$FUSE_STATFS(r8, &(0x7f00000018c0)={0x60, 0x0, 0x5, {{0x200, 0xfffffffffffffff7, 0xffffffff, 0x64fc, 0x6, 0x2, 0x7, 0x6}}}, 0x60) 00:14:52 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000000c0)={0x0, 0x81, 0x40, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x5, [], @p_u8=&(0x7f0000000000)=0xe3}}) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {r3, 0x2}}, 0x10) 00:14:52 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000040)=@gcm_128={{0x303}, "4af0499fa72d957c", "ce677cf4093df7a9667f3e95f7c60315", "16489a80", "ce16cfa0e8e82dee"}, 0x28) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) connect$caif(r0, &(0x7f0000000000), 0x18) acct(&(0x7f00000000c0)='./file0\x00') 00:14:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x48000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) [ 2272.344985][ T8325] __nla_validate_parse: 2 callbacks suppressed [ 2272.345000][ T8325] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:14:52 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) prctl$PR_GET_FP_MODE(0x2e) 00:14:52 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat2(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x20c040, 0x5, 0x13}, 0x18) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @local}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7a, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b005) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000100)={r6, 0x48, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x0, @local, 0x1f}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e21, 0x4, @mcast1, 0x3f}]}, &(0x7f0000000180)=0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) [ 2272.610115][ T8330] bond147: (slave veth527): Enslaving as an active interface with an up link 00:14:52 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x80000908) mmap$fb(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000000, 0x8010, r0, 0x5000) [ 2272.658337][ T8338] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:14:52 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001980)={{{@in=@multicast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@dev}}, &(0x7f0000001940)=0x64) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) setresgid(0x0, r5, r5) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000480)=ANY=[@ANYRES32, @ANYBLOB="02000100", @ANYRES32=r3, @ANYBLOB="04400700fcff000008000100", @ANYBLOB="08000200", @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="ffff0012000000000000010000800000"], 0x4c, 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x8, 0x0, &(0x7f00000012c0), 0x1804, &(0x7f0000001a80)=ANY=[@ANYBLOB="67727069642c7573726a73756f74613d2c6e6f62682c7265736769643df20128baa9bff8fb4a41e0711e7e7d67784bb0ff9126785c39c2a9eb9a54d47b288f4c0ac393a042a50ad1afb7be4bf711bebd0a86614fde2bfffe9c80a494496848c2738feb991f056e4ee722b1da30", @ANYRESHEX, @ANYRESOCT=r3, @ANYRES16=r4]) sendfile(r1, r0, 0x0, 0x7) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x8c000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x4}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x3c}}, 0x0) recvmmsg(r7, &(0x7f0000001880)=[{{&(0x7f00000001c0)=@x25, 0x80, &(0x7f0000001800)=[{&(0x7f00000004c0)=""/112, 0x70}, {&(0x7f0000000540)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/107, 0x6b}, {&(0x7f0000001640)=""/243, 0xf3}, {&(0x7f0000001740)=""/154, 0x9a}], 0x6}, 0x3}], 0x1, 0x2002, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000000100)={0x1, 'batadv_slave_1\x00', 0x4}, 0x18) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000380)=0x4) r8 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$FUSE_STATFS(r8, &(0x7f00000018c0)={0x60, 0x0, 0x5, {{0x200, 0xfffffffffffffff7, 0xffffffff, 0x64fc, 0x6, 0x2, 0x7, 0x6}}}, 0x60) [ 2272.907700][ T8359] bond169: (slave veth779): Enslaving as a backup interface with a down link 00:14:53 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgget(0x2, 0x1) acct(&(0x7f00000000c0)='./file0\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) splice(r0, &(0x7f0000000000)=0x1000, r1, &(0x7f0000000080)=0x7, 0x34e, 0x9) [ 2272.952335][ T8384] bond169 (unregistering): (slave veth779): Releasing backup interface 00:14:53 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(0x0, r2, 0x0) r3 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000280)={{{@in=@multicast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@dev}}, &(0x7f0000000080)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) setresgid(0x0, r5, r5) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="04400700fcff000008000100", @ANYBLOB="08000200", @ANYRES32=r5, @ANYBLOB="54cfb60000", @ANYRES32, @ANYBLOB="10000200000000002000020000000000"], 0x4c, 0x1) fchown(r0, r2, r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x12080, 0x0) 00:14:53 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$cgroup_ro(r1, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x4}]}}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, &(0x7f0000000100)={'sit0\x00', &(0x7f00000001c0)={'ip6gre0\x00', r6, 0x2f, 0x96, 0x44, 0xfff, 0x18, @mcast2, @dev={0xfe, 0x80, [], 0x38}, 0x7800, 0x10, 0x1, 0x400}}) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r3, 0x800442d3, &(0x7f0000000040)={0x8001, 0x4000, 0x518, @dev={[], 0x1d}, 'syzkaller0\x00'}) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000000)={0x100, 0x0, 0x8, 0x10001, 0xdfc, 0x3, 0xffffffff}) [ 2273.410173][ T8384] bond169 (unregistering): Released all slaves [ 2273.520025][ T8330] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2273.585598][ T8338] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:14:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x12, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:14:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r2, 0x4122, 0x0) 00:14:53 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001980)={{{@in=@multicast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@dev}}, &(0x7f0000001940)=0x64) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) setresgid(0x0, r5, r5) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000480)=ANY=[@ANYRES32, @ANYBLOB="02000100", @ANYRES32=r3, @ANYBLOB="04400700fcff000008000100", @ANYBLOB="08000200", @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="ffff0012000000000000010000800000"], 0x4c, 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x8, 0x0, &(0x7f00000012c0), 0x1804, &(0x7f0000001a80)=ANY=[@ANYBLOB="67727069642c7573726a73756f74613d2c6e6f62682c7265736769643df20128baa9bff8fb4a41e0711e7e7d67784bb0ff9126785c39c2a9eb9a54d47b288f4c0ac393a042a50ad1afb7be4bf711bebd0a86614fde2bfffe9c80a494496848c2738feb991f056e4ee722b1da30", @ANYRESHEX, @ANYRESOCT=r3, @ANYRES16=r4]) sendfile(r1, r0, 0x0, 0x7) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x8c000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x4}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x3c}}, 0x0) recvmmsg(r7, &(0x7f0000001880)=[{{&(0x7f00000001c0)=@x25, 0x80, &(0x7f0000001800)=[{&(0x7f00000004c0)=""/112, 0x70}, {&(0x7f0000000540)=""/79, 0x4f}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/107, 0x6b}, {&(0x7f0000001640)=""/243, 0xf3}, {&(0x7f0000001740)=""/154, 0x9a}], 0x6}, 0x3}], 0x1, 0x2002, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000000100)={0x1, 'batadv_slave_1\x00', 0x4}, 0x18) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000380)=0x4) r8 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$FUSE_STATFS(r8, &(0x7f00000018c0)={0x60, 0x0, 0x5, {{0x200, 0xfffffffffffffff7, 0xffffffff, 0x64fc, 0x6, 0x2, 0x7, 0x6}}}, 0x60) 00:14:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x4c000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) [ 2273.820001][ T8527] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:14:53 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r1, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x60402, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) acct(&(0x7f00000000c0)='./file0\x00') [ 2273.980944][ T8536] bond148: (slave veth531): Enslaving as an active interface with an up link [ 2273.990690][ T8531] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:14:54 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(0x0, r2, 0x0) r3 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000280)={{{@in=@multicast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@dev}}, &(0x7f0000000080)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) setresgid(0x0, r5, r5) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="04400700fcff000008000100", @ANYBLOB="08000200", @ANYRES32=r5, @ANYBLOB="54cfb60000", @ANYRES32, @ANYBLOB="10000200000000002000020000000000"], 0x4c, 0x1) fchown(r0, r2, r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x12080, 0x0) [ 2274.304507][ T8544] bond169: (slave veth781): Enslaving as a backup interface with a down link [ 2274.351189][ T8581] bond169 (unregistering): (slave veth781): Releasing backup interface 00:14:54 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x4}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x3c}}, 0x0) r3 = accept(r2, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @local}}, &(0x7f0000000440)=0x80) ioctl$IMHOLD_L1(r3, 0x80044948, &(0x7f0000000480)=0x8) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$USBDEVFS_CLAIMINTERFACE(r4, 0x8004550f, &(0x7f0000000000)=0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clone(0x40041be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = getpid() rt_tgsigqueueinfo(r5, r5, 0x4000000000000016, &(0x7f00000004c0)) ptrace(0x4206, r5) rt_tgsigqueueinfo(r5, r5, 0x12, &(0x7f0000001180)={0x0, 0x0, 0xffffc58b}) ptrace(0x11, r5) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x9d0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') [ 2274.714347][ T8581] bond169 (unregistering): Released all slaves [ 2274.802266][ T8536] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2274.834623][ T8531] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:14:54 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x4}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x3c}}, 0x0) r3 = accept(r2, &(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @local}}, &(0x7f0000000440)=0x80) ioctl$IMHOLD_L1(r3, 0x80044948, &(0x7f0000000480)=0x8) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$USBDEVFS_CLAIMINTERFACE(r4, 0x8004550f, &(0x7f0000000000)=0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clone(0x40041be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = getpid() rt_tgsigqueueinfo(r5, r5, 0x4000000000000016, &(0x7f00000004c0)) ptrace(0x4206, r5) rt_tgsigqueueinfo(r5, r5, 0x12, &(0x7f0000001180)={0x0, 0x0, 0xffffc58b}) ptrace(0x11, r5) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x9d0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') 00:14:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x13, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:14:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) prctl$PR_GET_DUMPABLE(0x3) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000000)={0x2, 0x0, [{0x0, 0x2, 0x0, 0x0, @adapter={0x80, 0x80000001, 0x1f, 0x6, 0x20}}, {0x7, 0x4, 0x0, 0x0, @sint={0x7, 0x1}}]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syncfs(r1) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') 00:14:55 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x14, r2, 0x309}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x15c, r2, 0xe830d77ce3019547, 0x70bd29, 0x25dfdbff, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x100}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xfffffffffffffee2, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x80}, {0x6, 0x11, 0x7}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x80000000}, {0x6, 0x11, 0x1}}, {{@pci={{0x0, 0x1, 'pci\x00'}, {0x0, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x8001}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0xffff0001}, {0x6, 0x11, 0x5}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x4}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40810}, 0x80) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r3, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) keyctl$session_to_parent(0x12) 00:14:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x60000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) [ 2275.077129][ T8678] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2275.195258][ T8682] bond149: (slave veth533): Enslaving as an active interface with an up link [ 2275.212614][ T8682] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:14:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x4c000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) [ 2275.258980][ T8682] bond149: (slave veth535): Enslaving as an active interface with an up link 00:14:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x14, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) [ 2275.348075][ T8740] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:14:55 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x400}, 0x0, 0x0, 0xfffffffd, 0x3, 0x100, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000040)={0x5, 0x0, 0x9d53}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000001c0)={0x4, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x4, 0x2166bab0934b42db, 0x1, 0x3, 0x6, 0x29, "35d232f9"}, 0xf88, 0x2, @fd=r5, 0x6, 0x0, r7}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x80000001) acct(&(0x7f00000000c0)='./file0\x00') 00:14:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)=""/183, 0xb7}, {&(0x7f0000000240)=""/239, 0xef}, {&(0x7f0000000100)=""/43, 0x2b}], 0x3, &(0x7f0000000380)=""/185, 0xb9}, 0x40000000) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000480)=0x19e, 0x4) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0x18, 0xffffffff, 0x6, 0x642e, 0x1d, "2189dbcff2dc5a42a936a1f01dfa0000000010"}) [ 2275.564418][ T8744] bond169: (slave veth785): Enslaving as a backup interface with a down link [ 2275.613786][ T8768] bond169 (unregistering): (slave veth785): Releasing backup interface 00:14:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = dup2(r1, r2) r4 = getpid() ptrace(0x10, r4) ptrace$getregset(0x4203, r4, 0x0, &(0x7f0000000180)={0x0, 0x8}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000180)={{0xa, 0x0, 0x7f, 0x1, 'syz1\x00', 0x80}, 0x5, 0x10, 0x6, r4, 0x1, 0x8, 'syz0\x00', &(0x7f0000000000)=['/dev/kvm\x00'], 0x9, [], [0x9, 0x401, 0xffe1, 0x393]}) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x30000, 0x40) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x60040, 0x0) ptrace$getregset(0x4203, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x8}) r7 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(0x0, r8, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000300)={0x800, 0x101, {}, {r8}, 0x200, 0x3}) fsetxattr(r6, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) 00:14:56 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fsetxattr(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="a1764187e23d376037a18865233b46a812491d54a55909f1239e9f65d68eebf4d21ea69d4ad8608140d6fff35e0c06ee96af70f306bd15223b617800ef8716eba0c7c0bd07333dcf3ccf57126eba60e810b4a2543d348857cfee78afc0cf2157173828fca981109f4f0e92263abe196a8face2bbc233f8424479b17d1e36808ac46683e0b9e1b6a86fdcf895c60060524ea3617d337db78e2458c441123a185b860bff886b9de6fed8a8f0efd7b6b4e07a89f86cd1bc49a9b4723f1f627dd72aab61495aba23be2284b6d917d5449d745ec86736a5b0fc58b8259b6c929b4db9141505777feba433948f48cf98a5b0"], 0x0, 0x0, 0x0) [ 2276.120419][ T8768] bond169 (unregistering): Released all slaves [ 2276.211317][ T8769] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 2276.350862][ T8779] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:14:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x212000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101100, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000040)) ioctl$NBD_DO_IT(r4, 0xab03) fsetxattr(r0, &(0x7f0000000080)=@known='trusted.overlay.metacopy\x00', 0x0, 0x0, 0x0) [ 2276.526780][ T8782] bond3: (slave veth9): Enslaving as a backup interface with a down link [ 2276.557426][ T8787] bond150: (slave veth537): Enslaving as an active interface with an up link [ 2276.572141][ T8788] bond3 (unregistering): (slave veth9): Releasing backup interface [ 2276.859276][ T8788] bond3 (unregistering): Released all slaves [ 2276.948445][ T8740] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2277.047443][ T8873] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2277.091058][ T8889] bond150: (slave veth539): Enslaving as an active interface with an up link 00:14:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x68000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:14:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x4c000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:14:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x15, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:14:57 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x8}, 0x2000, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x4}]}}]}, 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x4}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x3c}}, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x4}]}}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00', r5}) recvmsg$kcm(r2, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f0000000100)=""/5, 0x5}, {&(0x7f00000001c0)=""/136, 0x88}, {&(0x7f0000000280)=""/137, 0x89}, {&(0x7f0000000340)=""/147, 0x93}], 0x5}, 0x100) [ 2277.306356][ T9010] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2277.421636][ T9016] bond169: (slave veth787): Enslaving as a backup interface with a down link [ 2277.468613][ T9010] bond169 (unregistering): (slave veth787): Releasing backup interface 00:14:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000180)=""/102400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) process_madvise(r3, &(0x7f0000000040)=[{&(0x7f000001a8c0)="bb2d3b2830bcb716aa30aca01d29c2b2d6df881f2b379d91af630e12cc38b1fd61de5677d268f10535d96837425f59211894b14fcfc075780971519b30ef0919ba08397e540a5af878e1bf7ed94010e5247f3a9b3c91ee3ec4e908c34f51f1331edc004cd1513510f7d70d6ac5443d6594fbce41b173a7830a3c2062f02f", 0x7e}, {&(0x7f000001a940)="cc9e3cdaaf67655735dbe7defbd8615a648f27b287cffa0bbbe2ec903d2bbda3421bef009d61955a149d827d8a0467aff0f85f45e10c373510a86fd1f4537528be8f03da9256ccaea232fc0f7905d0a0c0aedc05f5eb6af5db6cf9e7f43791284a8cc5b12bbb287c79e84256420bdcafa36b3e093a5bfa0cb5bfc1e97ab266536c98b39673", 0x85}], 0x2, 0xd, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r3, 0x40044145, &(0x7f0000000000)=0x200) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9eec004688", @ANYRES16, @ANYBLOB="000426bd7000fbdbdf25050000002f00070073797374656d5f753a6f626a6563745f723a7379736c6f67645f696e697472635f657865635f743a73300000080005000a01010108000500ffffffff14000200fe8000000000000000000000000000301400020000000000000000000000ffff0a01010214000200fe88000000000000000000000000010108000500e000000214000300fe80000000000000000000000000000d"], 0xac}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f000001ab80)={&(0x7f000001aa40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f000001ab40)={&(0x7f000001abc0)={0xa4, 0x0, 0x0, 0x78bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, [], 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:sysfs_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_SECCTX={0x0, 0x7, 'system_u:object_r:printer_device_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syzkaller1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000000) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r5, 0x8008ae9d, &(0x7f000001aa00)=""/44) recvmmsg(r3, &(0x7f000001a780)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000019280)=[{&(0x7f0000019180)=""/111, 0x6f}, {&(0x7f0000019200)=""/114, 0x72}, {&(0x7f0000000100)=""/19, 0x13}], 0x3, &(0x7f00000192c0)=""/243, 0xf3}, 0x5}, {{&(0x7f00000193c0)=@xdp, 0x80, &(0x7f000001a500)=[{&(0x7f0000019440)=""/142, 0x8e}, {&(0x7f0000019500)=""/4096, 0x1000}], 0x2, &(0x7f000001a540)=""/164, 0xa4}, 0x5}, {{0x0, 0x0, &(0x7f000001a640)=[{&(0x7f000001a600)=""/19, 0x13}], 0x1, &(0x7f000001a680)=""/236, 0xec}, 0x2}], 0x3, 0x40, &(0x7f000001a840)={0x77359400}) fsetxattr(r6, &(0x7f000001a880)=@random={'trusted.', '^\\-^\x00'}, 0x0, 0x0, 0x0) 00:14:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r2, 0x3304) [ 2277.793188][ T9010] bond169 (unregistering): Released all slaves 00:14:57 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_pts(r0, 0x40900) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000080)={0x0, 0x0, 0x1f}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f00000000c0)={r4}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x5a4) [ 2277.906865][ T9060] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2278.003944][ T9061] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 2278.197283][ T9063] bond151: (slave veth541): Enslaving as an active interface with an up link [ 2278.284827][ T9064] bond3: (slave veth11): Enslaving as a backup interface with a down link [ 2278.343291][ T9068] bond3 (unregistering): (slave veth11): Releasing backup interface [ 2278.881899][ T9068] bond3 (unregistering): Released all slaves [ 2279.003324][ T9016] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:14:59 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) r1 = getpid() ptrace(0x10, r1) ptrace$getregset(0x4203, r1, 0x0, &(0x7f0000000180)={0x0, 0x8}) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/net\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x800) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) pread64(r4, 0x0, 0x0, 0x6) [ 2279.186036][ T9199] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:14:59 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_RESET(r1, 0x4141, 0x0) acct(&(0x7f00000000c0)='./file0\x00') [ 2279.292731][ T9063] bond151: (slave veth543): Enslaving as an active interface with an up link 00:14:59 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x4}]}}]}, 0x3c}}, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000080)={'nat\x00'}, &(0x7f0000000000)=0x78) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r3, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) 00:14:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x6c000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:14:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x80000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:14:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x16, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:14:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x4004050) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x2c201, 0x0) pread64(r3, 0x0, 0xfffffe89, 0x5a7) 00:14:59 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') [ 2279.582692][ T9268] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 00:14:59 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') [ 2279.710567][ T9269] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:14:59 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080)=0x5, 0x4) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) pread64(r1, 0x0, 0xfffffe89, 0x5a7) 00:14:59 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40, 0x3}, 0x0, 0x0, r0, 0x0) acct(&(0x7f00000000c0)='./file0\x00') 00:14:59 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, r3, 0xf}, 0x10) r4 = getpid() ptrace(0x10, r4) ptrace$getregset(0x4203, r4, 0x0, &(0x7f0000000180)={0x0, 0x8}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r4, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') [ 2279.939026][ T9273] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:00 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) 00:15:00 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) pread64(r2, 0x0, 0x0, 0x5) [ 2280.099644][ T9277] bond3: (slave veth13): Enslaving as a backup interface with a down link [ 2280.209244][ T9292] bond169: (slave veth789): Enslaving as a backup interface with a down link 00:15:00 executing program 5: r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a0500000000000000422cb4963a160161b1cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x34d, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r1, r0, r1}, &(0x7f0000000240)=""/112, 0x70, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000000)={r0, 0x1000, 0xa9}, &(0x7f0000001380)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)="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", &(0x7f0000001180)=""/169) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r2, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) r3 = getpid() ptrace(0x10, r3) ptrace$getregset(0x4203, r3, 0x0, &(0x7f0000000180)={0x0, 0x8}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000014c0)=ANY=[@ANYBLOB="850000002a000000840000000000000095000000000000003437647088c406bb5c23a4084caa0311bdab6c291f4c9434709bf3ba39be0e0a583cfe8a0e0fcdb54a9b8d5516957292ebc417fbd1be5c2c3c5b272f96b029b9d3ac20581033a46df24d5671f893670c0bed3c5cab05e72f2ee56e94b067681c3a21d51dbce07506000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r4, 0xc0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={r5}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001280)={r3, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000001240)='/dev/kvm\x00', r5}, 0x30) ptrace$peeksig(0x4209, r6, &(0x7f00000012c0)={0x0, 0x1, 0x1}, &(0x7f0000001300)=[{}]) [ 2280.300158][ T9306] bond152: (slave veth545): Enslaving as an active interface with an up link [ 2280.338139][ T9313] bond169 (unregistering): (slave veth789): Releasing backup interface [ 2280.682572][ T9313] bond169 (unregistering): Released all slaves [ 2280.768058][ T9268] bond3 (unregistering): (slave veth13): Releasing backup interface [ 2281.028981][ T9268] bond3 (unregistering): Released all slaves [ 2281.109815][ T9269] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2281.211253][ T9306] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x74000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000280)=0x40000) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x4c, 0x2, {{0x6, 0x58b, 0x7, 0x3, 0x100}, 0x3fc, 0x1, 0x6, 0x7, 0xf1e5927, 0xf, 0x17, 0x11, 0x6, 0x3f, {0x6, 0x5, 0x101, 0x2, 0x2, 0x1}}}}]}, 0x78}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9eec004688", @ANYRES16=r6, @ANYBLOB="000426bd7000fbdbdf25050000002f00070073797374656d5f753a6f626a6563745f723a7379736c6f67645f696e697472635f657865635f743a73300000080005000a01010108000500ffffffff14000200fe8000000000000000000000000000301400020000000000000000000000ffff0a01010214000200fe88000000000000000000000000010108000500e000000214000300fe80000000000000000000000000000d"], 0xac}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00012cbd7000fcdbdf250100000014000200000000000008000500ac1e000100"/42], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40042000) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$CHAR_RAW_FLSBUF(r8, 0x1261, &(0x7f0000000180)=0x7fff) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 00:15:01 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r2, 0x1ad, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000000)) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000200)={0x401, 0xd9c8, 0x2b4f}) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf4, r2, 0x288, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xea}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3ff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1ff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x1b}}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffff}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x13}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}]}, 0xf4}, 0x1, 0x0, 0x0, 0x90c1}, 0x42050) pread64(r0, 0x0, 0xfffffe89, 0x5a7) 00:15:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) readlinkat(r2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/142, 0x8e) 00:15:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x17, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:01 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RLERRORu(r2, &(0x7f00000001c0)={0xd, 0x7, 0x2, {{}, 0xcb86}}, 0xd) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f6, 0x20, 0x70bd2b, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000090}, 0x4) 00:15:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='system.advise\x00', 0x0, 0x0, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') 00:15:01 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) [ 2281.546523][ T9534] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:15:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_RESET(r2, 0x5514) [ 2281.812831][ T9537] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:01 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x7ed1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000380)={0x2, 0x0, &(0x7f00000001c0)=""/167, &(0x7f0000000100)=""/46, &(0x7f0000000280)=""/213, 0x2000}) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r2, 0x10f, 0x84, &(0x7f00000003c0), &(0x7f0000000400)=0x4) write$P9_RCLUNK(r1, &(0x7f0000000440)={0x7, 0x79, 0x1}, 0x7) 00:15:02 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x84000) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000080)) pread64(r0, 0x0, 0xfffffe89, 0x5a7) 00:15:02 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = pidfd_getfd(r2, r0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r5, 0x1, 0x0, 0x0, {0xc}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x5, 0x5, '`'}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0xa0, r5, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x5c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) acct(&(0x7f00000000c0)='./file0\x00') [ 2282.002765][ T9540] bond169: (slave veth793): Enslaving as a backup interface with a down link [ 2282.030660][ T9567] bond169 (unregistering): (slave veth793): Releasing backup interface [ 2282.388784][ T9567] bond169 (unregistering): Released all slaves [ 2282.549259][ T9534] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2282.749421][ T9576] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x7a000000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:02 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pread64(r1, 0x0, 0x0, 0xffffffff) 00:15:02 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x50) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket(0x10, 0x3, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000280)={0x20, 0x0, 0x1, 0x3f, 0x2}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x4}]}}]}, 0x3c}}, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, &(0x7f0000000200)=0x3f, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$CHAR_RAW_PG(r4, 0x1269, &(0x7f00000001c0)={0x8, 0x80000001, 0x4, &(0x7f0000000180)="6148c9ef"}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x4}]}}]}, 0x3c}}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x28, 0x2, 0x2, 0x5, 0x0, 0x0, {0xa}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40090}, 0x4844) 00:15:02 executing program 2: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x1f2f, 0x80000000}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x8) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/128) acct(&(0x7f00000000c0)='./file0\x00') 00:15:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x18, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="3581687b777b3245695c5185ecc0c4ef53cd895b39b448f66069197bdba578379ec9ea42bc2c146fbce182c2c734bc2fa95ead3eff26e55d53c2ab52d78de92b3b6af5e91e24f5a79aa3a6cc61860233b772a1beb3addaf5d20729db9c9e6c9faf138cf0a4e080dde9fb2bc22f61d99341d3df4d58b0f459797f7a735befc552e58652f9f8218ccad58ad75eb03d5162c3d3e75346b069f03db787e1afde40425652164c776639b4d7ffd14427960a1f3d2729"], 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x4}]}}]}, 0x3c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000040)={'gre0\x00', &(0x7f00000000c0)={'ip_vti0\x00', r6, 0x8000, 0x40, 0x9f1, 0x8, {{0x13, 0x4, 0x1, 0x1, 0x4c, 0x68, 0x0, 0x4, 0x2f, 0x0, @local, @local, {[@timestamp={0x44, 0xc, 0x7f, 0x0, 0x2, [0x1, 0x0]}, @timestamp={0x44, 0x24, 0x5c, 0x0, 0x9, [0x1, 0x41, 0x9, 0xffff0000, 0x2ca, 0x28, 0x3, 0x5]}, @timestamp={0x44, 0x8, 0x9f, 0x0, 0x0, [0x80000001]}]}}}}}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x7) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000000)='trusted.overlay.impure\x00', &(0x7f0000000080)='./file0\x00', r9) 00:15:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x400200) write$P9_RLOCK(r2, &(0x7f0000000040)={0x8, 0x35, 0x2}, 0x8) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$AUDIT_SET_FEATURE(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, 0x3fa, 0x400, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) dup3(r1, r5, 0x80000) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2283.025773][ T9711] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2283.148968][ T9713] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:03 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x20940, 0x0) mknodat(r0, &(0x7f0000000080)='./file0\x00', 0x200, 0x8) pread64(r0, 0x0, 0xfffffe89, 0x5a7) 00:15:03 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000080)={0xa10000, 0x2, 0x6, r4, 0x0, &(0x7f0000000040)={0x3b0315, 0xff, [], @string=&(0x7f0000000000)=0x8}}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f00000001c0)={0x3, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0]}) socket$caif_seqpacket(0x25, 0x5, 0x4) 00:15:03 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) pread64(r0, 0x0, 0xfffffe89, 0x5a7) [ 2283.455773][ T9717] bond169: (slave veth795): Enslaving as a backup interface with a down link [ 2283.570407][ T9735] bond154: (slave veth551): Enslaving as an active interface with an up link [ 2283.620373][ T9711] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:15:03 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x4000001) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) pread64(r3, 0x0, 0xfffffe89, 0x5a7) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') recvmmsg(r4, &(0x7f0000004740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, r5, 0xc46dfc707e1df77d, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x144, r5, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0xb8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x677}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2f1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x94f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x75}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xcb9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa701}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}]}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x311b34bc79d63d6a}, 0x4000001) 00:15:03 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x440803, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000080)) pread64(r0, 0x0, 0xfffffe89, 0x5a7) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) [ 2283.719656][ T9717] bond169: (slave veth797): Enslaving as a backup interface with a down link [ 2283.749957][ T9747] bond169 (unregistering): (slave veth795): Releasing backup interface [ 2284.064726][ T9747] bond169 (unregistering): (slave veth797): Releasing backup interface [ 2284.461431][ T9747] bond169 (unregistering): Released all slaves [ 2284.615859][ T9735] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2284.727553][ T9759] bond154: (slave veth553): Enslaving as an active interface with an up link 00:15:04 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x4}]}}]}, 0x3c}}, 0x0) bind$isdn_base(r3, &(0x7f0000000040)={0x22, 0x0, 0xff}, 0x6) pread64(r0, 0x0, 0xfffffe89, 0x5a7) 00:15:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x7fffefd0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:04 executing program 1 (fault-call:1 fault-nth:0): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) 00:15:04 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xb7, 0x80000) ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) pwrite64(r2, &(0x7f0000000040)="4f24ded899bda13f6ba254c6c4b92e45feb359d8a3c29d30e63c3d6a35cb4a475ba398ff8077656025aac30407c7242f38a0cf13de77c48099e4447ed963d590e755f7bd08e5145baa222b24b15339722d4c0d056ccef8c0777bc54ed74107b0ec5bbf2d07e03d28f92396f7a0f82e76245469662c2cd1ee2b04fc4244fe13", 0x7f, 0x7f67) 00:15:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x19, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00', 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000040)={0x11, 0xd8, &(0x7f0000000200)="0b3e1f69a7b42de7a4bd389e7e9c5824b164544301c7af4a2efee7d5b56f86aca1cc007097a39192e081e20650f6a6a27549df0419ecfd8c8ffd06bce9c13837eb3866fb63df0f1a1d7f8113b17f2e2fb432aaf2b13306628d290687fe89b32c73f6d9d62971b2852326036cdba07c0bdea6878716d65dddee4a591a95c51d17ee51bd7ae53eaa38c6f8a65f70aa774dc63e763fd063c984919d2db90d1ee1a12c6cf01be5f7ee5f846bae0fe6cd8a64c9a09a3f79f17425763a957194548e544cbe4b227289590792f56455a437dabc9bf4734899ed5325"}) r3 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x1, 0x800) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000180)='trusted.overlay.redirect\x00', &(0x7f00000001c0)='./file0\x00', 0x8, 0x2) [ 2285.042058][ T9897] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2285.104460][ T9903] FAULT_INJECTION: forcing a failure. [ 2285.104460][ T9903] name failslab, interval 1, probability 0, space 0, times 0 [ 2285.196741][ T9903] CPU: 1 PID: 9903 Comm: syz-executor.1 Not tainted 5.8.0-rc6-next-20200723-syzkaller #0 [ 2285.206629][ T9903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2285.217674][ T9903] Call Trace: [ 2285.221001][ T9903] dump_stack+0x18f/0x20d [ 2285.226014][ T9903] should_fail.cold+0x5/0x14 [ 2285.231619][ T9903] should_failslab+0x5/0xf [ 2285.236070][ T9903] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 2285.242255][ T9903] kmem_cache_alloc_node_trace+0x5d/0x400 [ 2285.248014][ T9903] __kmalloc_node+0x38/0x60 [ 2285.254321][ T9903] kvmalloc_node+0x61/0xf0 [ 2285.261655][ T9903] seq_read_iter+0x791/0x10c0 [ 2285.266568][ T9903] ? aa_file_perm+0x5e2/0x1100 [ 2285.271369][ T9903] ? aa_path_link+0x2f0/0x2f0 [ 2285.276085][ T9903] proc_reg_read_iter+0x1fb/0x2d0 [ 2285.281142][ T9903] new_sync_read+0x41a/0x6e0 [ 2285.285808][ T9903] ? ksys_lseek+0x1b0/0x1b0 [ 2285.290350][ T9903] ? fsnotify_first_mark+0x1f0/0x1f0 [ 2285.295706][ T9903] vfs_read+0x383/0x560 [ 2285.299921][ T9903] __x64_sys_pread64+0x1fd/0x250 [ 2285.304902][ T9903] ? ksys_pread64+0x1a0/0x1a0 [ 2285.309605][ T9903] ? lock_is_held_type+0xbb/0xf0 [ 2285.314602][ T9903] ? do_syscall_64+0x1c/0xe0 [ 2285.319310][ T9903] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 2285.325356][ T9903] do_syscall_64+0x60/0xe0 [ 2285.329815][ T9903] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2285.335753][ T9903] RIP: 0033:0x45c1f9 [ 2285.339658][ T9903] Code: Bad RIP value. [ 2285.343741][ T9903] RSP: 002b:00007f4b50669c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 2285.352188][ T9903] RAX: ffffffffffffffda RBX: 0000000000024040 RCX: 000000000045c1f9 [ 2285.361311][ T9903] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2285.369767][ T9903] RBP: 00007f4b50669ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2285.377781][ T9903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 00:15:05 executing program 2: acct(&(0x7f00000000c0)='./file0\x00') r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x40010, r1, 0x8000000) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) [ 2285.389698][ T9903] R13: 00007fff56df97ef R14: 00007f4b5066a9c0 R15: 000000000078bf0c [ 2285.421080][ T9898] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:15:05 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) pread64(r0, 0x0, 0xfffffe89, 0x5a7) r1 = open(&(0x7f0000000040)='./file0\x00', 0x4000, 0x80) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @local}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7a, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b005) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000080)={r5, 0xf243}, &(0x7f00000000c0)=0x8) [ 2285.856781][ T9905] bond155: (slave veth555): Enslaving as an active interface with an up link 00:15:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x4, 0x4, 0x400, 0x101, 0x18, "65c49237e58d53bd5fb1692d8e92b12c0bd025"}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000680)={0x5, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x1, 0x9, 0x6, 0x8001, 0x1, 0x1ff}, {0xa, 0x5, 0x1, 0x2, 0x3, 0x1ac3, 0x8}, {0xd, 0x7, 0x1, 0x400000, 0x1, 0x2ac3, 0x26b5}]}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000180)={{0x6, 0x4, 0x400, 0x7ff, '\x00', 0x5a}, 0x1, [0xc, 0x5, 0x83, 0x20, 0x4, 0x3, 0x8, 0x0, 0x8c, 0x2000000000000100, 0x100, 0x2, 0x5c00, 0x10001, 0x2, 0x200, 0x5, 0x2, 0x4, 0x5, 0x5, 0x9, 0x200, 0xfffffffffffffffb, 0x5, 0x6, 0x0, 0x80000001, 0x20, 0x7ff, 0x5a, 0x7, 0x5, 0x6, 0x3, 0x7, 0x7, 0x4110, 0x101, 0x8, 0x3, 0x8d5, 0x8, 0x20, 0x3ff, 0xa57, 0xcad, 0x2, 0x1, 0x2, 0x100, 0xfff, 0x1, 0x10004, 0x7fff, 0x80008000, 0x4f, 0x0, 0x8, 0x7f, 0x6, 0xfffffffffffffd4e, 0x3, 0x9d, 0xad2e, 0x4, 0x103, 0x7, 0xb2e, 0x3, 0x2, 0x3, 0x6, 0x5fae, 0x9, 0x9, 0x800000000000000, 0x8, 0xa42, 0x1b, 0x100000000, 0xffffffff, 0x4, 0x1, 0x20, 0x5, 0x8, 0x9, 0x6, 0x1, 0xffffffff, 0x401, 0x80, 0x8000000, 0x9, 0xdb3, 0x1f, 0x8001, 0x1, 0x4364, 0x1, 0x81, 0x5, 0x1af, 0x7, 0x4, 0x20, 0xffffffff, 0x8fc9, 0x5a, 0x5, 0x543, 0x4000000000000000, 0x8, 0x6, 0x2, 0x80000001, 0x0, 0x0, 0x1, 0x3, 0x3, 0x29, 0xffffffffffffffe1, 0x1, 0x3f, 0x2]}) 00:15:06 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) [ 2286.004163][ T9909] bond169: (slave veth799): Enslaving as a backup interface with a down link [ 2286.051878][ T9939] bond169 (unregistering): (slave veth799): Releasing backup interface 00:15:06 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x2, 0x0) 00:15:06 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x3, 0x0) 00:15:06 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x4, 0x0) [ 2286.589212][ T9939] bond169 (unregistering): Released all slaves [ 2286.707495][ T9988] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2286.728527][ T9898] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2287.016062][ T9991] bond155: (slave veth557): Enslaving as an active interface with an up link 00:15:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x7fffefe0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:07 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x5, 0x0) 00:15:07 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) pread64(r0, 0x0, 0xfffffe89, 0x5a7) setresgid(0x0, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000480)=ANY=[@ANYRES32, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="04400700fcff000000000100", @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="10000200000000002000020000000000"], 0x4c, 0x1) r1 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000280)={{{@in=@multicast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@dev}}, &(0x7f0000000080)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) setresgid(0x0, r3, r3) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000480)=ANY=[@ANYRES32, @ANYBLOB="02000100", @ANYRES32=r2, @ANYBLOB="04400700fcff000008000100", @ANYBLOB="08000200", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="10000200000000002000020000000000"], 0x4c, 0x1) r4 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000280)={{{@in=@multicast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@dev}}, &(0x7f0000000080)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) setresgid(0x0, r6, r6) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="04400700fcff000008000100", @ANYBLOB="08000200", @ANYRES32=r6, @ANYBLOB="080103b1283d015b4d4e00", @ANYRES32, @ANYBLOB="1000022000000000200000001a252080"], 0x4c, 0x1) r7 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000280)={{{@in=@multicast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@dev}}, &(0x7f0000000080)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) setresgid(0x0, r9, r9) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000480)=ANY=[@ANYRES32, @ANYBLOB="02000100", @ANYRES32=r8, @ANYBLOB="04400700fcff000008000100", @ANYBLOB="08000200", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="10000200000000002000020000000000"], 0x4c, 0x1) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {0x1, 0x4}, [{0x2, 0x5}, {0x2, 0x2}, {}], {0x4, 0x2}, [{0x8, 0x2, 0xee00}, {0x8, 0x2}, {0x8, 0x1}, {0x8, 0x2, r3}, {0x8, 0x4, r6}, {0x8, 0x6, r9}], {0x10, 0x2}, {0x20, 0x4}}, 0x6c, 0x1) 00:15:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x1a, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:07 executing program 2: acct(&(0x7f00000000c0)='./file0\x00') 00:15:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x501040, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x64, 0x1, 0x7, 0x201, 0x0, 0x0, {0x7}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x97bc}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8001}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040d4}, 0x4000000) fsetxattr(r0, &(0x7f0000000040)=@random={'osx.', 'trusted.overlay.impure\x00'}, 0x0, 0x0, 0x0) 00:15:07 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x6, 0x0) 00:15:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) 00:15:07 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd4, 0x0, 0xd38ee8a37e32fecd, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY={0x38, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0xd, 0x4, "80aac1f9b0b6ef4ce2"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x1c}]}, @NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "5130eb4950"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "06d5d2b2e3"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, @NL80211_ATTR_KEY_CIPHER={0x0, 0x9, 0xfac01}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "dd84103cce6cb3"}]}, 0xffffffffffffff9d}}, 0x40800) pread64(r0, 0x0, 0xfffffe89, 0x5a7) 00:15:07 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$FUSE_INTERRUPT(r1, &(0x7f0000000000)={0x10, 0x0, 0x7}, 0x10) acct(&(0x7f00000000c0)='./file0\x00') r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000040)={0x8000, 0x8, 0x2e83, 0x3}) [ 2287.414968][T10081] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:15:07 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x7, 0x0) [ 2287.704737][T10087] bond169: (slave veth801): Enslaving as a backup interface with a down link [ 2287.737254][T10096] bond169 (unregistering): (slave veth801): Releasing backup interface 00:15:07 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0xa, 0x0) [ 2287.997689][T10096] bond169 (unregistering): Released all slaves [ 2288.094618][T10192] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2288.235236][T10081] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:15:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x81568faf, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:08 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000300)=ANY=[@ANYBLOB="0800007f55fd635f6b4f440000000000090000000000001e0500000000000000", @ANYRES32, @ANYBLOB="000000000200"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\b\x00'/28, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r4, @ANYBLOB="000000000300"/28, @ANYRES32=r0, @ANYBLOB="00000000ff7f00"/28]) r5 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x80, r7, 0x1ad, 0x0, 0x0, {0xd}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4b2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9e}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x80}, 0x1, 0x0, 0x0, 0x891}, 0x0) sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r7, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1c000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040000) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r8, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xfffffffeffffffff) 00:15:08 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x10, 0x0) 00:15:08 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xed, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x8, 0xb14}, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$CHAR_RAW_RRPART(r2, 0x125f, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80888000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="02000000", @ANYRES16=0x0, @ANYBLOB="100028bd70000500300000000000050037000100"/30], 0x24}, 0x1, 0x0, 0x0, 0x40040080}, 0x4000000) acct(&(0x7f00000000c0)='./file0\x00') 00:15:08 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x6, 0x2) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @local}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7a, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b005) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r5, 0xe9a, 0x10000}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)=ANY=[@ANYRES32=r6, @ANYBLOB="7918bd47e779cec70000079a"], &(0x7f0000000100)=0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_WIE_OFF(r8, 0x7010) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x836, 0x105000) pread64(r9, 0x0, 0x0, 0x5a7) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={r4, 0x7, 0x10}, 0xc) 00:15:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x1b, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) [ 2288.552772][T10248] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:08 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x48, 0x0) 00:15:08 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x4c, 0x0) [ 2288.841647][T10256] bond157: (slave veth561): Enslaving as an active interface with an up link 00:15:08 executing program 2: acct(&(0x7f00000000c0)='./file0\x00') r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r1, 0x4122, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) [ 2288.891585][T10257] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:15:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000040)="fc343c6dc9bfc5f766fd0c1210c54ed82b475c989654127b5115abfd93e7fc28a42aab399e0a7c2ad0680a82d318261f0f02afe3bd0d9d36d4251c2053423e437edf588f9380f6981013f8683367b7e8e5276a70b2400b252820d3ca73bdb174707d7ae79f2dcbcdae2c0675e9", &(0x7f00000000c0)=@udp6=r6, 0x1}, 0x20) fsetxattr(r0, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x2) 00:15:09 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x68, 0x0) 00:15:09 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x6c, 0x0) [ 2289.210594][T10266] bond169: (slave veth803): Enslaving as a backup interface with a down link [ 2289.268605][T10301] bond169 (unregistering): (slave veth803): Releasing backup interface [ 2289.709301][T10301] bond169 (unregistering): Released all slaves [ 2289.847774][T10256] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2289.964701][T10257] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:15:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x9effffff, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:10 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x74, 0x0) 00:15:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x1c, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:10 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa082105564b5b4ae, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x8, 0xffffffffffffffff, 0x1) acct(&(0x7f00000000c0)='./file0\x00') 00:15:10 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x200400, 0xc0}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000240), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000180)={{0xa, 0x4e24, 0x51, @ipv4={[], [], @remote}}, {0xa, 0x4e23, 0x3acf6145, @dev={0xfe, 0x80, [], 0x2e}, 0x5}, 0x401, [0x3, 0x7, 0xfffffefc, 0x6, 0x6, 0xa6, 0xe6]}, 0x5c) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4d, 0x4000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'veth0_to_bridge\x00', &(0x7f0000000100)=@ethtool_modinfo={0x42, 0x3ff, 0x1}}) fsetxattr(r1, &(0x7f0000000040)=@random={'security.', '+&-#.,}{&\x00\x00'}, 0x0, 0x0, 0x0) 00:15:10 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x101000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000fef000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000000080)="3742694a3c88", 0x6, r1}, 0x68) pread64(r0, 0x0, 0xfffffe89, 0x5a7) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$CAPI_NCCI_GETUNIT(r3, 0x80044327, &(0x7f0000000040)=0x8) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000180)={0x3}) [ 2290.395230][T10444] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:10 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') socketpair(0x28, 0x1, 0x80000000, &(0x7f00000011c0)={0xffffffffffffffff}) accept4(r0, &(0x7f0000001200)=@ipx, &(0x7f0000001280)=0x80, 0x80800) r1 = socket$vsock_stream(0x28, 0x1, 0x0) sendmmsg(r1, &(0x7f00000070c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="e812805a0a1aef45fee534551f4e3da3da2f1bf25b30c3f78b15c3b0c80b06a57d08f5aa25f0a98a8738", 0x2a}, {&(0x7f0000000040)="13c164a540dfbc47848767f9db6f4bed", 0x10}, {&(0x7f00000001c0)="3cb6257b386b9fcd2d32097f60055e08dda6e05f22895a44f28320aa2c8f9e6ffaf3cb7430f4ff7caf8c77a3282828fe44b30d409a8a4f472cc4c5f66d3b027a97cf88cb695b11b32c656f3405cf6f0e034e63f1f1bec9056c88fa3159baae7c28ecb2cb1079b4171b21f13638dc1a30e267afffb539133c2aa63af5b233e7dc164cfed5c5bd84a13fca9e63e1d333df158459f042dc20aacadc7f549ad23f414ad51d024aa5878bd0754937aaf2c5e6a9283b88d1036c8b3d1d92f801e1d663b937d1c6b0c20d54e82275b5caadf02253800976ab7091ba3a66d220cebd1722444888984c3f7585e47eecf21e7f0f5de446350b9f30a66bd4c88b4532b750a204543caf2b5d60cb8b878e28fefd51ccc32c83f81d47d3698c9457ed8bc3588e69ae4f6b522df6887a038c4999cb6d39454bad930f3f303d5e3c5170c14705b4cec91beda8d4b4a5214d71fd9a7725dcd2b54f605be9167f76954a8688c609ed8a4ed026425c075da77c075385eb39d2e47c92d8dfa35f3a39b9f5c085c409916fa5682b07a612fd8c1165876bb0a5ddf7447076b6b8fea193b87894ec320c1cc3eac1b2bd3b9e40556c37f308d2dadaf0d04ddff25a587588c9d5952caa76b181e7d0754ce2605f88dd8d92223925fd59305a4cf6f26951393b9fe0129e0239e686e0707463aab84e5f85082860d2a23f4932dc205aa87cdd677ed0b9bf8d31d915e73e1333e58a195f27ba89eaeb80e9f5c4537c6f065f298d51013a632839df43878e130c8dd14fc1ea773cc96632be85a1ab9b1624829e3eb35554a070ea423af6d384b8cab77557f8618383ababf4ae8563712f3cad8191985ea1818b6292f83088cbfbb643b28015aa8be7cee7946aadf3b09da1f9e1c82733e2235b34c5aff1c2ccdf200fc7b05c1ee9aec24d457ce503b557ed3fc25207d3c26d2a3cac8010d9d1c76b2b0702ed7e645c41106b27dcb37086410ac9509e90aeb74e02c7a39c5d58a67273967aff0e7147db591931e786ae5f1f8b05c3d340c60a163c4a58051f0a7b94a91bd89f81b3457d18bd4076224c950d7594cdb420db68a21c785c4b7c82a8e578f2269f28c37ea6365a149db94280be23a8ab57289c5f4da4b8bbbc741589c4ee819f431bae2a857bbae8ba32ffa4c6c73722e1b93453ebaa7b461dedea119c09018a31d1d463fd5531774695042a239e80019c2b18d425b000315eb1c0d2fbc73510ba975cf24e4e8f16f04ed09f6542d8096da16de4763896e3d5ff20a6261cfc6e11c1fe4f5da08073430001fd1c7f4c18211e65ef629117616a8ed86afd0f8c3350a14ae849fdf1fce06cc2e747e1c1518976446d49cb5e3c4d1f1077e4e986d0a3237be789337f597b7b01b7e1ab2c8c3a85d37ad94afe815cef2dc15cab9c6b4b3ef06be70d80bacebcd8081d2862946c8bb3c06141027ff2345eead562e2cbc1bdf2b54392edc53b3dd7da1e6e42c7bbcbd33930271e2b8ae99ba3df4701363e7961c15ca7d51208b3677fdbfe29217f55bab1646c029a582f95aa5d1527bd2a091a06f62bf3ae223e47938d79717f5bea916295d76a19b659c9e9b53cfda7bb261604550fa6c584db21c63225558611f4fa842c2d9216a5035b5e70b403c381aa6ad41734bd378f71154529c55aafc366626f3aa0db7646c7b8cbb592d7457aa5a1119a57409dc4dbbd14187ea12592f123d54adcf52285ab67792bfa61d6fb155d1354dd350c2ffdbcb171c6b1ae048647d61b4fe3701b475a22c7a85c89aa243396c71ec7e38512461b001efda43e0eab1ba8948d9094a0844433242b5012d0e8f4d1cd68df3362ba9ff59fb2805b6f7441b80a35892394e44a4eb4e841d52d13af93495906b13848bb2ee50bd476048377fea7ffdb32122ffc29f7d6c8a2339a37c921ac78bda5c4a320f1e2dcdd0672bc236e883f2ba5e72d0c80a010a81e693799f0ec08d2f9d9870c5ee854cf578663a90dcb62399a65e6b4b3c499a2bf1f8000e6164c49a5a82226a8d6e57cb5fd567e927adb257a82b14e2a508c8197c960c46c17210c4bf2dc6a359373719379c7c29b889f4e84aeb8dc4d8e5bbceee47224d9f3e671564accbb0304cf7869f9d34ceac10b0b50a4e3cd6d34c27002d6a4779bc226711d4476a113c17da80f139628df8031715d7c432a8c524d4688f6f51899916dfd5687cb26f475b4c6563e31bf3009b5fe43da9f887b7056a4d756fe743864b005244cc5f67b4123c7a9a7ecf991cbb5f5defaa566ca50561267706b857e61ce970a1a4c248b8b435456f3fc78cca19fac1c909a0502bda499d0bbb54f1133c47d0280059b4e475bdc7c58995fb71b76f16e9cb9cf0d9426ce3119e30b7e1fd316a11a41e4ddd444ee5c7083ec02816e7cde5005374d6501ef96bcf48172419d196d0d102bc0aaab7612fa5f372f85ce7ad534a71968dc4e9a8797ced768600d7b6f4be0dd32d39f4fb67310a0b7ef98e9ccb4bb80bfc68579e33d10080921507c2195cda8281df728d2711144521208ee2ae9f90978583b224a21aeed687c440d2f7294c1cbb2e43f695e41d20ebc161964d0b3c588cb71ca246a920ff53c38b3bbf54b653a2a74ddebad724d58a980f85f46136e5205eb47fa3f6f0bc17550c73bf9fac3646e8f64be8218ff120ff56e1b4f4e7150db9d133c4ac5c9e1abd40267bb853ab88319130d1274bf849b5758614dceba84901d89ef2bece3b8beccae3a29cb9edae10a2b52a9188a0a5952e6459d4338bba67777899439a5997b3f13408270f71a2943076153e06209b16c42009a1990cbd153cadf4a934f233757c8545d410501bdaca620ea41dba3cb9aa8e156ff94a2cb755f6f3774f7b604383e92efda6357a5423b7739bca382e447caffd3e4f8f8b49f8ff232367d5c741e54e107542f9cecc9ce9c11e3497508cbc9bbe84fe250276ed323dc831ac5f42d6c64308cb6c95743dbc3f8b67dd1004889589ec3b99afc9a77b390240e0f7f1a9d3dd6e82630d0adfa5a90674e8bf2e7ae447f248715b2b5175bb39bb291800c4cf6e77543e705a2f4516e0af5d297aa18dc064401aa0f27f06a0b87ac2335a07ba427434afba857c630dc257dae6eb3aaa9df9095ef31f4729bbe2e96ebd9f05d0092c2cfc3fefacd6b860d054639275ba3db8773b4bec214c316a2f296cd2e6fc2063667d827aecf2379a94b6a9929c6650d2c4f99288bddc003f5bffb76e23bc2223add68e6bad2d0f22477792480178e972627c95994d9f76bba2ee41ffeb4d70ffea5a3a42bb28a526a65022beff3888820bc0ceb8650666ae94ca983843b149cc681b5f0772547347c3a0a5eddfa211fb14b7d4fd12619d400c09f217c691e2547ecd792256de9c4d47720176d458737df607f6bf3f71c097ed0cad0ff1620d940f039faf11e769c85a96ea799711ca9adfd0e59cfc65ee47dff320b4a650e286c7e2b1eec139edc58df55a32e00c2b795954fe6ef52069fe7e6f2ff36eea4a3a3f4047e96b2f5b4be41a6e1470cac4f0313aa601136183050eeb11b3b8f17281540f6cdd2d02637d6278ded258fbc91c0bbf7f6b09efa0f5c6209374864ef30ac0731a454de87d88d00194e5c27d9065af583df5e44660997bef2b838c199ff8e41510c60f62cd8cec4e05062ff4ef0a0ca76f66f0bfc1da18e9d5af34350ca8e2279b891a73ba7468c17442b65911430694d2b4fe65cbb2b323f439c6fe9fb8309f1c08a4960d57782a5e6ec7b3d031e3fa0762118a01f4231eb3e6b4f4cdc677b4d483a8f09ff52f3d8959abbff6fbb9117a8cd15fbf9b74b9e9b14fea1a8607654523592bf15614eff7a94a203d2e2067bc696a0a3c3ea675e70416cd7abdec566fce14ae36ded73d8daae7a6dc82bb9a6b996f16591664fc1b32d3ef32192eb184d5463a5222623855b3417955c29bf4f1ebe3cdcade4fa5d2e69c9b7ffdbbb634ebce07a1f8d0bd0bce2f1437fc59b382517f09cb56f79da0aab5db99cd51df37eadc9ca730fdef71a14db9c217243ff1421240dcfca64910ebf2505855878f124c59284a6690c27c62058517d1a284b059652aa31674203f97fee87cbf2985007fd20d98033a557bf5b2a070f234c62859982b41a045ca2a49ac48b3ba8c1e4cb28ac6a0a85455cda31f4d76c987367d499a0faf24bfc765cd0af57c6f171828ecd14497734c1a97c95351d53f4ddc626794e67bfd601707ce3b3c84bbeb998a1337f65783a0b7fccb5c9a4b60c5d3159f3fd53613db843d8f0cf54aeb864b398d80c8deb3bd4f75b2449e7a01ea145e714b3472222582ed0c0434002da55de3b315c19358d3a9e8b2f2b814c952aa253a1c2806105800a06ab8695e774ca19cfd70ca45bf6155a211658adbdaf807e05b5c5fa1a61c1fa32a92b04b1616911d2e5475be3f65851b79e7bb6c6404f6fa1c2c0a2e1087243702a1088fd844bcd9fe41e2a38328090602159f4e2c17678ae4b6329703e265d8f80f52a96507459c37cc65a82dfe4ad05a3e9b52c051eb853d725c90c98229f501e82bf668f122cf87bd548407f6340a2c261c3872f3e9cd2752ad075aa730546eb7e31a15ce59d506fd924de427be75cf820b6e78b5e30bab9d49fa7a92649eb1b01a50b3259a66be9fdfda654164edd93f03f0f40cf0c81add3064537d9700c59c6f2471773f47a7ad3c9a97121d2c373c4152208561c74dbd420049cebabe0f806d65f12fb27839e84306dd4de5ab881194ec0a11b84b0c03d9d0baab8c9875f097940a9c7cdd3695ae8203ee71c2f4a3f872e70b187cf0ec1f540de5387ba80557b9282a49e2b823de02fecd82f25626e904e99bd70e48f81d499b10c8a3cbedbf6caffb5f4267716d7394f3640716a1d179cd950897ae7899525e770f36c2aa96e0da5f7437ee65bcb3218c0e9c0a970ffd98eda18c34b2507af83835cc090492db6207f469af24eab031a01336171f38e54eebf6b37d224f4283be51f8221845c5ea86f2a586624de24ec06017be0f36e3e7e992d400ce3ef48a2cb721f8cebb63080c25eda96f74b3b06e0550641771ae624dd996dc8e1929faae29eb6773c10d3dca1f750f3404d5a0f1cb760a99cbde3bd44551b81f2e56d2618b74b87d5c8062554b35dbc4e29d8e0a113eed147a998e1eeafe186b17d0a786db7dd728a4262844fecb92c28f6827a7cdfb6e601a210bc24f740ee029fe6b0f6dedaabf7560419b38c48f033dccaaf0b2ea0946b98a64a7ebaaaeb723138fa4a68ea9d6fce7906ea226fc2436d8b7e382791e8e16faf5d1498063e893cd3a55b3114d0326d83255b79fde1755d392f13e37e1a842bee2c992d91fe1cbfe9297790b4569b89dec94782e7fd2da7d30ce8eac36bd6b0627d60c3017d303077478b5720fd9f59fd51ab92a81554246fabe36d34815073e66f1d94d404666cf5af0c264184721877ccc22d0947ecc0d41b923f96d72d239b320c5cb12493e8f7815908d3624fa7ef3c63af3f187e983a8374f64a3bc7e409d632d66131c39360b150ad6db4c48ec00bd66829b54f5aee2b4b302ba288ad4bb8a0c3c88e4c2d936d255cd7bdbd61b50ce3a795c41f7074c40aaf60f4fab8f71f9e634d858e3e868379938ea90dac426e18512304d3926f1f1779b22a249e3f2a8eb93130b7834bdf06f3a8e76373f253fc401b431eb928acd4819383608007419540087eb50f0f46b950a259104e2ba321bfa5a8d5550f206ae9fbd16d38622f53c2697093538e44ff55146ddae45659c0deaa5d49624838314c", 0x1000}], 0x3, &(0x7f0000007200)=ANY=[@ANYBLOB="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"], 0x2320}}, {{&(0x7f0000003500)=@sco={0x1f, @fixed={[], 0x11}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000003580)="45a744d959a0c625f9c567f35c41d7018f77d3b68fa6856b2bee592e64209583bc196d17ad5f0c6122ab2bdfeefb6d51b3c9761770495e0178aa4c0e57d9c05b7291ee5d26aa77c5fb0197afbead88cdf03ebc1478699ea852eddff810026b6c0fce8c1ccdddf996072cbd97a158ba615acca24e13cad8b7f7f20de79e80c6026e2e530a5f673bc22935571e1234123ce6ae78c114300b5937e8db035bd2", 0x9e}, {&(0x7f0000003640)="6780b3343c9cb0bd1799f7d0ae1459ecceaea085d5d86feaef1072c3aab733a7944efd4c2659bb5efa3965b49bd751d60c1f7bba264242559da8296ab8c22c202ef0adfcff23729dda8432b3defb22bf5a841053794cae51a5d84e32cdba4aff8471d98c28371d1c6c6e9eda8ecebb9116cee6297fc4b7b670047992b30a53ad42825f434125e1bc18cd1ac68eaa51bde9f08495ee", 0x95}, {&(0x7f0000003700)="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", 0x1000}, {&(0x7f0000004700)="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", 0xfe}], 0x4}}, {{&(0x7f0000004800)=@ethernet={0x1, @multicast}, 0x80, &(0x7f00000049c0)=[{&(0x7f0000004880)="46bc03a4a5babb7fd6eaa3ae3297b65c1dd9e6a5d94847ab3f12ef421c9d7f810b893ccab1560507d42eea7a2fcb5bccdfafd370138dafa04aa3626e76f4251386c72266d4983a69c1251a9d429bf9845ef56f19cba39eb7c70658f0fc9f9abcbace891a3dbe58257bf524c48e497dd34191bbef1adf751545e84a49b17e333d0bc9556e857ad540942229ca6899e077f9f4da47bb08bc2ef46c9ff34a2903025b31cf04c784dde93e74fa9f89536600f7b2e1a51c07e05b1da876eb1ac63e3a661f9c24b2621b663f41774271", 0xcd}, {&(0x7f0000004980)="646d29687f9564352e0393cbdf87de7e09c2e45d75", 0x15}], 0x2, &(0x7f0000004a00)=[{0xb0, 0x20, 0x7, "9e7202fc2fe95e59d502006f21434a89698188dad168b145af08ad86184988fe0a647dcce48343578fe8e35604698f47e1ecd1cb750c388a2c177fc10d429ca84eefc13e41d1e1d591b9e7d179516ccc5388b96836ac84201d6025235b02128f3d9772f64ea573dcdca53d471aeba4f1cd1fc662fc39e0020c4f5086b96280b859ea4eb0c9043d997b865fa1a74d655518a297e0ffb1abefcb1bc6a85fb6"}, {0x58, 0x119, 0x5, "5e8aa563c0a29d062d229f9a87e452bc8e62c65d94590208830511b471eb29826400c1928062e3f7b95218fbe379373c36425649c16c75fc39077f69e24393db6aa8ae3907a2e91c"}, {0x1010, 0x10b, 0x0, "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"}, {0x28, 0x10e, 0x2, "bd6487cec3d9a848bde59b8778acbcb31e00f7eaccb7c3"}, {0x58, 0x101, 0xffff, "f4280b33d483449cd0c9cc6dd72d54a1fefdb0526bec07fb56ed7cf443be223658f4d3cbbd9e6ff09618b7fb665d275865c7a8ee5cb8ee2a3f176eb5717bb90ec5887edd2b32c376"}], 0x1198}}, {{&(0x7f0000005bc0)=@ethernet={0x1, @local}, 0x80, &(0x7f0000006d40)=[{&(0x7f0000005c40)="e875656291e91855410e1d1fc7c2ea5d4fceeb466732e1a003b9e48d188aab91ae09241914a75b6ea17e5930ddc86e935e90191ed8ac66f948de9ff4d41b1ab56c501435efc326fd395b085a0bed6fbfe332cfffe45d220624b539729441da157d371df28e57cf69f3cfd5749e075c385b7aa4defae95e2040d991592fb2", 0x7e}, {&(0x7f0000005cc0)="e5d558bd5698edb92b22ff4290c42d0c4dba64121b5c6fb26d5e292df07866e1f1695cf17afe3bfa5cd3d85756d53dc0bb273f8ac0957bb10f4b5ed59e8b63f3f940a15798965e376acfce78c015f0c6aa2e88f2f23cc21a93e819352b2d6c51ad966aa563969e18", 0x68}, {&(0x7f0000005d40)="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", 0x1000}], 0x3, &(0x7f0000006d80)=[{0xd0, 0x111, 0x4, "f0da5584fe09bcbfa9e1f9d7dd859028282d02b40ba678e14bbe69de08fedefc3b394e8c9a43e6d45213509549196f0f83d184098c5c40a59d186652efe8d50804d24dff842d59828c91c83f6e3ba45961c2137e8d8c033a0284cc5810091133675c7be6021f7cc1fca79ef1480c2d7e91aa8fddc36dae3e10c36d41e9e412a60795e17dee669fb4a315e5e532938acfa4c4fa0c10d95bd8fed19d95f9150200b7625d0b6442ca88991f6a46bae62db77df82e84a4f2b5bd56a5"}], 0xd0}}, {{&(0x7f0000006e80)=@ipx={0x4, 0x80, 0x3ff, '\x00', 0x4}, 0x80, &(0x7f0000007080)=[{&(0x7f0000006f00)="ca4af80ad7d73eda7abec2cb3b5a035e7501bd288a1bee27bd9575c4f847b1599424326597d30a307b4707ddaec5e7a2d83766a3f6a635a2449ce7e367c87668ac1887e9b376033ca45bee036097ed0304d36314e1c6e732d859de", 0x5b}, {&(0x7f0000006f80)="a5fe41adde6be819cd1fd3154d4ce1a2b07530a1184f0a638144866c4d830a3dc72c3d545684f188193e143e071e8d76d75add1be3b3dd9a4dc778cc027e84015e8662f8f9f2b49300ae359942097e91bef45015703befb316608606d313156c3d75fe2e5607285cd6f5b778014d20f4fd2d6ab974c2d06af60be0c9b6960259c5d28d82bcbe1c082ac5c97fbf9f896a19e8e030b11eb75c7c42f38efb78a9eff2917cd497d426bccd876602e594c4aa1d07eda2caa50a9cc5a9ebdf95e374ebf30fb604c37df1d2a39e1cf3d2026171530455197aa6de9ade5b36", 0xdb}], 0x2}}], 0x5, 0x40) 00:15:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000000)=@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}) [ 2290.500282][T10448] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:15:10 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x7a, 0x0) 00:15:10 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RXATTRWALK(r1, &(0x7f0000000000)={0xf, 0x1f, 0x1, 0x4}, 0xf) acct(&(0x7f00000000c0)='./file0\x00') 00:15:10 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) 00:15:10 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x300, 0x0) [ 2290.821955][T10449] bond158: (slave veth565): Enslaving as an active interface with an up link [ 2290.853376][T10485] bond169 (unregistering): Released all slaves [ 2290.963570][T10444] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2291.019737][T10448] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:15:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xaf8f5681, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:11 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x9) 00:15:11 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x500, 0x0) 00:15:11 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x5) acct(&(0x7f00000000c0)='./file0\x00') 00:15:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x1d, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @local}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x0, 0xf1a}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r5, 0x28, &(0x7f0000000240)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x7, r6}, 0x8) sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x300, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r6, 0x982f, 0x10}, 0xc) ioctl$F2FS_IOC_FLUSH_DEVICE(r7, 0x4008f50a, &(0x7f0000000180)={0xfffffff9, 0x400}) sendto$inet(r3, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7a, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b005) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)={r8, 0x4}, &(0x7f0000000080)=0x8) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) [ 2291.285598][T10593] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:11 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x600, 0x0) [ 2291.486891][T10594] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:15:11 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x5aa) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$OSF_MSG_REMOVE(r6, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x175c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x4}]}}]}, 0x3c}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r9, 0x400448c9, &(0x7f00000000c0)={@fixed={[], 0x11}, 0x18}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000080)={'syzkaller1\x00'}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) 00:15:11 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x700, 0x0) 00:15:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x70, 0x1, 0x8, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x80f3}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2529}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x7}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0xc801) write$P9_RLERROR(r2, &(0x7f0000000080)={0x12, 0x7, 0x2, {0x9, '/dev/kvm\x00'}}, 0x12) sigaltstack(&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000)) 00:15:11 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x2, [{}, {}]}, 0x48) setresuid(0x0, r1, 0x0) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [{0x1, 0x4}, {0x3, 0x100}], r1}, 0x18, 0x0) 00:15:11 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0xa00, 0x0) [ 2291.783952][T10597] bond159: (slave veth567): Enslaving as an active interface with an up link [ 2291.859432][T10598] bond169: (slave veth805): Enslaving as a backup interface with a down link [ 2291.888610][T10602] bond169 (unregistering): (slave veth805): Releasing backup interface [ 2292.235533][T10602] bond169 (unregistering): Released all slaves [ 2292.323108][T10698] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2292.358962][T10594] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:15:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xc3ffffff, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:12 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x3f00, 0x0) 00:15:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x1e, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:12 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000000400)={'nat\x00'}, &(0x7f0000000380)=0x78) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6gre0\x00', r3, 0x4, 0x4, 0x1f, 0x1, 0x4a, @private2, @private1={0xfc, 0x1, [], 0x1}, 0x7, 0x20, 0x100, 0x1}}) ioctl$int_in(r2, 0x5421, &(0x7f0000000040)=0x5b874f9f) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x4}]}}]}, 0x3c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f00000001c0)={'tunl0\x00', r3, 0x20, 0x8000, 0x3, 0x8, {{0x33, 0x4, 0x0, 0x6, 0xcc, 0x64, 0x0, 0x5, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@lsrr={0x83, 0x1f, 0xa7, [@remote, @empty, @local, @dev={0xac, 0x14, 0x14, 0x12}, @loopback, @multicast2, @dev={0xac, 0x14, 0x14, 0x35}]}, @rr={0x7, 0xb, 0xeb, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @generic={0x82, 0x8, "69504aabd81d"}, @generic={0x83, 0x2}, @timestamp_addr={0x44, 0x1c, 0x53, 0x1, 0x8, [{@loopback, 0xae6}, {@private=0xa010101, 0x4}, {@multicast2, 0x6}]}, @cipso={0x86, 0xb, 0x1, [{0x6, 0x5, "317ea3"}]}, @ssrr={0x89, 0x27, 0x51, [@multicast2, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast1, @remote, @rand_addr=0x64010101, @multicast1, @multicast1]}, @timestamp_addr={0x44, 0x34, 0xe2, 0x1, 0xc, [{@multicast2, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@multicast2, 0x6}, {@broadcast, 0x7}, {@remote, 0x1}, {@local, 0x97}]}]}}}}}) acct(&(0x7f00000000c0)='./file0\x00') 00:15:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='devices.list\x00', 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 00:15:12 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) pread64(r0, 0x0, 0xfffffe89, 0x5a7) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000040)) [ 2292.629566][T10751] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:12 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x4800, 0x0) 00:15:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000000)={0x1, 0x4}, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x22680, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x4}]}}]}, 0x3c}}, 0x0) setsockopt$inet6_int(r6, 0x29, 0x17, &(0x7f0000000040)=0x33, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fsetxattr(r0, &(0x7f0000000080)=ANY=[@ANYRES64], 0x0, 0x0, 0x1) 00:15:12 executing program 4: pread64(0xffffffffffffffff, 0x0, 0xfffffe89, 0x5a7) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x400) 00:15:12 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x4c00, 0x0) 00:15:12 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x0, 0x0) pread64(r2, 0x0, 0xfffffe89, 0x5a7) [ 2292.893623][T10758] bond160: (slave veth569): Enslaving as an active interface with an up link [ 2292.942761][T10759] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:15:13 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x6800, 0x0) [ 2293.162599][T10781] bond169: (slave veth807): Enslaving as a backup interface with a down link [ 2293.203589][T10799] bond169 (unregistering): (slave veth807): Releasing backup interface [ 2293.521429][T10799] bond169 (unregistering): Released all slaves [ 2293.646061][T10758] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2293.708164][T10759] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:15:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xd0efff7f, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:13 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x6c00, 0x0) 00:15:13 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f00000001c0)=""/4096) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$CHAR_RAW_FLSBUF(r2, 0x1261, &(0x7f0000000040)=0x4) acct(&(0x7f00000000c0)='./file0\x00') 00:15:13 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100)='NLBL_MGMT\x00') r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x30400, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080)=0xff, 0x4) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f00000000c0)={0x8, 0x7, 0x4b1e6e20, 0x3}, 0x10) pread64(r0, 0x0, 0xfffffe89, 0x5a7) 00:15:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x25, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f0000000080)) [ 2293.948374][T10921] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:14 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x7400, 0x0) 00:15:14 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r3, 0x1, 0x0, 0x0, {0xc}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x5, 0x5, '`'}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x44}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_XRUN(r5, 0x4148, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r3, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x20}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x408c1}, 0x80050) pread64(r0, 0x0, 0xfffffe89, 0x5a7) 00:15:14 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x7a00, 0x0) 00:15:14 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0xeffd, 0x0) 00:15:14 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x8000, 0x7) r1 = fcntl$dupfd(r0, 0x406, r0) accept4$unix(r1, &(0x7f0000000040)=@abs, &(0x7f0000000100)=0x6e, 0x0) 00:15:14 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0xfdef, 0x0) [ 2294.219213][T10930] bond161: (slave veth573): Enslaving as an active interface with an up link [ 2294.266010][T10931] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2294.357964][T10952] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2294.383102][T10952] bond161 (unregistering): (slave veth573): Releasing backup interface [ 2294.413053][T11022] Process accounting resumed [ 2294.647271][T10952] bond161 (unregistering): Released all slaves [ 2294.739491][T10968] bond169: (slave veth809): Enslaving as a backup interface with a down link [ 2294.757327][T10975] bond169 (unregistering): (slave veth809): Releasing backup interface [ 2294.991973][T10975] bond169 (unregistering): Released all slaves [ 2295.036435][T10921] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2295.157719][T10931] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2295.212566][T11065] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xe0efff7f, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:15 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x100000, 0x0) 00:15:15 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, r1, 0x0) acct(&(0x7f00000000c0)='./file0\x00') 00:15:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x4}]}}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r5, 0x89f4, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'sit0\x00', r7, 0x6, 0x81, 0x7f, 0xd09, 0x1, @ipv4={[], [], @loopback}, @ipv4={[], [], @loopback}, 0x1, 0x8000, 0x8001, 0x1f}}) write$FUSE_OPEN(r2, &(0x7f0000000000)={0x20, 0xffffffffffffffda, 0x1, {0x0, 0x12}}, 0x20) 00:15:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x404e20}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x5) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1d5d0000000) r2 = accept4(r0, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1030000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000640001002bbd7000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="05000600100006000b000000526ba06c32e325d492b04b1606ff050000070000"], 0x2c}, 0x1, 0x0, 0x0, 0x4004020}, 0xc045) dup(0xffffffffffffffff) r5 = shmget(0x1, 0x3000, 0x54000000, &(0x7f0000ffd000/0x3000)=nil) shmat(r5, &(0x7f0000ffd000/0x3000)=nil, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000480)={0x0, 0x0, 0xd80, 0x0, 0x3, "ecea0e6708843f326f31eaaac927cac591ab18", 0xd7, 0x5}) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000005}, 0xa}], 0x4000000000000d0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) setresuid(0x0, 0x0, 0x0) 00:15:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x2f, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:15 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x1000000, 0x0) 00:15:15 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/27, 0x1b) [ 2295.454607][T11133] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:15:15 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0xc042, 0x0) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(0x0, r3, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x2, 0x56}) ioctl$TUNSETOWNER(r1, 0x400454cc, r3) pread64(r0, 0x0, 0xfffffe89, 0x5a7) 00:15:15 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x2000000, 0x0) [ 2295.698193][T11130] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:15 executing program 2: r0 = userfaultfd(0x80000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x2}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') 00:15:15 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x3000000, 0x0) [ 2295.927309][T11136] bond169: (slave veth813): Enslaving as a backup interface with a down link [ 2296.073416][T11137] bond161: (slave veth575): Enslaving as an active interface with an up link [ 2296.118845][T11143] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2296.147417][T11143] bond161 (unregistering): (slave veth575): Releasing backup interface [ 2296.383676][T11143] bond161 (unregistering): Released all slaves [ 2296.435743][T11142] bond169 (unregistering): (slave veth813): Releasing backup interface [ 2296.616599][T11142] bond169 (unregistering): Released all slaves [ 2296.680140][T11137] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2296.737046][T11133] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2296.899232][T11243] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xf0ffffff, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:17 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x80, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x160, r2, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}}]}, 0x160}, 0x1, 0x0, 0x0, 0x4004001}, 0x4) pread64(r0, 0x0, 0xfffffe89, 0x5a7) 00:15:17 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x25, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PPPIOCDISCONN(r0, 0x7439) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(0x0, r2, 0x0) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(0x0, r4, 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x20001, &(0x7f00000001c0)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x5}}, {@timeout={'timeout', 0x3d, 0xc1d}}, {@rq={'rq', 0x3d, 0x9}}, {@sq={'sq', 0x3d, 0xdec8}}, {@rq={'rq', 0x3d, 0x3}}, {@timeout={'timeout', 0x3d, 0xffffffffffffffff}}], [{@smackfsdef={'smackfsdef', 0x3d, ']#{'}}, {@euid_lt={'euid<', r2}}, {@euid_eq={'euid', 0x3d, r4}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@smackfsroot={'smackfsroot'}}, {@audit='audit'}, {@fsname={'fsname', 0x3d, '[+&.'}}, {@smackfshat={'smackfshat', 0x3d, '(-'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@audit='audit'}]}}) sched_yield() 00:15:17 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x4000000, 0x0) 00:15:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x4}]}}]}, 0x3c}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_OVERLAY(r6, 0x4004560e, &(0x7f00000002c0)=0x9) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_SB_POOL_SET(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x108, r7, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x6182}, {0x5, 0x14, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xff}, {0x6}, {0x8, 0x13, 0x3}, {0x5, 0x14, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xd3}, {0x6}, {0x8, 0x13, 0xffff}, {0x5, 0x14, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x523}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x6}, {0x5}}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 00:15:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x30, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:17 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f0000000000)='./file0\x00') r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) read$usbmon(r1, &(0x7f0000000040)=""/111, 0x6f) [ 2297.163944][T11333] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:17 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x5000000, 0x0) 00:15:17 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) pread64(r0, 0x0, 0x4a, 0xfffffffffffffffe) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x10001, 0x9, 0xb}, &(0x7f0000000080)=0x10) r2 = socket(0x11, 0x800000003, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000440)={&(0x7f0000000300), 0x10, &(0x7f0000000400)={&(0x7f0000000340)={0x2, 0x825, 0xffffffff, {0x77359400}, {}, {0x1}, 0x1, @canfd={{0x3, 0x1}, 0x7, 0x2, 0x0, 0x0, "9d9f059c3579066f69e6877c471fc0a89875b19913579706aecec81fd3544d87452dd0803b777886c25a593ab8155714ddd8dedfbf8546ac6268e0ac22bcc890"}}, 0x80}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x35}}}, [0x8, 0xedf, 0x7, 0x8000, 0x7ff, 0x0, 0x9, 0x401, 0x4, 0x2, 0x6, 0x1000, 0x5]}, &(0x7f00000001c0)=0x100) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={r1, 0x401, 0xb19, 0x4, 0x0, 0x8000, 0x2, 0x7, {r3, @in={{0x2, 0x4e22, @multicast2}}, 0x1000, 0x80000000, 0x8000, 0x7fff, 0xe63}}, &(0x7f00000002c0)=0xb0) 00:15:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x141580, 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='os:.++\x00'], 0x0, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_S_TUNER(r4, 0x4054561e, &(0x7f0000000280)={0x85b, "8c3e28c2145854e093802c34921623e6c9cd42ed6ca48b1c765929e05d98323d", 0x2, 0x40, 0x80000000, 0x7fff, 0x1, 0x3, 0x10000000, 0x8}) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x4}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x4}]}}]}, 0x3c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r8, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x14, r9, 0x309}, 0x14}}, 0x0) socket$isdn(0x22, 0x3, 0x21) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x54, r9, 0x420, 0x70bd2c, 0x25dfdbff, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0xffffffffffffff66, 0xb, 0x4}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x40}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004041}, 0x8000) [ 2297.369970][T11338] bond161: (slave veth579): Enslaving as an active interface with an up link 00:15:17 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x6000000, 0x0) [ 2297.429770][T11337] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:15:17 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x7000000, 0x0) [ 2297.693624][T11373] bond169: (slave veth817): Enslaving as a backup interface with a down link [ 2297.728836][T11379] bond169 (unregistering): (slave veth817): Releasing backup interface [ 2297.963355][T11379] bond169 (unregistering): Released all slaves [ 2298.132493][T11366] bond161: (slave veth581): Enslaving as an active interface with an up link [ 2298.159032][T11420] bond161 (unregistering): (slave veth579): Releasing backup interface [ 2298.589186][T11420] bond161 (unregistering): (slave veth581): Releasing backup interface [ 2298.912209][T11420] bond161 (unregistering): Released all slaves [ 2298.977191][T11337] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:15:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xf6180000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:19 executing program 4: seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0xfffffe89, 0x5a7) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = getpid() r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x70b, 0xffff, 0x401}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x28, r5, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_WIPHY={0x8}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x5c, r5, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "126f4fc2b56cb71f6bfa5e3d19"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "94941d04dd3bdb06c4f7490421"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "09485320663aeae9132bc4b2ed"}]}, 0x5c}}, 0x10000045) ptrace(0x10, r1) ptrace$getregset(0x4203, r1, 0x0, &(0x7f0000000180)={0x0, 0x8}) syz_open_procfs(r1, &(0x7f0000000000)='stat\x00') r6 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) 00:15:19 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0xa000000, 0x0) 00:15:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) close(r0) 00:15:19 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000000540)=[{&(0x7f0000000000)=0x2}, {&(0x7f0000000040)=0x2, 0x1}, {&(0x7f0000000080)=0x1}, {&(0x7f0000000100)=0x1, 0x2}, {&(0x7f00000001c0)=0x1, 0x1}, {&(0x7f0000000200), 0x1}, {&(0x7f0000000240)=0x2, 0x5}, {&(0x7f0000000280)=0x1, 0x2}, {&(0x7f00000002c0)=0x1}, {&(0x7f0000000300)=0x1, 0x2}, {&(0x7f0000000340)=0x2, 0x1}, {&(0x7f0000000380)}, {&(0x7f00000003c0)=0x1, 0x1}, {&(0x7f0000000400)=0x2}, {&(0x7f0000000440)}, {&(0x7f0000000480)=0x2, 0x2}, {&(0x7f00000004c0)}, {&(0x7f0000000500), 0x2}], 0xd, 0x12, &(0x7f0000000680)={0x0, 0x989680}, 0x0, 0x0) acct(&(0x7f00000000c0)='./file0\x00') 00:15:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x5b, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) [ 2299.429739][ T27] audit: type=1326 audit(1595549719.439:50): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11521 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f03a code=0x0 00:15:19 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') [ 2299.475758][T11531] __nla_validate_parse: 2 callbacks suppressed [ 2299.475773][T11531] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:19 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x3f000000, 0x0) 00:15:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000000)=0x4800000) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) [ 2299.597662][T11537] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:15:19 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x48000000, 0x0) 00:15:19 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x4c000000, 0x0) 00:15:19 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat2(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x400, 0x100}, 0x18) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f00000001c0)=""/244) acct(&(0x7f00000000c0)='./file0\x00') [ 2299.788968][T11538] bond161: (slave veth583): Enslaving as an active interface with an up link [ 2299.891679][T11556] bond169: (slave veth819): Enslaving as a backup interface with a down link [ 2299.956506][T11578] bond169 (unregistering): (slave veth819): Releasing backup interface [ 2300.220506][ T27] audit: type=1326 audit(1595549720.229:51): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=11521 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f03a code=0x0 [ 2300.383776][T11578] bond169 (unregistering): Released all slaves [ 2300.484131][T11531] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2300.635365][T11555] bond161: (slave veth585): Enslaving as an active interface with an up link [ 2300.667083][T11537] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:15:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xfeffffff, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:20 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x68000000, 0x0) 00:15:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x3) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x6) openat$cgroup_ro(r2, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x4}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x3c}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) 00:15:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x60, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:20 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') 00:15:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) pread64(r1, 0x0, 0x0, 0x5a7) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = pidfd_getfd(r4, r7, 0x0) setsockopt$inet_int(r8, 0x0, 0x21, &(0x7f0000000000)=0x10000, 0x4) [ 2301.023986][T11700] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:21 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x80401, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x4}]}}]}, 0x3c}}, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x50, 0x13, 0x10, 0x70bd28, 0x25dfdbfe, {0x23, 0x20, 0x7f, 0x8, {0x4e22, 0x4e20, [0x7ff, 0x1, 0x5, 0x3f], [0x0, 0x4, 0xfffffb5a, 0x8001], r2, [0x0, 0x8]}, 0x7a3e, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') 00:15:21 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x6c000000, 0x0) 00:15:21 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) pread64(r0, 0x0, 0xfffffe89, 0x5a7) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000040)={0x0, 0x2, {0x0, 0x3, 0x7fffffff, 0x0, 0x9}, 0x6}) 00:15:21 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x74000000, 0x0) [ 2301.374128][T11704] bond162: (slave veth587): Enslaving as an active interface with an up link [ 2301.414283][T11706] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:15:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f00000001c0)={0xa30000, 0x1eb, 0xffffffff, r4, 0x0, &(0x7f0000000180)={0xa30904, 0x400, [], @string=&(0x7f0000000100)=0x88}}) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000024000b0f00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010063616b65000000000c001c009909000000000000efd31097cd11d65f71c62cf4f989a3c3b33eba67ec5f913b8a496aa98cbbf90f020b3cb168f747cc525b4c4d9e66067c36d32dd6ece85dc3a0f7349ad1c7414817b3362af5277e510c37e2296122d746762b8d00"/132], 0x3c}}, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x3a808987010943c7, 0x34, 0x3f, 0xe8, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) [ 2301.517029][T11729] bond169 (unregistering): Released all slaves 00:15:21 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x7a000000, 0x0) [ 2301.634439][T11700] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2301.760947][T11713] bond162: (slave veth589): Enslaving as an active interface with an up link [ 2301.842035][T11706] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:15:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xfffff000, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:22 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) pread64(r0, 0x0, 0xfffffe89, 0x5a7) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x26) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000024000b0f00"/20, @ANYRES32=r2, @ANYBLOB="00e2ffff78f15b8e00fef7fa7e7af8dbfc68c8b4efd12eb83f32cd2fdcb085feffffff000000000900010063616b6500406b27c9df119ac3fd0e1414dbb8e89e22c4fd0b5d0121807f8849b04cde9ad031bd0b7d8a51956340ebeb4f2044647a53b71291cd75572cc3cc6536b6c458ea58b3887d33bc67999de4441e7cc89f639967cd58a948b15cda121e89df5a5b8f6c93d4f20dafea9ac8350d9cf49e4f40e8e87fc6ea4986beba606b4f7d621cc4d1cfe4f9f194f286be3a879409f310fec4cd499d8fb2bc89dfff7a0fd69b41"], 0x3c}}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(0xffffffffffffffff, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @local}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7a, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b005) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000280)={r6, 0x9b, "70c557ede1c8b01af4235116be2cf2a26525d52b2a64d5e99106980afa6d15eedf98ec855af845b358e0f23d6e917fdbb42041ecd00d7866d5879f567d07a1462bfb0c8a0652c9dcd10a616397d82c47965705306356d9974a7098c5bfe8e574483fa3c929488acc199ece044cadfd19afcfc6fd2a45a604019a4da2651510927481ad3f534eff0fd4a24409909599e2293ed7091f4ed15b1019c8"}, &(0x7f00000001c0)=0xa3) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={r7}, &(0x7f0000000340)=0x8) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0x100000000, &(0x7f00000000c0)="bd2f6ee20ae39d21a2fa5c0f904adf6c68aeff08cc819c975d5deccb5ca295a86a9827e97760b9c894441f22c3c61f1e0251b82c3241f77c4ed01f061b91f817"}) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000040)) 00:15:22 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000000)=0x800) 00:15:22 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0xeffdffff, 0x0) 00:15:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0xc0, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x141580, 0x0) fsetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='os:.++\x00'], 0x0, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_S_TUNER(r4, 0x4054561e, &(0x7f0000000280)={0x85b, "8c3e28c2145854e093802c34921623e6c9cd42ed6ca48b1c765929e05d98323d", 0x2, 0x40, 0x80000000, 0x7fff, 0x1, 0x3, 0x10000000, 0x8}) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x4}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x4}]}}]}, 0x3c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r8, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x14, r9, 0x309}, 0x14}}, 0x0) socket$isdn(0x22, 0x3, 0x21) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x54, r9, 0x420, 0x70bd2c, 0x25dfdbff, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0xffffffffffffff66, 0xb, 0x4}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x40}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004041}, 0x8000) [ 2302.100216][T11865] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2302.170403][T11866] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:22 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0xfffffdef, 0x0) [ 2302.224128][T11869] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 00:15:22 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0xffffff7f, 0x0) [ 2302.352893][T11887] bond169: (slave veth823): Enslaving as a backup interface with a down link 00:15:22 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x7ffffffff000, 0x0) 00:15:22 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x10000000000000, 0x0) [ 2302.527854][T11889] bond163: (slave veth591): Enslaving as an active interface with an up link [ 2302.573473][T11865] bond169 (unregistering): (slave veth823): Releasing backup interface 00:15:22 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0xf0ffffff7f0000, 0x0) 00:15:22 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x100000000000000, 0x0) [ 2302.984208][T11865] bond169 (unregistering): Released all slaves [ 2303.079119][T11866] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2303.162166][T11921] bond163: (slave veth593): Enslaving as an active interface with an up link [ 2303.179062][T11887] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2303.338543][T11944] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 00:15:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xffffff7f, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:23 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x2000000, 0x0) 00:15:23 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x200000000000000, 0x0) 00:15:23 executing program 2: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) acct(&(0x7f00000000c0)='./file0\x00') 00:15:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x6c0, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:23 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000080)={0x1f, 0x5, 0x4, 0x8, 0x1, 0x2dd}) r3 = dup(r1) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000040)=""/41) pread64(r0, 0x0, 0xfffffe89, 0x5a7) socket$inet6_tcp(0xa, 0x1, 0x0) 00:15:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @local}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x0, 0xf1a}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r5, 0x28, &(0x7f0000000240)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x7, r6}, 0x8) sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x300, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r6, 0x982f, 0x10}, 0xc) ioctl$F2FS_IOC_FLUSH_DEVICE(r7, 0x4008f50a, &(0x7f0000000180)={0xfffffff9, 0x400}) sendto$inet(r3, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7a, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b005) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)={r8, 0x4}, &(0x7f0000000080)=0x8) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) [ 2303.520386][T12030] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:23 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x300000000000000, 0x0) 00:15:23 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x400000000000000, 0x0) [ 2303.674749][T12036] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:15:23 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) connect$pptp(r2, &(0x7f0000000040)={0x18, 0x2, {0x3, @loopback}}, 0x1e) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0x9a0000, 0x4031, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x10022, 0x36, [], @p_u32=&(0x7f0000000100)=0x80}}) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000140)={0xfffffe01, 0x0, [], {0x0, @bt={0xffffffff, 0x7ff, 0x1, 0x1, 0x5, 0xab8, 0x4, 0x8, 0xf9, 0x1, 0xcc, 0x73a, 0xac4, 0x1, 0x4, 0x0, {0x2, 0x200}, 0x1, 0x7}}}) ioctl$TCSBRKP(r4, 0x5425, 0x2) pread64(r0, 0x0, 0xfffffe89, 0x5a7) 00:15:23 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x4}]}}]}, 0x3c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000100)={'erspan0\x00', &(0x7f00000001c0)={'syztnl1\x00', r4, 0x8, 0x700, 0x401, 0x0, {{0x20, 0x4, 0x2, 0x32, 0x80, 0x66, 0x0, 0xc0, 0x2f, 0x0, @broadcast, @loopback, {[@cipso={0x86, 0x1e, 0x0, [{0x2, 0xf, "4102a86d174c3f97836386d35d"}, {0x0, 0x4, "60c5"}, {0x6, 0x5, "59ede1"}]}, @rr={0x7, 0xf, 0x5a, [@empty, @private=0xa010102, @loopback]}, @ssrr={0x89, 0x13, 0x40, [@dev={0xac, 0x14, 0x14, 0x21}, @dev={0xac, 0x14, 0x14, 0x1d}, @dev={0xac, 0x14, 0x14, 0x29}, @multicast2]}, @timestamp={0x44, 0x18, 0xa, 0x0, 0x3, [0x6, 0xfb27, 0xe5a, 0x9, 0x40]}, @timestamp={0x44, 0x14, 0xe6, 0x0, 0xc, [0x578522ac, 0x1, 0x1, 0x9]}]}}}}}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {r8, 0x12}}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') 00:15:23 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x500000000000000, 0x0) [ 2303.936181][T12039] bond164: (slave veth595): Enslaving as an active interface with an up link [ 2304.010285][T12042] bond169: (slave veth825): Enslaving as a backup interface with a down link [ 2304.030930][T12071] bond169 (unregistering): (slave veth825): Releasing backup interface [ 2304.275672][T12071] bond169 (unregistering): Released all slaves [ 2304.331367][T12030] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2304.380110][T12070] bond164: (slave veth597): Enslaving as an active interface with an up link [ 2304.413994][T12036] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:15:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xffffff9e, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:24 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x5) acct(&(0x7f00000000c0)='./file0\x00') 00:15:24 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x600000000000000, 0x0) 00:15:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0xec0, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:24 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f00000000c0)='./file0\x00') 00:15:24 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) pread64(r0, 0x0, 0xfffffe89, 0x5a7) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x401, 0x420400) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000080)) r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a0500000000000000422cb4963a160161b1cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x34d, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r3, r2, r3}, &(0x7f0000000240)=""/112, 0x70, 0x0) r4 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(0x0, r5, 0x0) r6 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000280)={{{@in=@multicast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@dev}}, &(0x7f0000000080)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) setresgid(0x0, r8, r8) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000480)=ANY=[@ANYRES32, @ANYBLOB="02000100", @ANYRES32=r7, @ANYBLOB="04400700fcff000008000100", @ANYBLOB="08000200", @ANYRES32=r8, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="10000200000000002000020000000000"], 0x4c, 0x1) keyctl$chown(0x4, r3, r5, r8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0xdb) [ 2304.721037][T12193] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:24 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x5) acct(&(0x7f00000000c0)='./file0\x00') [ 2304.819512][T12200] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:15:24 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x700000000000000, 0x0) 00:15:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x19, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:24 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000002c0)}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x36, &(0x7f0000000300)="f7f249b9740c9e57f4f22a160500000032a5b60a00008024c30e478947d190ac00000000000000000000000000000000663697ba4ecb"}}], 0x1c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) pread64(r0, 0x0, 0xfffffe89, 0x5a7) 00:15:25 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0xa00000000000000, 0x0) 00:15:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x4, 0x4, 0x400, 0x101, 0x18, "65c49237e58d53bd5fb1692d8e92b12c0bd025"}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000680)={0x5, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x1, 0x9, 0x6, 0x8001, 0x1, 0x1ff}, {0xa, 0x5, 0x1, 0x2, 0x3, 0x1ac3, 0x8}, {0xd, 0x7, 0x1, 0x400000, 0x1, 0x2ac3, 0x26b5}]}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000180)={{0x6, 0x4, 0x400, 0x7ff, '\x00', 0x5a}, 0x1, [0xc, 0x5, 0x83, 0x20, 0x4, 0x3, 0x8, 0x0, 0x8c, 0x2000000000000100, 0x100, 0x2, 0x5c00, 0x10001, 0x2, 0x200, 0x5, 0x2, 0x4, 0x5, 0x5, 0x9, 0x200, 0xfffffffffffffffb, 0x5, 0x6, 0x0, 0x80000001, 0x20, 0x7ff, 0x5a, 0x7, 0x5, 0x6, 0x3, 0x7, 0x7, 0x4110, 0x101, 0x8, 0x3, 0x8d5, 0x8, 0x20, 0x3ff, 0xa57, 0xcad, 0x2, 0x1, 0x2, 0x100, 0xfff, 0x1, 0x10004, 0x7fff, 0x80008000, 0x4f, 0x0, 0x8, 0x7f, 0x6, 0xfffffffffffffd4e, 0x3, 0x9d, 0xad2e, 0x4, 0x103, 0x7, 0xb2e, 0x3, 0x2, 0x3, 0x6, 0x5fae, 0x9, 0x9, 0x800000000000000, 0x8, 0xa42, 0x1b, 0x100000000, 0xffffffff, 0x4, 0x1, 0x20, 0x5, 0x8, 0x9, 0x6, 0x1, 0xffffffff, 0x401, 0x80, 0x8000000, 0x9, 0xdb3, 0x1f, 0x8001, 0x1, 0x4364, 0x1, 0x81, 0x5, 0x1af, 0x7, 0x4, 0x20, 0xffffffff, 0x8fc9, 0x5a, 0x5, 0x543, 0x4000000000000000, 0x8, 0x6, 0x2, 0x80000001, 0x0, 0x0, 0x1, 0x3, 0x3, 0x29, 0xffffffffffffffe1, 0x1, 0x3f, 0x2]}) [ 2305.094430][T12202] bond165: (slave veth599): Enslaving as an active interface with an up link [ 2305.222196][T12238] bond169: (slave veth827): Enslaving as a backup interface with a down link [ 2305.246930][T12290] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2305.356721][T12294] bond3: (slave veth9): Enslaving as an active interface with an up link [ 2305.370640][T12193] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2305.483724][T12237] bond165: (slave veth601): Enslaving as an active interface with an up link [ 2305.502226][T12200] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2305.581129][T12238] bond169: (slave veth829): Enslaving as a backup interface with a down link [ 2305.608124][T12245] bond169 (unregistering): (slave veth827): Releasing backup interface [ 2305.773480][T12245] bond169 (unregistering): (slave veth829): Releasing backup interface [ 2305.995709][T12245] bond169 (unregistering): Released all slaves 00:15:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xffffffc3, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:26 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x3f00000000000000, 0x0) 00:15:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x4, 0x4, 0x400, 0x101, 0x18, "65c49237e58d53bd5fb1692d8e92b12c0bd025"}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000680)={0x5, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x1, 0x9, 0x6, 0x8001, 0x1, 0x1ff}, {0xa, 0x5, 0x1, 0x2, 0x3, 0x1ac3, 0x8}, {0xd, 0x7, 0x1, 0x400000, 0x1, 0x2ac3, 0x26b5}]}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000180)={{0x6, 0x4, 0x400, 0x7ff, '\x00', 0x5a}, 0x1, [0xc, 0x5, 0x83, 0x20, 0x4, 0x3, 0x8, 0x0, 0x8c, 0x2000000000000100, 0x100, 0x2, 0x5c00, 0x10001, 0x2, 0x200, 0x5, 0x2, 0x4, 0x5, 0x5, 0x9, 0x200, 0xfffffffffffffffb, 0x5, 0x6, 0x0, 0x80000001, 0x20, 0x7ff, 0x5a, 0x7, 0x5, 0x6, 0x3, 0x7, 0x7, 0x4110, 0x101, 0x8, 0x3, 0x8d5, 0x8, 0x20, 0x3ff, 0xa57, 0xcad, 0x2, 0x1, 0x2, 0x100, 0xfff, 0x1, 0x10004, 0x7fff, 0x80008000, 0x4f, 0x0, 0x8, 0x7f, 0x6, 0xfffffffffffffd4e, 0x3, 0x9d, 0xad2e, 0x4, 0x103, 0x7, 0xb2e, 0x3, 0x2, 0x3, 0x6, 0x5fae, 0x9, 0x9, 0x800000000000000, 0x8, 0xa42, 0x1b, 0x100000000, 0xffffffff, 0x4, 0x1, 0x20, 0x5, 0x8, 0x9, 0x6, 0x1, 0xffffffff, 0x401, 0x80, 0x8000000, 0x9, 0xdb3, 0x1f, 0x8001, 0x1, 0x4364, 0x1, 0x81, 0x5, 0x1af, 0x7, 0x4, 0x20, 0xffffffff, 0x8fc9, 0x5a, 0x5, 0x543, 0x4000000000000000, 0x8, 0x6, 0x2, 0x80000001, 0x0, 0x0, 0x1, 0x3, 0x3, 0x29, 0xffffffffffffffe1, 0x1, 0x3f, 0x2]}) 00:15:26 executing program 2 (fault-call:4 fault-nth:0): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2312f1f75573afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) 00:15:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20000520, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) [ 2306.208125][T12400] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:26 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x4800000000000000, 0x0) [ 2306.308630][T12421] FAULT_INJECTION: forcing a failure. [ 2306.308630][T12421] name failslab, interval 1, probability 0, space 0, times 0 [ 2306.398762][T12421] CPU: 0 PID: 12421 Comm: syz-executor.2 Not tainted 5.8.0-rc6-next-20200723-syzkaller #0 [ 2306.408718][T12421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2306.418842][T12421] Call Trace: [ 2306.422155][T12421] dump_stack+0x18f/0x20d [ 2306.426525][T12421] should_fail.cold+0x5/0x14 [ 2306.431154][T12421] ? tty_write+0x5f0/0x870 [ 2306.435591][T12421] should_failslab+0x5/0xf [ 2306.440030][T12421] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 2306.446133][T12421] __kmalloc+0x6f/0x320 [ 2306.450313][T12421] ? mutex_trylock+0x246/0x2c0 [ 2306.455104][T12421] tty_write+0x5f0/0x870 [ 2306.459374][T12421] ? n_tty_receive_char_lnext+0x700/0x700 [ 2306.465133][T12421] do_iter_write+0x4a2/0x630 [ 2306.469760][T12421] vfs_writev+0x1aa/0x2e0 [ 2306.474134][T12421] ? vfs_iter_write+0xa0/0xa0 [ 2306.479543][T12421] ? lock_downgrade+0x830/0x830 [ 2306.484514][T12421] ? __fget_files+0x294/0x400 [ 2306.489230][T12421] ? __fget_light+0xea/0x280 [ 2306.493849][T12421] do_writev+0x139/0x300 [ 2306.498124][T12421] ? vfs_writev+0x2e0/0x2e0 [ 2306.502769][T12421] ? lock_is_held_type+0xbb/0xf0 [ 2306.507743][T12421] ? do_syscall_64+0x1c/0xe0 [ 2306.512390][T12421] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 2306.518406][T12421] do_syscall_64+0x60/0xe0 [ 2306.522848][T12421] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2306.528773][T12421] RIP: 0033:0x45c1f9 [ 2306.532673][T12421] Code: Bad RIP value. [ 2306.536743][T12421] RSP: 002b:00007f7bffd20c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2306.545202][T12421] RAX: ffffffffffffffda RBX: 0000000000037f80 RCX: 000000000045c1f9 [ 2306.553295][T12421] RDX: 0000000000000002 RSI: 0000000020000540 RDI: 0000000000000003 [ 2306.561325][T12421] RBP: 00007f7bffd20ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2306.569323][T12421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2306.577314][T12421] R13: 00007ffe858338df R14: 00007f7bffd219c0 R15: 000000000078bfac [ 2306.587136][T12404] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:15:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x4, 0x4, 0x400, 0x101, 0x18, "65c49237e58d53bd5fb1692d8e92b12c0bd025"}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000680)={0x5, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x1, 0x9, 0x6, 0x8001, 0x1, 0x1ff}, {0xa, 0x5, 0x1, 0x2, 0x3, 0x1ac3, 0x8}, {0xd, 0x7, 0x1, 0x400000, 0x1, 0x2ac3, 0x26b5}]}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000180)={{0x6, 0x4, 0x400, 0x7ff, '\x00', 0x5a}, 0x1, [0xc, 0x5, 0x83, 0x20, 0x4, 0x3, 0x8, 0x0, 0x8c, 0x2000000000000100, 0x100, 0x2, 0x5c00, 0x10001, 0x2, 0x200, 0x5, 0x2, 0x4, 0x5, 0x5, 0x9, 0x200, 0xfffffffffffffffb, 0x5, 0x6, 0x0, 0x80000001, 0x20, 0x7ff, 0x5a, 0x7, 0x5, 0x6, 0x3, 0x7, 0x7, 0x4110, 0x101, 0x8, 0x3, 0x8d5, 0x8, 0x20, 0x3ff, 0xa57, 0xcad, 0x2, 0x1, 0x2, 0x100, 0xfff, 0x1, 0x10004, 0x7fff, 0x80008000, 0x4f, 0x0, 0x8, 0x7f, 0x6, 0xfffffffffffffd4e, 0x3, 0x9d, 0xad2e, 0x4, 0x103, 0x7, 0xb2e, 0x3, 0x2, 0x3, 0x6, 0x5fae, 0x9, 0x9, 0x800000000000000, 0x8, 0xa42, 0x1b, 0x100000000, 0xffffffff, 0x4, 0x1, 0x20, 0x5, 0x8, 0x9, 0x6, 0x1, 0xffffffff, 0x401, 0x80, 0x8000000, 0x9, 0xdb3, 0x1f, 0x8001, 0x1, 0x4364, 0x1, 0x81, 0x5, 0x1af, 0x7, 0x4, 0x20, 0xffffffff, 0x8fc9, 0x5a, 0x5, 0x543, 0x4000000000000000, 0x8, 0x6, 0x2, 0x80000001, 0x0, 0x0, 0x1, 0x3, 0x3, 0x29, 0xffffffffffffffe1, 0x1, 0x3f, 0x2]}) [ 2306.804076][T12422] bond169: (slave veth831): Enslaving as a backup interface with a down link 00:15:26 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x4c00000000000000, 0x0) [ 2306.907107][T12410] bond166: (slave veth603): Enslaving as an active interface with an up link [ 2306.962037][T12435] bond169 (unregistering): (slave veth831): Releasing backup interface 00:15:27 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2312f1f75573afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) [ 2307.185458][T12435] bond169 (unregistering): Released all slaves [ 2307.249289][T12400] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2307.378559][T12436] bond166: (slave veth605): Enslaving as an active interface with an up link [ 2307.388538][T12404] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:15:28 executing program 4: pread64(0xffffffffffffffff, 0x0, 0xfffffe89, 0x5a7) 00:15:28 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x6800000000000000, 0x0) 00:15:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x4, 0x4, 0x400, 0x101, 0x18, "65c49237e58d53bd5fb1692d8e92b12c0bd025"}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000680)={0x5, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x1, 0x9, 0x6, 0x8001, 0x1, 0x1ff}, {0xa, 0x5, 0x1, 0x2, 0x3, 0x1ac3, 0x8}, {0xd, 0x7, 0x1, 0x400000, 0x1, 0x2ac3, 0x26b5}]}) 00:15:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x7ffff000, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:28 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='\b', 0x1}, {&(0x7f00000001c0)="fdb2312f1f75573afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) 00:15:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xfffffff0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) [ 2308.102777][T12561] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:28 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x6c00000000000000, 0x0) 00:15:28 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = getpid() ptrace(0x10, r2) ptrace$getregset(0x4203, r2, 0x0, &(0x7f0000000180)={0x0, 0x8}) fcntl$setown(r1, 0x8, r2) pread64(r0, 0x0, 0xfffffe89, 0x5a7) [ 2308.205713][T12561] bond167: (slave veth607): Enslaving as an active interface with an up link [ 2308.216082][T12564] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:15:28 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='\t', 0x1}, {&(0x7f00000001c0)="fdb2312f1f75573afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) 00:15:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x4, 0x4, 0x400, 0x101, 0x18, "65c49237e58d53bd5fb1692d8e92b12c0bd025"}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000680)={0x5, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x1, 0x9, 0x6, 0x8001, 0x1, 0x1ff}, {0xa, 0x5, 0x1, 0x2, 0x3, 0x1ac3, 0x8}, {0xd, 0x7, 0x1, 0x400000, 0x1, 0x2ac3, 0x26b5}]}) 00:15:28 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x5a5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x9, 0x1000, 0xffff, 0x9}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r5, 0x800442d2, &(0x7f00000000c0)={0x6, &(0x7f0000000180)=[{0x0, 0x0, 0x0, @local}, {}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @link_local}]}) ioctl$DRM_IOCTL_MODE_RMFB(r4, 0xc00464af, &(0x7f0000000080)=0xe83) 00:15:28 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x7400000000000000, 0x0) [ 2308.510003][T12606] bond169: (slave veth833): Enslaving as a backup interface with a down link [ 2308.562326][T12610] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2308.638019][T12574] bond167: (slave veth609): Enslaving as an active interface with an up link 00:15:28 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x7a00000000000000, 0x0) [ 2308.700086][T12614] bond169 (unregistering): (slave veth833): Releasing backup interface 00:15:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0xf, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:28 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0xeffdffffffffffff, 0x0) 00:15:29 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0xffffff7f00000000, 0x0) [ 2309.043933][T12614] bond169 (unregistering): Released all slaves 00:15:29 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0xfffffffffffffdef, 0x0) [ 2309.128604][T12689] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2309.309106][T12692] bond168: (slave veth611): Enslaving as an active interface with an up link [ 2309.332482][T12564] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2309.402535][T12689] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xfffffffe, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='\n', 0x1}, {&(0x7f00000001c0)="fdb2312f1f75573afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) 00:15:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x4, 0x4, 0x400, 0x101, 0x18, "65c49237e58d53bd5fb1692d8e92b12c0bd025"}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000680)={0x5, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x1, 0x9, 0x6, 0x8001, 0x1, 0x1ff}, {0xa, 0x5, 0x1, 0x2, 0x3, 0x1ac3, 0x8}, {0xd, 0x7, 0x1, 0x400000, 0x1, 0x2ac3, 0x26b5}]}) 00:15:29 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) pread64(r0, 0x0, 0xfffffe89, 0x5a7) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000040)={0x6, 0x5, 0x3, 0x1, 'syz1\x00', 0x101}) 00:15:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x18, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:29 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x2) 00:15:29 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = accept4$bt_l2cap(r1, 0x0, &(0x7f0000000080), 0x800) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f00000000c0)) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x8000) pread64(r0, 0x0, 0xfffffe89, 0x5a7) 00:15:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='\r', 0x1}, {&(0x7f00000001c0)="fdb2312f1f75573afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) [ 2309.587644][T12803] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2309.698215][T12843] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:29 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x3) 00:15:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x4, 0x4, 0x400, 0x101, 0x18, "65c49237e58d53bd5fb1692d8e92b12c0bd025"}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000680)={0x5, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x1, 0x9, 0x6, 0x8001, 0x1, 0x1ff}, {0xa, 0x5, 0x1, 0x2, 0x3, 0x1ac3, 0x8}, {0xd, 0x7, 0x1, 0x400000, 0x1, 0x2ac3, 0x26b5}]}) 00:15:29 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) pread64(r0, 0x0, 0xfffffe89, 0x5a7) [ 2309.937604][T12832] bond169 (unregistering): Released all slaves 00:15:30 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x4) [ 2310.043286][T12848] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2310.104563][T12803] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:15:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xffffffff, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:30 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="9b", 0x1}, {&(0x7f00000001c0)="fdb2312f1f75573afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) 00:15:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x4, 0x4, 0x400, 0x101, 0x18, "65c49237e58d53bd5fb1692d8e92b12c0bd025"}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000680)={0x5, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x1, 0x9, 0x6, 0x8001, 0x1, 0x1ff}, {0xa, 0x5, 0x1, 0x2, 0x3, 0x1ac3, 0x8}, {0xd, 0x7, 0x1, 0x400000, 0x1, 0x2ac3, 0x26b5}]}) 00:15:30 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000200)=""/254, 0xfe}, {&(0x7f0000000300)=""/240, 0xf0}], 0x3, 0x4) pread64(r0, 0x0, 0xfffffe89, 0x5a7) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) ioctl$HIDIOCAPPLICATION(r3, 0x4802, 0x200) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @local}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000009b37cf7482bdc9f711b9ad53f78896cbad9caa4c54c02da0415dc8f621b6fa880cf159c29ae323008fa85608c2d800d403ed854c25f10a5227b485f8b01b9a821a190268f7139f7b003b7de31d075484bc57ba1f833bd89ca09615d890a4f2c998269b0b4124bfc3b7104e022b965a495c976e48e9b804d0284332418d88bcc5cb765afc6a8205274d9a95b8612423d8d4980568c15b76e5545d22887d73602f1ca2a5fea0d09024f3d12181c0eb3400ab2c50fb8126a0c2e8c6ae324f58ffe2e33a13d996f403abd08a124dbb5bbb91", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7a, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b005) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={r4, 0xffff10f9}, &(0x7f0000000080)=0x8) 00:15:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x25, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:30 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x5) [ 2310.291721][T12940] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2310.386338][T12944] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:15:30 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x6) 00:15:30 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) pread64(r0, 0x0, 0xfffffe89, 0x5a7) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000040), 0x4) [ 2310.501483][T12946] bond170: (slave veth613): Enslaving as an active interface with an up link 00:15:30 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x7) 00:15:30 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0xa) 00:15:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x4, 0x4, 0x400, 0x101, 0x18, "65c49237e58d53bd5fb1692d8e92b12c0bd025"}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000680)={0x5, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x1, 0x9, 0x6, 0x8001, 0x1, 0x1ff}, {0xa, 0x5, 0x1, 0x2, 0x3, 0x1ac3, 0x8}, {0xd, 0x7, 0x1, 0x400000, 0x1, 0x2ac3, 0x26b5}]}) [ 2310.641441][T12975] bond169: (slave veth835): Enslaving as a backup interface with a down link 00:15:30 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="ff", 0x1}, {&(0x7f00000001c0)="fdb2312f1f75573afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) [ 2310.691094][T12944] bond169 (unregistering): (slave veth835): Releasing backup interface [ 2310.977607][T12944] bond169 (unregistering): Released all slaves [ 2311.043267][T12946] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2311.105254][T12975] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:15:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:31 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x10) 00:15:31 executing program 4 (fault-call:8 fault-nth:0): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:15:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x5b, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:31 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="ff", 0x1}, {&(0x7f00000001c0)="fdb2312f1f75573afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) 00:15:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x4, 0x4, 0x400, 0x101, 0x18, "65c49237e58d53bd5fb1692d8e92b12c0bd025"}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000680)={0x5, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x1, 0x9, 0x6, 0x8001, 0x1, 0x1ff}, {0xa, 0x5, 0x1, 0x2, 0x3, 0x1ac3, 0x8}, {0xd, 0x7, 0x1, 0x400000, 0x1, 0x2ac3, 0x26b5}]}) 00:15:31 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x48) [ 2311.346804][T13107] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:31 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x4c) [ 2311.424871][T13111] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2311.444241][T13108] FAULT_INJECTION: forcing a failure. [ 2311.444241][T13108] name failslab, interval 1, probability 0, space 0, times 0 [ 2311.541449][T13115] bond171: (slave veth615): Enslaving as an active interface with an up link [ 2311.545419][T13108] CPU: 1 PID: 13108 Comm: syz-executor.4 Not tainted 5.8.0-rc6-next-20200723-syzkaller #0 [ 2311.556343][T13107] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2311.560707][T13108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 00:15:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x73, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:31 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x68) [ 2311.582336][T13108] Call Trace: [ 2311.582364][T13108] dump_stack+0x18f/0x20d [ 2311.582388][T13108] should_fail.cold+0x5/0x14 00:15:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x4, 0x4, 0x400, 0x101, 0x18, "65c49237e58d53bd5fb1692d8e92b12c0bd025"}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000680)={0x5, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x1, 0x9, 0x6, 0x8001, 0x1, 0x1ff}, {0xa, 0x5, 0x1, 0x2, 0x3, 0x1ac3, 0x8}, {0xd, 0x7, 0x1, 0x400000, 0x1, 0x2ac3, 0x26b5}]}) 00:15:31 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x6c) [ 2311.582413][T13108] ? tomoyo_realpath_from_path+0xc3/0x620 [ 2311.582431][T13108] should_failslab+0x5/0xf [ 2311.582448][T13108] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 2311.582466][T13108] __kmalloc+0x6f/0x320 [ 2311.582491][T13108] tomoyo_realpath_from_path+0xc3/0x620 [ 2311.582510][T13108] ? tomoyo_profile+0x42/0x50 [ 2311.582531][T13108] tomoyo_path_number_perm+0x1cb/0x4d0 [ 2311.582549][T13108] ? tomoyo_path_number_perm+0x183/0x4d0 [ 2311.582569][T13108] ? tomoyo_execute_permission+0x470/0x470 [ 2311.582584][T13108] ? delayed_put_pid+0x30/0x30 [ 2311.582614][T13108] ? __lockdep_free_key_range+0x110/0x110 [ 2311.582652][T13108] ? __mutex_unlock_slowpath+0xe2/0x610 [ 2311.582680][T13108] ? __fget_files+0x294/0x400 [ 2311.582706][T13108] security_file_ioctl+0x50/0xb0 [ 2311.582726][T13108] __x64_sys_ioctl+0xb3/0x200 [ 2311.582745][T13108] do_syscall_64+0x60/0xe0 [ 2311.582764][T13108] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2311.582778][T13108] RIP: 0033:0x45c1f9 [ 2311.582785][T13108] Code: Bad RIP value. [ 2311.582794][T13108] RSP: 002b:00007f8c11097c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2311.582813][T13108] RAX: ffffffffffffffda RBX: 00000000000116c0 RCX: 000000000045c1f9 [ 2311.582824][T13108] RDX: 0000000020000280 RSI: 0000000000004c02 RDI: 0000000000000004 [ 2311.582833][T13108] RBP: 00007f8c11097ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2311.582843][T13108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2311.582854][T13108] R13: 00007ffee72d5adf R14: 00007f8c110989c0 R15: 000000000078bf0c [ 2311.680430][T13128] bond169: (slave veth837): Enslaving as a backup interface with a down link 00:15:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x2, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:32 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x74) 00:15:32 executing program 4 (fault-call:8 fault-nth:1): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:15:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x4, 0x4, 0x400, 0x101, 0x18, "65c49237e58d53bd5fb1692d8e92b12c0bd025"}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000680)={0x5, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x1, 0x9, 0x6, 0x8001, 0x1, 0x1ff}, {0xa, 0x5, 0x1, 0x2, 0x3, 0x1ac3, 0x8}, {0xd, 0x7, 0x1, 0x400000, 0x1, 0x2ac3, 0x26b5}]}) [ 2311.686602][T13156] bond169 (unregistering): (slave veth837): Releasing backup interface [ 2311.820279][T13108] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2311.868605][T13108] loop0: [CUMANA/ADFS] p1 [ADFS] p1 [ 2311.868957][T13108] loop0: p1 size 2881897595 extends beyond EOD, truncated [ 2312.111906][T13156] bond169 (unregistering): Released all slaves [ 2312.180412][T13205] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2312.332067][T13210] bond172: (slave veth617): Enslaving as an active interface with an up link [ 2312.332162][T13111] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2312.393542][T13210] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2312.407933][T13214] bond172: (slave veth619): Enslaving as an active interface with an up link [ 2312.587616][T13316] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2312.605738][T13311] FAULT_INJECTION: forcing a failure. [ 2312.605738][T13311] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2312.605770][T13311] CPU: 0 PID: 13311 Comm: syz-executor.4 Not tainted 5.8.0-rc6-next-20200723-syzkaller #0 [ 2312.605783][T13311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2312.605793][T13311] Call Trace: [ 2312.605819][T13311] dump_stack+0x18f/0x20d [ 2312.605849][T13311] should_fail.cold+0x5/0x14 [ 2312.605879][T13311] ? mark_lock+0xbc/0x1710 [ 2312.605908][T13311] __alloc_pages_nodemask+0x177/0x720 [ 2312.605932][T13311] ? __lock_acquire+0xbcc/0x5650 [ 2312.605953][T13311] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 2312.606005][T13311] cache_grow_begin+0x71/0x430 [ 2312.606032][T13311] cache_alloc_refill+0x27b/0x340 [ 2312.606052][T13311] ? lockdep_hardirqs_off+0x6a/0xb0 [ 2312.606082][T13311] ? tomoyo_realpath_from_path+0xc3/0x620 [ 2312.606097][T13311] __kmalloc+0x2f5/0x320 [ 2312.606132][T13311] tomoyo_realpath_from_path+0xc3/0x620 [ 2312.606156][T13311] ? tomoyo_profile+0x42/0x50 [ 2312.606185][T13311] tomoyo_path_number_perm+0x1cb/0x4d0 [ 2312.606203][T13311] ? tomoyo_path_number_perm+0x183/0x4d0 [ 2312.606229][T13311] ? tomoyo_execute_permission+0x470/0x470 [ 2312.606255][T13311] ? perf_trace_lock+0x2e2/0x4a0 [ 2312.606291][T13311] ? __lockdep_free_key_range+0x110/0x110 [ 2312.606353][T13311] ? __mutex_unlock_slowpath+0xe2/0x610 [ 2312.606400][T13311] ? __fget_files+0x294/0x400 [ 2312.606439][T13311] security_file_ioctl+0x50/0xb0 [ 2312.606471][T13311] __x64_sys_ioctl+0xb3/0x200 [ 2312.606500][T13311] do_syscall_64+0x60/0xe0 [ 2312.606524][T13311] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2312.606543][T13311] RIP: 0033:0x45c1f9 [ 2312.606552][T13311] Code: Bad RIP value. [ 2312.606563][T13311] RSP: 002b:00007f8c11097c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2312.606588][T13311] RAX: ffffffffffffffda RBX: 00000000000116c0 RCX: 000000000045c1f9 [ 2312.606601][T13311] RDX: 0000000020000280 RSI: 0000000000004c02 RDI: 0000000000000004 [ 2312.606614][T13311] RBP: 00007f8c11097ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2312.606628][T13311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2312.606641][T13311] R13: 00007ffee72d5adf R14: 00007f8c110989c0 R15: 000000000078bf0c [ 2312.646210][T13311] loop0: [CUMANA/ADFS] p1 [ADFS] p1 [ 2312.657162][T13311] loop0: p1 size 2881897595 extends beyond EOD, truncated [ 2312.829113][T13322] bond169: (slave veth839): Enslaving as a backup interface with a down link [ 2312.834841][T13345] bond169 (unregistering): (slave veth839): Releasing backup interface [ 2313.067282][T13345] bond169 (unregistering): Released all slaves 00:15:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x2}, {&(0x7f00000001c0)="fdb2312f1f75573afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) 00:15:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x7012, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:33 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x7a) 00:15:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x4, 0x4, 0x400, 0x101, 0x18, "65c49237e58d53bd5fb1692d8e92b12c0bd025"}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000680)={0x5, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x1, 0x9, 0x6, 0x8001, 0x1, 0x1ff}, {0xa, 0x5, 0x1, 0x2, 0x3, 0x1ac3, 0x8}, {0xd, 0x7, 0x1, 0x400000, 0x1, 0x2ac3, 0x26b5}]}) 00:15:33 executing program 4 (fault-call:8 fault-nth:2): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) [ 2313.342905][T13316] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:15:33 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x300) [ 2313.463771][T13405] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2313.515199][T13408] FAULT_INJECTION: forcing a failure. [ 2313.515199][T13408] name failslab, interval 1, probability 0, space 0, times 0 00:15:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x5}, {&(0x7f00000001c0)="fdb2312f1f75573afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) [ 2313.570283][T13408] CPU: 1 PID: 13408 Comm: syz-executor.4 Not tainted 5.8.0-rc6-next-20200723-syzkaller #0 [ 2313.580229][T13408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2313.590314][T13408] Call Trace: [ 2313.593630][T13408] dump_stack+0x18f/0x20d [ 2313.597994][T13408] should_fail.cold+0x5/0x14 [ 2313.602633][T13408] should_failslab+0x5/0xf [ 2313.607076][T13408] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 2313.613177][T13408] kmem_cache_alloc_trace+0x49/0x2c0 [ 2313.615875][T13417] bond173: (slave veth621): Enslaving as an active interface with an up link [ 2313.618512][T13408] blk_add_partitions+0x107/0xe10 [ 2313.618536][T13408] ? do_raw_spin_unlock+0x171/0x230 [ 2313.618565][T13408] bdev_disk_changed+0x1ea/0x370 [ 2313.618594][T13408] loop_reread_partitions+0x29/0x50 [ 2313.650042][T13408] loop_set_status+0x6cc/0x1040 [ 2313.656169][T13408] loop_set_status_old+0x1bb/0x250 [ 2313.659681][T13405] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2313.662284][T13408] ? loop_set_status_compat+0x100/0x100 [ 2313.662302][T13408] ? kernel_text_address+0xbd/0xf0 [ 2313.662337][T13408] ? tomoyo_path_number_perm+0x415/0x4d0 [ 2313.662353][T13408] ? stack_trace_save+0x8c/0xc0 [ 2313.662369][T13408] ? stack_trace_consume_entry+0x160/0x160 [ 2313.662413][T13408] ? perf_trace_lock+0x2e2/0x4a0 [ 2313.662449][T13408] lo_ioctl+0x958/0x16b0 [ 2313.711307][T13408] ? __lockdep_free_key_range+0x110/0x110 [ 2313.717076][T13408] ? loop_configure+0x1330/0x1330 [ 2313.722130][T13408] ? lockdep_hardirqs_off+0x6a/0xb0 [ 2313.727362][T13408] ? find_held_lock+0x2d/0x110 [ 2313.733023][T13408] ? tomoyo_path_number_perm+0x1fa/0x4d0 [ 2313.738702][T13408] ? lock_downgrade+0x830/0x830 [ 2313.744627][T13408] ? trace_hardirqs_on+0x5f/0x220 [ 2313.749687][T13408] ? lockdep_hardirqs_on+0x76/0xf0 [ 2313.754900][T13408] ? tomoyo_path_number_perm+0x244/0x4d0 [ 2313.762573][T13408] ? tomoyo_execute_permission+0x470/0x470 [ 2313.769329][T13408] ? perf_trace_lock+0x2e2/0x4a0 [ 2313.774652][T13408] ? __lockdep_free_key_range+0x110/0x110 [ 2313.781269][T13408] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 2313.787195][T13408] ? blkdev_common_ioctl+0x117/0x1760 [ 2313.792588][T13408] ? blk_ioctl_discard+0x310/0x310 [ 2313.797751][T13408] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 2313.803671][T13408] ? do_vfs_ioctl+0x27d/0x1090 [ 2313.808469][T13408] ? generic_block_fiemap+0x60/0x60 [ 2313.814461][T13408] ? __mutex_unlock_slowpath+0xe2/0x610 [ 2313.820992][T13408] ? loop_configure+0x1330/0x1330 [ 2313.826051][T13408] blkdev_ioctl+0x28c/0x700 [ 2313.830589][T13408] ? blkdev_common_ioctl+0x1760/0x1760 [ 2313.836088][T13408] ? __fget_files+0x294/0x400 [ 2313.840801][T13408] block_ioctl+0xf9/0x140 [ 2313.845161][T13408] ? blkdev_fallocate+0x3f0/0x3f0 [ 2313.852042][T13408] __x64_sys_ioctl+0x193/0x200 [ 2313.859232][T13408] do_syscall_64+0x60/0xe0 [ 2313.863688][T13408] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2313.869595][T13408] RIP: 0033:0x45c1f9 [ 2313.873494][T13408] Code: Bad RIP value. [ 2313.877796][T13408] RSP: 002b:00007f8c11097c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2313.886238][T13408] RAX: ffffffffffffffda RBX: 00000000000116c0 RCX: 000000000045c1f9 [ 2313.894231][T13408] RDX: 0000000020000280 RSI: 0000000000004c02 RDI: 0000000000000004 [ 2313.902225][T13408] RBP: 00007f8c11097ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2313.910408][T13408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 00:15:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x3, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) [ 2313.918401][T13408] R13: 00007ffee72d5adf R14: 00007f8c110989c0 R15: 000000000078bf0c 00:15:34 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x500) 00:15:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0xf812, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x4, 0x4, 0x400, 0x101, 0x18, "65c49237e58d53bd5fb1692d8e92b12c0bd025"}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000680)={0x5, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x1, 0x9, 0x6, 0x8001, 0x1, 0x1ff}, {0xa, 0x5, 0x1, 0x2, 0x3, 0x1ac3, 0x8}, {0xd, 0x7, 0x1, 0x400000, 0x1, 0x2ac3, 0x26b5}]}) 00:15:34 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x6}, {&(0x7f00000001c0)="fdb2312f1f75573afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) 00:15:34 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x600) [ 2314.065746][T13475] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:15:34 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x700) 00:15:34 executing program 4 (fault-call:8 fault-nth:3): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:15:34 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0xa00) [ 2314.333715][T13497] bond169: (slave veth841): Enslaving as a backup interface with a down link [ 2314.389376][T13475] bond169 (unregistering): (slave veth841): Releasing backup interface 00:15:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x4, 0x4, 0x400, 0x101, 0x18, "65c49237e58d53bd5fb1692d8e92b12c0bd025"}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000680)={0x5, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x1, 0x9, 0x6, 0x8001, 0x1, 0x1ff}, {0xa, 0x5, 0x1, 0x2, 0x3, 0x1ac3, 0x8}, {0xd, 0x7, 0x1, 0x400000, 0x1, 0x2ac3, 0x26b5}]}) 00:15:34 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x3f00) [ 2314.527008][T13535] FAULT_INJECTION: forcing a failure. [ 2314.527008][T13535] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2314.540265][T13535] CPU: 1 PID: 13535 Comm: syz-executor.4 Not tainted 5.8.0-rc6-next-20200723-syzkaller #0 [ 2314.555657][T13535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2314.567674][T13535] Call Trace: [ 2314.570993][T13535] dump_stack+0x18f/0x20d [ 2314.575359][T13535] should_fail.cold+0x5/0x14 [ 2314.579980][T13535] __alloc_pages_nodemask+0x177/0x720 [ 2314.585381][T13535] ? lock_acquire+0x1f1/0xad0 [ 2314.590081][T13535] ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780 [ 2314.596881][T13535] ? fs_reclaim_release+0x94/0xf0 [ 2314.601953][T13535] cache_grow_begin+0x71/0x430 [ 2314.606751][T13535] cache_alloc_refill+0x27b/0x340 [ 2314.611796][T13535] ? lockdep_hardirqs_off+0x6a/0xb0 [ 2314.617020][T13535] kmem_cache_alloc_trace+0x2a5/0x2c0 [ 2314.622425][T13535] blk_add_partitions+0x107/0xe10 [ 2314.627482][T13535] ? do_raw_spin_unlock+0x171/0x230 [ 2314.633237][T13535] bdev_disk_changed+0x1ea/0x370 [ 2314.638213][T13535] loop_reread_partitions+0x29/0x50 [ 2314.643449][T13535] loop_set_status+0x6cc/0x1040 [ 2314.650169][T13535] loop_set_status_old+0x1bb/0x250 [ 2314.655314][T13535] ? loop_set_status_compat+0x100/0x100 [ 2314.660897][T13535] ? kernel_text_address+0xbd/0xf0 [ 2314.666043][T13535] ? tomoyo_path_number_perm+0x415/0x4d0 [ 2314.671693][T13535] ? stack_trace_save+0x8c/0xc0 [ 2314.676598][T13535] ? stack_trace_consume_entry+0x160/0x160 [ 2314.683065][T13535] ? lock_acquire+0x1f1/0xad0 [ 2314.687809][T13535] ? perf_trace_lock+0xeb/0x4a0 [ 2314.692689][T13535] lo_ioctl+0x958/0x16b0 [ 2314.696957][T13535] ? __lockdep_free_key_range+0x110/0x110 [ 2314.702705][T13535] ? loop_configure+0x1330/0x1330 [ 2314.707778][T13535] ? lockdep_hardirqs_off+0x6a/0xb0 [ 2314.712993][T13535] ? find_held_lock+0x2d/0x110 [ 2314.718614][T13535] ? tomoyo_path_number_perm+0x1fa/0x4d0 [ 2314.724284][T13535] ? lock_downgrade+0x830/0x830 [ 2314.729167][T13535] ? trace_hardirqs_on+0x5f/0x220 [ 2314.734209][T13535] ? lockdep_hardirqs_on+0x76/0xf0 [ 2314.739364][T13535] ? tomoyo_path_number_perm+0x244/0x4d0 [ 2314.745022][T13535] ? tomoyo_execute_permission+0x470/0x470 [ 2314.750845][T13535] ? delayed_put_pid+0x30/0x30 [ 2314.755638][T13535] ? __lockdep_free_key_range+0x110/0x110 [ 2314.761379][T13535] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 2314.767321][T13535] ? blkdev_common_ioctl+0x117/0x1760 [ 2314.772713][T13535] ? blk_ioctl_discard+0x310/0x310 [ 2314.777842][T13535] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 2314.784802][T13535] ? do_vfs_ioctl+0x27d/0x1090 [ 2314.790221][T13535] ? generic_block_fiemap+0x60/0x60 [ 2314.795437][T13535] ? __mutex_unlock_slowpath+0xe2/0x610 [ 2314.801267][T13535] ? loop_configure+0x1330/0x1330 [ 2314.807519][T13535] blkdev_ioctl+0x28c/0x700 [ 2314.812061][T13535] ? blkdev_common_ioctl+0x1760/0x1760 [ 2314.817620][T13535] ? __fget_files+0x294/0x400 [ 2314.822611][T13535] block_ioctl+0xf9/0x140 [ 2314.826978][T13535] ? blkdev_fallocate+0x3f0/0x3f0 [ 2314.832307][T13535] __x64_sys_ioctl+0x193/0x200 [ 2314.837358][T13535] do_syscall_64+0x60/0xe0 [ 2314.841840][T13535] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2314.847781][T13535] RIP: 0033:0x45c1f9 [ 2314.852585][T13535] Code: Bad RIP value. [ 2314.856683][T13535] RSP: 002b:00007f8c11097c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2314.866116][T13535] RAX: ffffffffffffffda RBX: 00000000000116c0 RCX: 000000000045c1f9 00:15:34 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x4800) [ 2314.874137][T13535] RDX: 0000000020000280 RSI: 0000000000004c02 RDI: 0000000000000004 [ 2314.883167][T13535] RBP: 00007f8c11097ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2314.892228][T13535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 2314.901281][T13535] R13: 00007ffee72d5adf R14: 00007f8c110989c0 R15: 000000000078bf0c [ 2314.975803][T13535] loop0: [CUMANA/ADFS] p1 [ADFS] p1 [ 2314.991136][T13475] bond169 (unregistering): Released all slaves [ 2315.002079][T13535] loop0: p1 size 2881897595 extends beyond EOD, truncated [ 2315.119306][T13523] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2315.295721][T13529] bond174: (slave veth623): Enslaving as an active interface with an up link [ 2315.326125][T13497] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2315.442257][T13568] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2315.510875][T13588] bond174: (slave veth625): Enslaving as an active interface with an up link 00:15:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x4, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:35 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x4c00) 00:15:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x410, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:35 executing program 4 (fault-call:8 fault-nth:4): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:15:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x4, 0x4, 0x400, 0x101, 0x18, "65c49237e58d53bd5fb1692d8e92b12c0bd025"}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000680)={0x5, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x1, 0x9, 0x6, 0x8001, 0x1, 0x1ff}, {0xa, 0x5, 0x1, 0x2, 0x3, 0x1ac3, 0x8}, {0xd, 0x7, 0x1, 0x400000, 0x1, 0x2ac3, 0x26b5}]}) 00:15:35 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x7}, {&(0x7f00000001c0)="fdb2312f1f75573afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) [ 2315.744669][T13652] FAULT_INJECTION: forcing a failure. [ 2315.744669][T13652] name failslab, interval 1, probability 0, space 0, times 0 [ 2315.780331][T13664] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2315.806532][T13652] CPU: 0 PID: 13652 Comm: syz-executor.4 Not tainted 5.8.0-rc6-next-20200723-syzkaller #0 [ 2315.816482][T13652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2315.827389][T13652] Call Trace: [ 2315.830701][T13652] dump_stack+0x18f/0x20d [ 2315.835037][T13652] should_fail.cold+0x5/0x14 [ 2315.839637][T13652] should_failslab+0x5/0xf [ 2315.844069][T13652] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 2315.850160][T13652] kmem_cache_alloc_node_trace+0x5d/0x400 [ 2315.856895][T13652] __get_vm_area_node+0x126/0x3e0 [ 2315.861964][T13652] ? blk_add_partitions+0x1d7/0xe10 [ 2315.867200][T13652] vzalloc+0xf2/0x1a0 [ 2315.871218][T13652] ? blk_add_partitions+0x1d7/0xe10 [ 2315.877441][T13652] blk_add_partitions+0x1d7/0xe10 [ 2315.882652][T13652] bdev_disk_changed+0x1ea/0x370 [ 2315.887855][T13652] loop_reread_partitions+0x29/0x50 [ 2315.893228][T13652] loop_set_status+0x6cc/0x1040 [ 2315.898141][T13652] loop_set_status_old+0x1bb/0x250 [ 2315.903298][T13652] ? loop_set_status_compat+0x100/0x100 [ 2315.908909][T13652] ? kernel_text_address+0xbd/0xf0 [ 2315.912249][T13663] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2315.914096][T13652] ? tomoyo_path_number_perm+0x415/0x4d0 [ 2315.914116][T13652] ? stack_trace_save+0x8c/0xc0 [ 2315.914135][T13652] ? stack_trace_consume_entry+0x160/0x160 [ 2315.914201][T13652] ? perf_trace_lock+0x2e2/0x4a0 [ 2315.944714][T13652] lo_ioctl+0x958/0x16b0 [ 2315.954056][T13652] ? __lockdep_free_key_range+0x110/0x110 [ 2315.960114][T13652] ? loop_configure+0x1330/0x1330 [ 2315.966167][T13652] ? lockdep_hardirqs_off+0x6a/0xb0 [ 2315.972067][T13652] ? find_held_lock+0x2d/0x110 [ 2315.976880][T13652] ? tomoyo_path_number_perm+0x1fa/0x4d0 [ 2315.983012][T13652] ? lock_downgrade+0x830/0x830 [ 2315.988527][T13652] ? trace_hardirqs_on+0x5f/0x220 [ 2315.994512][T13652] ? lockdep_hardirqs_on+0x76/0xf0 [ 2316.000652][T13652] ? tomoyo_path_number_perm+0x244/0x4d0 [ 2316.006872][T13652] ? tomoyo_execute_permission+0x470/0x470 [ 2316.013246][T13652] ? perf_trace_lock+0x2e2/0x4a0 [ 2316.019068][T13652] ? __lockdep_free_key_range+0x110/0x110 [ 2316.025531][T13652] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 2316.031655][T13652] ? blkdev_common_ioctl+0x117/0x1760 [ 2316.037825][T13652] ? blk_ioctl_discard+0x310/0x310 [ 2316.043652][T13652] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 2316.050040][T13652] ? do_vfs_ioctl+0x27d/0x1090 [ 2316.055808][T13652] ? generic_block_fiemap+0x60/0x60 [ 2316.061864][T13652] ? __mutex_unlock_slowpath+0xe2/0x610 [ 2316.067907][T13652] ? loop_configure+0x1330/0x1330 [ 2316.073945][T13652] blkdev_ioctl+0x28c/0x700 [ 2316.079499][T13652] ? blkdev_common_ioctl+0x1760/0x1760 [ 2316.085672][T13652] ? __fget_files+0x294/0x400 [ 2316.091337][T13652] block_ioctl+0xf9/0x140 [ 2316.095700][T13652] ? blkdev_fallocate+0x3f0/0x3f0 [ 2316.101619][T13652] __x64_sys_ioctl+0x193/0x200 [ 2316.107290][T13652] do_syscall_64+0x60/0xe0 [ 2316.111748][T13652] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2316.117931][T13652] RIP: 0033:0x45c1f9 [ 2316.122120][T13652] Code: Bad RIP value. [ 2316.126378][T13652] RSP: 002b:00007f8c11097c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2316.134851][T13652] RAX: ffffffffffffffda RBX: 00000000000116c0 RCX: 000000000045c1f9 [ 2316.143082][T13652] RDX: 0000000020000280 RSI: 0000000000004c02 RDI: 0000000000000004 00:15:36 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x6800) 00:15:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x4, 0x4, 0x400, 0x101, 0x18, "65c49237e58d53bd5fb1692d8e92b12c0bd025"}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000680)={0x5, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x1, 0x9, 0x6, 0x8001, 0x1, 0x1ff}, {0xa, 0x5, 0x1, 0x2, 0x3, 0x1ac3, 0x8}, {0xd, 0x7, 0x1, 0x400000, 0x1, 0x2ac3, 0x26b5}]}) [ 2316.151088][T13652] RBP: 00007f8c11097ca0 R08: 0000000000000000 R09: 0000000000000000 [ 2316.159093][T13652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 2316.167395][T13652] R13: 00007ffee72d5adf R14: 00007f8c110989c0 R15: 000000000078bf0c 00:15:36 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x46}, {&(0x7f00000001c0)="fdb2312f1f75573afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) [ 2316.382950][T13666] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2316.419052][T13701] bond169 (unregistering): Released all slaves [ 2316.440858][T13652] syz-executor.4: vmalloc: allocation failure: 32768 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2316.464763][T13652] CPU: 0 PID: 13652 Comm: syz-executor.4 Not tainted 5.8.0-rc6-next-20200723-syzkaller #0 [ 2316.474720][T13652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2316.484800][T13652] Call Trace: [ 2316.489085][T13652] dump_stack+0x18f/0x20d [ 2316.493460][T13652] warn_alloc.cold+0x87/0x17a [ 2316.498168][T13652] ? zone_watermark_ok_safe+0x260/0x260 [ 2316.503753][T13652] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 2316.509338][T13652] ? __get_vm_area_node+0x309/0x3e0 [ 2316.514580][T13652] ? blk_add_partitions+0x1d7/0xe10 [ 2316.519810][T13652] vzalloc+0x163/0x1a0 [ 2316.523909][T13652] blk_add_partitions+0x1d7/0xe10 [ 2316.529987][T13652] bdev_disk_changed+0x1ea/0x370 [ 2316.535765][T13652] loop_reread_partitions+0x29/0x50 [ 2316.541850][T13652] loop_set_status+0x6cc/0x1040 [ 2316.547595][T13652] loop_set_status_old+0x1bb/0x250 [ 2316.553640][T13652] ? loop_set_status_compat+0x100/0x100 [ 2316.559652][T13652] ? kernel_text_address+0xbd/0xf0 [ 2316.565796][T13652] ? tomoyo_path_number_perm+0x415/0x4d0 [ 2316.571715][T13652] ? stack_trace_save+0x8c/0xc0 [ 2316.576590][T13652] ? stack_trace_consume_entry+0x160/0x160 [ 2316.584274][T13652] ? perf_trace_lock+0x2e2/0x4a0 [ 2316.590293][T13652] lo_ioctl+0x958/0x16b0 [ 2316.594568][T13652] ? __lockdep_free_key_range+0x110/0x110 [ 2316.600443][T13652] ? loop_configure+0x1330/0x1330 [ 2316.606477][T13652] ? lockdep_hardirqs_off+0x6a/0xb0 [ 2316.612303][T13652] ? find_held_lock+0x2d/0x110 [ 2316.618184][T13652] ? tomoyo_path_number_perm+0x1fa/0x4d0 [ 2316.624197][T13652] ? lock_downgrade+0x830/0x830 [ 2316.629073][T13652] ? trace_hardirqs_on+0x5f/0x220 [ 2316.634124][T13652] ? lockdep_hardirqs_on+0x76/0xf0 [ 2316.640819][T13652] ? tomoyo_path_number_perm+0x244/0x4d0 [ 2316.646496][T13652] ? tomoyo_execute_permission+0x470/0x470 [ 2316.652392][T13652] ? perf_trace_lock+0x2e2/0x4a0 [ 2316.657389][T13652] ? __lockdep_free_key_range+0x110/0x110 [ 2316.663907][T13652] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 2316.670232][T13652] ? blkdev_common_ioctl+0x117/0x1760 [ 2316.676107][T13652] ? blk_ioctl_discard+0x310/0x310 [ 2316.681249][T13652] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 2316.687170][T13652] ? do_vfs_ioctl+0x27d/0x1090 [ 2316.691956][T13652] ? generic_block_fiemap+0x60/0x60 [ 2316.697183][T13652] ? __mutex_unlock_slowpath+0xe2/0x610 [ 2316.702766][T13652] ? loop_configure+0x1330/0x1330 [ 2316.702784][T13652] blkdev_ioctl+0x28c/0x700 [ 2316.702803][T13652] ? blkdev_common_ioctl+0x1760/0x1760 [ 2316.702823][T13652] ? __fget_files+0x294/0x400 [ 2316.702848][T13652] block_ioctl+0xf9/0x140 [ 2316.702866][T13652] ? blkdev_fallocate+0x3f0/0x3f0 [ 2316.702886][T13652] __x64_sys_ioctl+0x193/0x200 [ 2316.702906][T13652] do_syscall_64+0x60/0xe0 [ 2316.702927][T13652] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2316.702942][T13652] RIP: 0033:0x45c1f9 [ 2316.702949][T13652] Code: Bad RIP value. [ 2316.702958][T13652] RSP: 002b:00007f8c11097c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2316.702978][T13652] RAX: ffffffffffffffda RBX: 00000000000116c0 RCX: 000000000045c1f9 [ 2316.702989][T13652] RDX: 0000000020000280 RSI: 0000000000004c02 RDI: 0000000000000004 [ 2316.703009][T13652] RBP: 00007f8c11097ca0 R08: 0000000000000000 R09: 0000000000000000 00:15:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x412, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:36 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x6c00) [ 2316.788569][T13652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 00:15:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x4, 0x4, 0x400, 0x101, 0x18, "65c49237e58d53bd5fb1692d8e92b12c0bd025"}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000680)={0x5, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x1, 0x9, 0x6, 0x8001, 0x1, 0x1ff}, {0xa, 0x5, 0x1, 0x2, 0x3, 0x1ac3, 0x8}, {0xd, 0x7, 0x1, 0x400000, 0x1, 0x2ac3, 0x26b5}]}) [ 2316.788581][T13652] R13: 00007ffee72d5adf R14: 00007f8c110989c0 R15: 000000000078bf0c 00:15:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x5, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:37 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x7400) 00:15:37 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) [ 2316.809698][T13663] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2316.848102][T13652] Mem-Info: [ 2316.848146][T13652] active_anon:168196 inactive_anon:11299 isolated_anon:0 [ 2316.848146][T13652] active_file:6486 inactive_file:68798 isolated_file:0 [ 2316.848146][T13652] unevictable:0 dirty:219 writeback:0 [ 2316.848146][T13652] slab_reclaimable:22319 slab_unreclaimable:159036 [ 2316.848146][T13652] mapped:62301 shmem:10547 pagetables:3180 bounce:0 [ 2316.848146][T13652] free:1063720 free_pcp:525 free_cma:0 [ 2316.848180][T13652] Node 0 active_anon:672784kB inactive_anon:45196kB active_file:25804kB inactive_file:275192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:249204kB dirty:872kB writeback:0kB shmem:42188kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 630784kB writeback_tmp:0kB kernel_stack:22624kB all_unreclaimable? no 00:15:37 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x7a00) 00:15:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x4, 0x4, 0x400, 0x101, 0x18, "65c49237e58d53bd5fb1692d8e92b12c0bd025"}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000680)={0x5, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x1, 0x9, 0x6, 0x8001, 0x1, 0x1ff}, {0xa, 0x5, 0x1, 0x2, 0x3, 0x1ac3, 0x8}, {0xd, 0x7, 0x1, 0x400000, 0x1, 0x2ac3, 0x26b5}]}) [ 2316.848213][T13652] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:32kB all_unreclaimable? no 00:15:37 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x2, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) [ 2316.848220][T13652] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2316.848282][T13652] lowmem_reserve[]: 0 2515 2515 2515 2515 [ 2316.848320][T13652] Node 0 DMA32 free:479212kB min:35916kB low:44892kB high:53868kB reserved_highatomic:0KB active_anon:672784kB inactive_anon:45196kB active_file:25804kB inactive_file:275192kB unevictable:0kB writepending:872kB present:3129332kB managed:2578232kB mlocked:0kB pagetables:12720kB bounce:0kB free_pcp:2100kB local_pcp:1388kB free_cma:0kB [ 2316.848362][T13652] lowmem_reserve[]: 0 0 0 0 0 [ 2316.848399][T13652] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 00:15:37 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0xeffd) [ 2316.848436][T13652] lowmem_reserve[]: 0 0 0 0 0 [ 2316.848474][T13652] Node 1 Normal free:3759760kB min:53972kB low:67464kB high:80956kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870200kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2316.848513][T13652] lowmem_reserve[]: 0 0 0 0 0 [ 2316.848631][T13652] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 2316.848814][T13652] Node 0 DMA32: 161*4kB (UME) 303*8kB (UME) 73*16kB (UE) 11*32kB (UME) 4*64kB (UE) 3*128kB (UE) 2*256kB (UE) 3*512kB (UME) 11*1024kB (UME) 1*2048kB (E) 112*4096kB (M) = 479340kB [ 2316.848975][T13652] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2316.849066][T13652] Node 1 Normal: 90*4kB (UM) 217*8kB (UME) 190*16kB (UME) 94*32kB (UME) 39*64kB (UME) 20*128kB (UM) 5*256kB (UE) 5*512kB (UE) 1*1024kB (M) 3*2048kB (UME) 912*4096kB (M) = 3759760kB [ 2316.849239][T13652] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2316.849253][T13652] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2316.849419][T13652] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 00:15:38 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0xfdef) [ 2316.849440][T13652] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2316.849567][T13652] 60318 total pagecache pages [ 2316.849585][T13652] 0 pages in swap cache [ 2316.849646][T13652] Swap cache stats: add 0, delete 0, find 0/0 [ 2316.849666][T13652] Free swap = 0kB [ 2316.849675][T13652] Total swap = 0kB [ 2316.849685][T13652] 1965979 pages RAM [ 2316.849693][T13652] 0 pages HighMem/MovableOnly [ 2316.849701][T13652] 349894 pages reserved [ 2316.849708][T13652] 0 pages cma reserved [ 2316.955732][T13788] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2317.185221][T13834] loop0: [CUMANA/ADFS] p1 [ADFS] p1 [ 2317.185621][T13834] loop0: p1 size 2881897595 extends beyond EOD, truncated [ 2317.195323][T13808] bond176: (slave veth627): Enslaving as an active interface with an up link [ 2317.195896][T13830] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2317.426808][T13839] bond169: (slave veth845): Enslaving as a backup interface with a down link [ 2317.435597][T13844] bond169 (unregistering): (slave veth845): Releasing backup interface [ 2317.835726][T13844] bond169 (unregistering): Released all slaves [ 2317.892101][T13788] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2317.923384][T13827] bond176: (slave veth629): Enslaving as an active interface with an up link [ 2317.933265][T13830] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:15:38 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x300}, {&(0x7f00000001c0)="fdb2312f1f75573afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) 00:15:38 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x10, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:15:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x418, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x4, 0x4, 0x400, 0x101, 0x18, "65c49237e58d53bd5fb1692d8e92b12c0bd025"}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000680)={0x5, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x1, 0x9, 0x6, 0x8001, 0x1, 0x1ff}, {0xa, 0x5, 0x1, 0x2, 0x3, 0x1ac3, 0x8}, {0xd, 0x7, 0x1, 0x400000, 0x1, 0x2ac3, 0x26b5}]}) 00:15:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x6, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:38 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x100000) [ 2318.387866][T13960] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000680)={0x5, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x1, 0x9, 0x6, 0x8001, 0x1, 0x1ff}, {0xa, 0x5, 0x1, 0x2, 0x3, 0x1ac3, 0x8}, {0xd, 0x7, 0x1, 0x400000, 0x1, 0x2ac3, 0x26b5}]}) 00:15:38 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x1000000) 00:15:38 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x301, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:15:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000680)={0x5, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x1, 0x9, 0x6, 0x8001, 0x1, 0x1ff}, {0xa, 0x5, 0x1, 0x2, 0x3, 0x1ac3, 0x8}, {0xd, 0x7, 0x1, 0x400000, 0x1, 0x2ac3, 0x26b5}]}) [ 2318.646829][T13965] bond177: (slave veth631): Enslaving as an active interface with an up link 00:15:38 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x2000000) 00:15:38 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x20000041}, {&(0x7f00000001c0)="fdb2312f1f75573afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) [ 2318.816189][T14017] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:15:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000680)={0x5, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x1, 0x9, 0x6, 0x8001, 0x1, 0x1ff}, {0xa, 0x5, 0x1, 0x2, 0x3, 0x1ac3, 0x8}, {0xd, 0x7, 0x1, 0x400000, 0x1, 0x2ac3, 0x26b5}]}) 00:15:38 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x3000000) [ 2318.978501][T13960] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2318.999108][T14027] bond169 (unregistering): Released all slaves 00:15:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x419, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:39 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x125d, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) [ 2319.136724][T14017] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:15:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x7, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:39 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000680)={0x5, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x1, 0x9, 0x6, 0x8001, 0x1, 0x1ff}, {0xa, 0x5, 0x1, 0x2, 0x3, 0x1ac3, 0x8}, {0xd, 0x7, 0x1, 0x400000, 0x1, 0x2ac3, 0x26b5}]}) 00:15:39 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x4000000) [ 2319.254926][T14131] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:39 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x5000000) 00:15:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000680)={0x5, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x1, 0x9, 0x6, 0x8001, 0x1, 0x1ff}, {0xa, 0x5, 0x1, 0x2, 0x3, 0x1ac3, 0x8}, {0xd, 0x7, 0x1, 0x400000, 0x1, 0x2ac3, 0x26b5}]}) [ 2319.583158][T14136] bond178: (slave veth633): Enslaving as an active interface with an up link 00:15:39 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x125e, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) [ 2319.583284][T14155] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:15:39 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x6000000) [ 2319.763253][T14146] bond178 (unregistering): (slave veth633): Releasing backup interface [ 2319.981815][T14146] bond178 (unregistering): Released all slaves [ 2320.067474][T14169] bond169: (slave veth849): Enslaving as a backup interface with a down link [ 2320.080849][T14183] bond169 (unregistering): (slave veth849): Releasing backup interface [ 2320.249818][T14183] bond169 (unregistering): Released all slaves [ 2320.297421][T14131] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:40 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x7ffff000}, {&(0x7f00000001c0)="fdb2312f1f75573afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) 00:15:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000680)={0x5, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x1, 0x9, 0x6, 0x8001, 0x1, 0x1ff}, {0xa, 0x5, 0x1, 0x2, 0x3, 0x1ac3, 0x8}, {0xd, 0x7, 0x1, 0x400000, 0x1, 0x2ac3, 0x26b5}]}) 00:15:40 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x7000000) [ 2320.432652][T14155] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:15:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x41c, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:40 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x125f, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:15:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x8, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000680)={0x5, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x1, 0x9, 0x6, 0x8001, 0x1, 0x1ff}, {0xa, 0x5, 0x1, 0x2, 0x3, 0x1ac3, 0x8}, {0xd, 0x7, 0x1, 0x400000, 0x1, 0x2ac3, 0x26b5}]}) 00:15:40 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0xa000000) [ 2320.737549][T14347] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:40 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x3f000000) 00:15:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000680)={0x5, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x1, 0x9, 0x6, 0x8001, 0x1, 0x1ff}, {0xa, 0x5, 0x1, 0x2, 0x3, 0x1ac3, 0x8}, {0xd, 0x7, 0x1, 0x400000, 0x1, 0x2ac3, 0x26b5}]}) 00:15:41 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x1260, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) [ 2320.903662][T14365] bond178: (slave veth635): Enslaving as an active interface with an up link 00:15:41 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x48000000) [ 2320.903753][T14377] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2321.143010][T14392] bond169: (slave veth851): Enslaving as a backup interface with a down link [ 2321.177906][T14398] bond169 (unregistering): (slave veth851): Releasing backup interface [ 2321.395054][T14398] bond169 (unregistering): Released all slaves [ 2321.431750][T14347] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:41 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0xffffff1f}, {&(0x7f00000001c0)="fdb2312f1f75573afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) 00:15:41 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000680)={0x5, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x1, 0x9, 0x6, 0x8001, 0x1, 0x1ff}, {0xa, 0x5, 0x1, 0x2, 0x3, 0x1ac3, 0x8}, {0xd, 0x7, 0x1, 0x400000, 0x1, 0x2ac3, 0x26b5}]}) 00:15:41 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x4c000000) [ 2321.471094][T14421] bond178: (slave veth637): Enslaving as an active interface with an up link [ 2321.489558][T14377] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:15:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:41 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x1261, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:15:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x9, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:41 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000680)={0x5, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x1, 0x9, 0x6, 0x8001, 0x1, 0x1ff}, {0xa, 0x5, 0x1, 0x2, 0x3, 0x1ac3, 0x8}, {0xd, 0x7, 0x1, 0x400000, 0x1, 0x2ac3, 0x26b5}]}) 00:15:41 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x68000000) [ 2321.689473][T14507] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:41 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x6c000000) 00:15:41 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x1262, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:15:41 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000680)={0x5, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x1, 0x9, 0x6, 0x8001, 0x1, 0x1ff}, {0xa, 0x5, 0x1, 0x2, 0x3, 0x1ac3, 0x8}, {0xd, 0x7, 0x1, 0x400000, 0x1, 0x2ac3, 0x26b5}]}) [ 2321.943037][T14523] bond179: (slave veth639): Enslaving as an active interface with an up link 00:15:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000680)={0x5, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x1, 0x9, 0x6, 0x8001, 0x1, 0x1ff}, {0xa, 0x5, 0x1, 0x2, 0x3, 0x1ac3, 0x8}, {0xd, 0x7, 0x1, 0x400000, 0x1, 0x2ac3, 0x26b5}]}) [ 2321.963144][T14539] bond179 (unregistering): (slave veth639): Releasing backup interface [ 2322.282824][T14539] bond179 (unregistering): Released all slaves [ 2322.335782][T14553] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2322.403343][T14558] bond169: (slave veth853): Enslaving as a backup interface with a down link [ 2322.423173][T14562] bond169 (unregistering): (slave veth853): Releasing backup interface [ 2322.554749][T14562] bond169 (unregistering): Released all slaves [ 2322.633496][T14507] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:42 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2082f1f75573afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) 00:15:42 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x74000000) 00:15:42 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x1263, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) [ 2322.788096][T14558] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:15:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x45b, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000680)={0x5, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x1, 0x9, 0x6, 0x8001, 0x1, 0x1ff}, {0xa, 0x5, 0x1, 0x2, 0x3, 0x1ac3, 0x8}, {0xd, 0x7, 0x1, 0x400000, 0x1, 0x2ac3, 0x26b5}]}) 00:15:42 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x7a000000) 00:15:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x48, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:42 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2092f1f75573afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) 00:15:42 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x1264, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:15:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000680)={0x5, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x1, 0x9, 0x6, 0x8001, 0x1, 0x1ff}, {0xa, 0x5, 0x1, 0x2, 0x3, 0x1ac3, 0x8}, {0xd, 0x7, 0x1, 0x400000, 0x1, 0x2ac3, 0x26b5}]}) [ 2323.033872][T14722] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:15:43 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0xeffdffff) 00:15:43 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0xfffffdef) [ 2323.159652][T14723] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000680)={0x5, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x1, 0x9, 0x6, 0x8001, 0x1, 0x1ff}, {0xa, 0x5, 0x1, 0x2, 0x3, 0x1ac3, 0x8}, {0xd, 0x7, 0x1, 0x400000, 0x1, 0x2ac3, 0x26b5}]}) 00:15:43 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x1265, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:15:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000680)={0x5, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x1, 0x9, 0x6, 0x8001, 0x1, 0x1ff}, {0xa, 0x5, 0x1, 0x2, 0x3, 0x1ac3, 0x8}, {0xd, 0x7, 0x1, 0x400000, 0x1, 0x2ac3, 0x26b5}]}) [ 2323.435879][T14740] bond169: (slave veth857): Enslaving as a backup interface with a down link [ 2323.554657][T14750] bond179: (slave veth641): Enslaving as an active interface with an up link [ 2323.581540][T14764] bond169 (unregistering): (slave veth857): Releasing backup interface [ 2323.752854][T14764] bond169 (unregistering): Released all slaves [ 2323.822475][T14770] bond179 (unregistering): (slave veth641): Releasing backup interface [ 2324.045840][T14770] bond179 (unregistering): Released all slaves [ 2324.106257][T14740] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2324.141839][T14750] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:44 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0xffffff7f) 00:15:44 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb20a2f1f75573afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) 00:15:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000680)={0x5, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x1, 0x9, 0x6, 0x8001, 0x1, 0x1ff}, {0xa, 0x5, 0x1, 0x2, 0x3, 0x1ac3, 0x8}, {0xd, 0x7, 0x1, 0x400000, 0x1, 0x2ac3, 0x26b5}]}) 00:15:44 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x1267, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:15:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x4c, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) [ 2324.366686][T14939] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:15:44 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x7ffffffff000) 00:15:44 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb20d2f1f75573afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) 00:15:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000680)={0x5, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x1, 0x9, 0x6, 0x8001, 0x1, 0x1ff}, {0xa, 0x5, 0x1, 0x2, 0x3, 0x1ac3, 0x8}, {0xd, 0x7, 0x1, 0x400000, 0x1, 0x2ac3, 0x26b5}]}) 00:15:44 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x10000000000000) [ 2324.561836][T14957] bond169: (slave veth861): Enslaving as a backup interface with a down link [ 2324.578387][T14971] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:44 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x1268, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) [ 2324.662247][T14939] bond169 (unregistering): (slave veth861): Releasing backup interface 00:15:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0) [ 2324.943174][T14939] bond169 (unregistering): Released all slaves [ 2325.160796][T14986] bond179: (slave veth643): Enslaving as an active interface with an up link [ 2325.183346][T14991] bond179 (unregistering): (slave veth643): Releasing backup interface [ 2325.372832][T14991] bond179 (unregistering): Released all slaves [ 2325.463905][T14957] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2325.575373][T14986] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x2, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:45 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0xf0ffffff7f0000) 00:15:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0) 00:15:45 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x1269, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:15:45 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2462f1f75573afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) 00:15:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x60, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:45 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x100000000000000) 00:15:45 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb29b2f1f75573afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) 00:15:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0) [ 2325.817108][T15159] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2325.916227][T15162] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2326.031390][T15167] bond179: (slave veth647): Enslaving as an active interface with an up link 00:15:46 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x1274, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:15:46 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x200000000000000) [ 2326.112225][T15182] bond169: (slave veth863): Enslaving as a backup interface with a down link [ 2326.140705][T15203] bond179 (unregistering): (slave veth647): Releasing backup interface 00:15:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000680)={0x4, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x1, 0x9, 0x6, 0x8001, 0x1, 0x1ff}, {0xa, 0x5, 0x1, 0x2, 0x3, 0x1ac3, 0x8}]}) [ 2326.454573][T15203] bond179 (unregistering): Released all slaves [ 2326.498896][T15204] bond169 (unregistering): (slave veth863): Releasing backup interface [ 2326.720169][T15204] bond169 (unregistering): Released all slaves [ 2326.776090][T15159] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2326.808128][T15162] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:15:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x3, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:47 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x300000000000000) 00:15:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000680)={0x3, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x1, 0x9, 0x6, 0x8001, 0x1, 0x1ff}]}) 00:15:47 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x1276, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:15:47 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb231081f75573afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) 00:15:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x68, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) [ 2327.074030][T15362] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:15:47 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x400000000000000) 00:15:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000680)={0x2, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}]}) 00:15:47 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb231091f75573afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) [ 2327.223191][T15368] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:47 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x1277, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:15:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000680)={0x2, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}]}) 00:15:47 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x500000000000000) [ 2327.470991][T15370] bond169: (slave veth867): Enslaving as a backup interface with a down link [ 2327.589102][T15396] bond179: (slave veth649): Enslaving as an active interface with an up link [ 2327.654206][T15412] bond179 (unregistering): (slave veth649): Releasing backup interface [ 2327.850143][T15412] bond179 (unregistering): Released all slaves [ 2327.902001][T15362] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2327.946040][T15404] bond169 (unregistering): (slave veth867): Releasing backup interface [ 2328.111518][T15404] bond169 (unregistering): Released all slaves [ 2328.142245][T15368] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x4, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000680)={0x2, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}]}) 00:15:48 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x600000000000000) 00:15:48 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x1278, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:15:48 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2310a1f75573afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) 00:15:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x6c, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:48 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x700000000000000) [ 2328.417490][T15577] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:15:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000680)={0x3, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x0, 0x1, 0x9, 0x6, 0x8001, 0x1, 0x1ff}]}) 00:15:48 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x1279, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:15:48 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2310d1f75573afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) [ 2328.668579][T15583] bond169: (slave veth869): Enslaving as a backup interface with a down link 00:15:48 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0xa00000000000000) [ 2328.711900][T15582] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000680)={0x3, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x0, 0x1, 0x9, 0x6, 0x8001, 0x1, 0x1ff}]}) [ 2328.906504][T15605] bond169 (unregistering): (slave veth869): Releasing backup interface [ 2329.145581][T15605] bond169 (unregistering): Released all slaves [ 2329.230756][T15616] bond179: (slave veth651): Enslaving as an active interface with an up link [ 2329.252484][T15626] bond179 (unregistering): (slave veth651): Releasing backup interface [ 2329.413792][T15626] bond179 (unregistering): Released all slaves [ 2329.462121][T15577] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2329.527900][T15616] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x5, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000680)={0x3, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x0, 0x1, 0x9, 0x6, 0x8001, 0x1, 0x1ff}]}) 00:15:49 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x127a, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:15:49 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x3f00000000000000) 00:15:49 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb231461f75573afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) 00:15:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x74, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) [ 2329.797823][T15796] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:15:49 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2319b1f75573afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) 00:15:49 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x4800000000000000) 00:15:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000680)={0x3, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x0, 0x9, 0x6, 0x8001, 0x1, 0x1ff}]}) 00:15:50 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x127b, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:15:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000680)={0x3, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x0, 0x9, 0x6, 0x8001, 0x1, 0x1ff}]}) [ 2330.036312][T15803] bond169: (slave veth871): Enslaving as a backup interface with a down link [ 2330.077619][T15802] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:50 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x4c00000000000000) [ 2330.278442][T15840] bond169 (unregistering): (slave veth871): Releasing backup interface [ 2330.491689][T15840] bond169 (unregistering): Released all slaves [ 2330.594052][T15841] bond179: (slave veth653): Enslaving as an active interface with an up link [ 2330.621619][T15848] bond179 (unregistering): (slave veth653): Releasing backup interface [ 2330.774370][T15848] bond179 (unregistering): Released all slaves [ 2330.821212][T15796] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2330.913685][T15802] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x6, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:51 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x6800000000000000) 00:15:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000680)={0x3, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x0, 0x9, 0x6, 0x8001, 0x1, 0x1ff}]}) 00:15:51 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x127c, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:15:51 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2312f0775573afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) 00:15:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x7a, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) [ 2331.086671][T16003] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2331.185376][T16010] bond169: (slave veth873): Enslaving as a backup interface with a down link [ 2331.199180][T16016] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:51 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2312f0875573afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) [ 2331.259959][T16003] bond169 (unregistering): (slave veth873): Releasing backup interface 00:15:51 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x6c00000000000000) 00:15:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000680)={0x3, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x1, 0x0, 0x6, 0x8001, 0x1, 0x1ff}]}) 00:15:51 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x127d, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:15:51 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x7400000000000000) 00:15:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000680)={0x3, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x1, 0x0, 0x6, 0x8001, 0x1, 0x1ff}]}) [ 2331.573179][T16003] bond169 (unregistering): Released all slaves [ 2331.702160][T16056] bond179: (slave veth655): Enslaving as an active interface with an up link [ 2331.753272][T16016] bond179 (unregistering): (slave veth655): Releasing backup interface [ 2332.029552][T16016] bond179 (unregistering): Released all slaves [ 2332.101894][T16010] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2332.184495][T16056] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x7, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:52 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x7a00000000000000) 00:15:52 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x127e, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:15:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000680)={0x3, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x1, 0x0, 0x6, 0x8001, 0x1, 0x1ff}]}) 00:15:52 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2312f0975573afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) 00:15:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0xf0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) [ 2332.383922][T16224] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:15:52 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0xeffdffffffffffff) 00:15:52 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2312f0a75573afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) 00:15:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000680)={0x3, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x1, 0x9, 0x0, 0x8001, 0x1, 0x1ff}]}) [ 2332.578054][T16237] bond169: (slave veth875): Enslaving as a backup interface with a down link 00:15:52 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x127f, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) [ 2332.646041][T16224] bond169 (unregistering): (slave veth875): Releasing backup interface 00:15:52 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0xffffff7f00000000) 00:15:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000680)={0x3, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x1, 0x9, 0x0, 0x0, 0x1, 0x1ff}]}) [ 2333.008738][T16224] bond169 (unregistering): Released all slaves [ 2333.084763][T16273] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2333.181092][T16279] bond179: (slave veth657): Enslaving as an active interface with an up link [ 2333.201061][T16282] bond179 (unregistering): (slave veth657): Releasing backup interface [ 2333.392433][T16282] bond179 (unregistering): Released all slaves [ 2333.430597][T16237] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2333.500945][T16273] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x8, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:53 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0xfffffffffffffdef) 00:15:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000680)={0x3, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x1, 0x9, 0x0, 0x0, 0x0, 0x1ff}]}) 00:15:53 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2312f0c75573afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) 00:15:53 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c00, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:15:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x300, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) [ 2333.738012][T16440] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:15:53 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x10000, 0x0) pread64(r1, 0x0, 0x0, 0x3fd) 00:15:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000680)={0x3, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x2, 0x0, 0x5, 0x1, 0x20, 0x5, 0x9}, {0x80000008, 0x1, 0x9}]}) 00:15:54 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2312f0d75573afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) 00:15:54 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c01, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) [ 2333.980805][T16450] bond169: (slave veth877): Enslaving as a backup interface with a down link 00:15:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000680)={0x2, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x80000008, 0x1, 0x9}]}) [ 2334.061361][T16451] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2334.174071][T16479] bond169 (unregistering): (slave veth877): Releasing backup interface 00:15:54 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000000)) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000040)={0x1, 0x7, 0x4}) [ 2334.581686][T16479] bond169 (unregistering): Released all slaves [ 2334.676004][T16488] bond179: (slave veth659): Enslaving as an active interface with an up link [ 2334.704483][T16497] bond179 (unregistering): (slave veth659): Releasing backup interface [ 2334.999414][T16497] bond179 (unregistering): Released all slaves [ 2335.056205][T16440] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2335.127749][T16572] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x9, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000680)={0x2, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x0, 0x1, 0x9}]}) 00:15:55 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r1) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0x37, 0x7fffffff, 0x26, @ipv4={[], [], @remote}, @mcast2, 0x40, 0x1, 0x7ff, 0x8}}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@loopback, 0x6d, r2}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:15:55 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c03, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:15:55 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2312f0e75573afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) 00:15:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x500, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) [ 2335.345196][T16673] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2335.416690][T16706] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000680)={0x2, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x0, 0x1, 0x9}]}) [ 2335.522960][T16708] bond169: (slave veth879): Enslaving as a backup interface with a down link 00:15:55 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000040)=0xffbf) pread64(r0, 0x0, 0x0, 0x0) 00:15:55 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2312f0f75573afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) 00:15:55 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c04, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) [ 2335.670603][T16755] bond179: (slave veth661): Enslaving as an active interface with an up link [ 2335.728364][T16673] bond169 (unregistering): (slave veth879): Releasing backup interface 00:15:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000680)={0x2, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x0, 0x1, 0x9}]}) 00:15:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000680)={0x2, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x80000008, 0x0, 0x9}]}) [ 2336.001130][T16673] bond169 (unregistering): Released all slaves [ 2336.095647][T16706] bond179 (unregistering): (slave veth661): Releasing backup interface [ 2336.312244][T16706] bond179 (unregistering): Released all slaves [ 2336.380342][T16708] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2336.466338][T16755] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xa, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:56 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c05, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:15:56 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2312f1875573afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) 00:15:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000680)={0x2, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x80000008, 0x0, 0x9}]}) 00:15:56 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$apparmor_current(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="6368616e676570726f66696c65202f70ed6f632f61736f756e642f74696d65727300"], 0x22) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0]}) pread64(r0, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x4) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = fcntl$dupfd(r3, 0x0, r0) ioctl$RTC_AIE_OFF(r6, 0x7002) 00:15:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x600, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:56 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2312f1a75573afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) [ 2336.758329][T16908] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000680)={0x2, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x80000008, 0x0, 0x9}]}) 00:15:57 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c06, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) [ 2336.947536][T16909] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:15:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000680)={0x2, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x80000008, 0x1}]}) [ 2337.122154][T16918] bond169: (slave veth881): Enslaving as a backup interface with a down link 00:15:57 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c07, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) [ 2337.195293][T16915] bond179: (slave veth663): Enslaving as an active interface with an up link [ 2337.208737][T16928] bond169 (unregistering): (slave veth881): Releasing backup interface 00:15:57 executing program 1: ioctl$KVM_PPC_GET_PVINFO(0xffffffffffffffff, 0x4080aea1, &(0x7f0000000040)=""/88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000840)={0x10c, 0x0, &(0x7f0000000640)=[@dead_binder_done, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000340)={@flat=@handle={0x73682a85, 0x1, 0x2}, @flat=@weak_handle={0x77682a85, 0x100a}, @fd={0x66642a85, 0x0, r3}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}, 0x400}, @exit_looper, @clear_death={0x400c630f, 0x1}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r6}, @fda={0x66646185, 0x5, 0x2, 0x26}}, &(0x7f0000000480)={0x0, 0x18, 0x30}}, 0x40}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/36, 0x24, 0x0, 0x30}, @ptr={0x70742a85, 0x0, &(0x7f0000000500)=""/127, 0x7f, 0x2, 0x30}, @flat=@handle={0x73682a85, 0x1, 0x2}}, &(0x7f0000000600)={0x0, 0x28, 0x50}}, 0x40}, @enter_looper, @enter_looper], 0x82, 0x0, &(0x7f0000000780)="19f78f593824ed595be4e1acb1622edac3f3ff583d8583a96fb7fb720e6d5734482c386430fc9780d024be59fa9530751b40413af9aa9f105514f2a0f9cd9e22bd07024d3d25340c06bc8e1f5b4e1838c324f4d9a0c2689be736da8a41ba2a1e3b06878106172843ed6b53ece2146b5f13b759eee7bf2cb4ff21677f29a6edc83dfb"}) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f00000000c0)={0x0, 0x0, @ioapic}) [ 2337.593954][T16928] bond169 (unregistering): Released all slaves [ 2337.712771][T16929] bond179 (unregistering): (slave veth663): Releasing backup interface [ 2337.868457][T16929] bond179 (unregistering): Released all slaves [ 2337.922079][T16909] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2337.994559][T16915] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xc, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000680)={0x2, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x80000008, 0x1}]}) 00:15:58 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c08, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:15:58 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) getsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000000140)={@private, @multicast1}, &(0x7f0000000100)=0x8) pread64(r0, 0x0, 0x0, 0x6) 00:15:58 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2312f1b75573afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) 00:15:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x700, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) [ 2338.285388][T17157] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:15:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000680)={0x2, 0x0, [{0xc0000000, 0x1ff, 0x3, 0x3, 0x6, 0x5}, {0x80000008, 0x1}]}) 00:15:58 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2800002) 00:15:58 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c09, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) [ 2338.491179][T17166] bond169: (slave veth883): Enslaving as a backup interface with a down link [ 2338.521915][T17175] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000680)={0x1, 0x0, [{0x80000008, 0x1, 0x9}]}) [ 2338.698330][T17204] bond169 (unregistering): (slave veth883): Releasing backup interface 00:15:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x1, 0x9}]}) 00:15:58 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2312f4675573afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) [ 2339.091431][T17204] bond169 (unregistering): Released all slaves [ 2339.193781][T17208] bond179: (slave veth665): Enslaving as an active interface with an up link [ 2339.218224][T17214] bond179 (unregistering): (slave veth665): Releasing backup interface [ 2339.356326][T17214] bond179 (unregistering): Released all slaves [ 2339.400519][T17157] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2339.504810][T17175] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:15:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xe, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:15:59 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x4) 00:15:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x1, 0x9}]}) 00:15:59 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c0a, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:15:59 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2312f9b75573afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) 00:15:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x900, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) [ 2339.736657][T17373] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:15:59 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="087356f9cd97cb024b4b4f0cf3838b14500458d62c25f68f2eb571580fa74582e0d9c6f8a31c51ec83e4a6bf07b68ad136c00bdb4200c876960981688c200b4e3a9f5a44618a77a74b653decc27551897ab0a4bf875bd0e8e2e0548905314fc082a115af4934083ce2bf2b117aeb3c3e4985311fc36cfa013a09d958b44f3b128f7bc68cb169d589ca1dc52cbf87e01507c1dec56e1a607d5e9d1b8c2cc14a9c495a9a2c7c608fc629b2a88e7ff3efdc94042c7524da0e49fa34be19b0", 0xbd}, {&(0x7f0000000100)="f7e48f797323988e1c6a501857ae01d68788e6df6ee96f618b274640b64641167a357d3128716a1d814ed90c89d1777ba1647ed825d9afddfae781e6243e983e3f1c9a765b765f471142cb919cbebef15b32ef8842a05bc2745b34890554ff6cefd710d91ba4ffbf4f393b29447da57c9dc87c425377cfc98d14be0c256534ef3982b135786a1514f6bd092a118ebf082df6de59", 0x94}, {&(0x7f00000001c0)="471e88705ded045aad9f7437bbba14ef8bdab51042aedc3f4b1a45594bbd9c34fcb7e8008d4207c071b6c3d55b2e729f65fcabb1c4a1e8609360338c201cbb5c16e7876228c79d38d95e680af6bc7fc8c11fe35fcec8f41754c4cd636f66a24a54f5dd8fcfb04396ebdec4137be0ba7fc8e271d6b826eb47dd6131aae5f9c3e8cf7896fcc549805290d7ff7be537386dab8559b13853b0088a51812a41", 0x9d}, {&(0x7f0000000280)="6234851060a02f6c031f99559fc7e43d7fbee33ab1d11923c3766c1da24988a5968b0f07bbd8705c428a7e54ea637a97ffbfa2b36a112f70ade34cdfabf73108ca63c283b4b4aae19eab32d413930aef390b20f7220586cb645151c963e545651207778dcb0fc333b268bea6df1772c87530b12973044cc77c84f0abf15d94e9926d9564e17819abb1f84a64e0b0a31e404c0d1feaf35e2024e13efd680e89b7e05da70843cdd9f631c29e185cf6e8356e7e143ee4ad379b32bb78eeab9363a87b2474249d1826b389032892528c68aba2746d65ff17b599f6da7daca46fdf2d", 0xe0}, {&(0x7f0000000380)="c98a0862fed65928bd5c4fce4db2ed3ec3bb4c29965952b5c4eaff98b6cb48a0e5ddf99e4d52e5ecaea6a18bf80a15dc138f54900c01084b0e7979d62d38b47cfdebe880ae1ba806e590c5e117c101db275f6ada46e3ca715ec2d4d2db222705e269b0524524171bdc5b457eb18c3e1317a9c89a80272fe22a76a312c3404c94ee9ccb644d02504cde191d3f5f830b41c14de831f5a7fa6c0d324c4d200844c7f79ab9e1e50982c2d26608e070f3577c75529d9070fbe8a124927437", 0xbc}, {&(0x7f0000000440)="9f6acd6d78bc1379e2f81783710bdff378a825cca4b6649110150a7f49db8131ec826229f8c5c627c0bee3a642184260b2b61c413e62cfdf50263a49d86b961514ae32117b5d39a3466c12498840b96583806b7368f55f0ae649da17ace5343a4f668a598503f4c25cac8169c859d6afa86faed210f31220485c1549ece0ede7a4acc3d3eb7beac61cc7ef34f99e10a98a3524d7305e104c52ecdf54aeb19058fda171e0bc6a1ee2465695fb417d617cd83d361ab8dd97a5415cd98c26e0e5114e74b8d9359da0c08582f25a", 0xcc}], 0x6, 0x9) 00:15:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x1, 0x9}]}) 00:15:59 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2312f1f08573afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) [ 2339.912975][T17379] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:16:00 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c10, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:00 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) 00:16:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000680)={0x1, 0x0, [{0x80000008, 0x0, 0x9}]}) [ 2340.167163][T17381] bond169: (slave veth885): Enslaving as a backup interface with a down link [ 2340.262585][T17384] bond179: (slave veth667): Enslaving as an active interface with an up link [ 2340.339875][T17385] bond169 (unregistering): (slave veth885): Releasing backup interface [ 2340.663954][T17385] bond169 (unregistering): Released all slaves [ 2340.788376][T17415] bond179 (unregistering): (slave veth667): Releasing backup interface [ 2341.110559][T17415] bond179 (unregistering): Released all slaves [ 2341.202511][T17373] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2341.308799][T17384] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:16:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x10, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:16:01 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c14, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000680)={0x1, 0x0, [{0x80000008, 0x0, 0x9}]}) 00:16:01 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2312f1f09573afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) 00:16:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x18f6, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) [ 2341.572477][T17582] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:16:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000680)={0x1, 0x0, [{0x80000008, 0x0, 0x9}]}) 00:16:01 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2312f1f0a573afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) [ 2341.702913][T17590] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:16:01 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c26, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000680)={0x1, 0x0, [{0x80000008, 0x1}]}) [ 2341.906562][T17593] bond169: (slave veth887): Enslaving as a backup interface with a down link [ 2341.945301][T17624] bond169 (unregistering): (slave veth887): Releasing backup interface 00:16:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000680)={0x1, 0x0, [{0x80000008, 0x1}]}) 00:16:02 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c63, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000680)={0x1, 0x0, [{0x80000008, 0x1}]}) [ 2342.421733][T17624] bond169 (unregistering): Released all slaves [ 2342.601823][T17623] bond179: (slave veth671): Enslaving as an active interface with an up link [ 2342.632264][T17629] bond179 (unregistering): (slave veth671): Releasing backup interface [ 2342.908715][T17629] bond179 (unregistering): Released all slaves [ 2342.981045][T17582] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2343.073305][T17699] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:16:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x48, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:16:03 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c09, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:03 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x541b, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x2000, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:16:03 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2312f1f0d573afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) [ 2343.324195][T17809] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:16:03 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c09, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:03 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x541c, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:03 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2312f1f9b573afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) [ 2343.641853][T17816] bond169: (slave veth889): Enslaving as a backup interface with a down link [ 2343.721280][T17838] bond169 (unregistering): (slave veth889): Releasing backup interface 00:16:03 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x5421, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:03 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c09, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:04 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x5450, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:04 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_SET_STATUS(r0, 0x4c09, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) [ 2344.193476][T17838] bond169 (unregistering): Released all slaves [ 2344.336153][T17820] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2344.451561][T17809] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2344.547956][T17895] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:16:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x4c, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:16:04 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x5451, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:04 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c09, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:04 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2312f1f75083afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) 00:16:04 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff830a0000001000001b", @ANYRES32=r3], 0x4}}, 0x0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r2, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3f29}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x18}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40080) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000000c0)={0x2, 0x5, 0x597b, 0x6, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r6}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x204200, 0x0) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000240)) pread64(r7, 0x0, 0x0, 0x0) sendfile(r8, 0xffffffffffffffff, &(0x7f0000000080)=0x100000001, 0x7) 00:16:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x3f00, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:16:04 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2312f1f75093afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) [ 2344.770767][T17972] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:16:04 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c09, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:05 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x5452, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) [ 2344.937145][T17979] bond169: (slave veth891): Enslaving as a backup interface with a down link [ 2344.955685][T18002] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2345.028111][T17972] bond169 (unregistering): (slave veth891): Releasing backup interface 00:16:05 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c09, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:05 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x5460, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) [ 2345.246346][T17972] bond169 (unregistering): Released all slaves [ 2345.356396][T18028] bond179: (slave veth673): Enslaving as an active interface with an up link 00:16:05 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c09, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) [ 2345.398339][T18049] bond179 (unregistering): (slave veth673): Releasing backup interface [ 2345.647685][T18049] bond179 (unregistering): Released all slaves [ 2345.704892][T17979] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2345.776676][T18002] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2345.842053][T18160] bond179: (slave veth675): Enslaving as an active interface with an up link [ 2345.857425][T18165] bond179 (unregistering): (slave veth675): Releasing backup interface [ 2346.049047][T18165] bond179 (unregistering): Released all slaves 00:16:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x60, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:16:06 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2312f1f750a3afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) 00:16:06 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x5603, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:06 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c09, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:06 executing program 1: pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:16:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x4000, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) [ 2346.277588][T18252] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:16:06 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2312f1f750d3afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) 00:16:06 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c09, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:06 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0x2, 0x2) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYRES16, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000009000100c6614150054664616fc7020008000400000000008000000052374421b3a18f170dceafd70500924d417d3295789f1dede95ad91df4e30c11aec263aaa5c11e5ae95f488accfe5059b1d29ba7e59a6570b950f73b2ae1e116f987942d291db9203810bf692b9d992cc587d46b8de2a82a1b7e45c73b9214d50c3bd51bb35c9e395e28eaef2bac6890af11cfd671d1d677e099f429b9961c3fc2aebc850d2a894dd41a"], 0x3c}}, 0x0) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendto$l2tp6(r1, &(0x7f0000000040)="ca61e7901fd59275ed2329908148bcbd0005281d60f17de286d7e2b5e04c09d399bc25e373686bf71beb8232f1454d7aac3d5abed7537049507de3443494851c6f4bc8a2be805366ab1a513dc50ac81594a44efabde138070c0d8b7b36b092f853e28ba5443e1dd9e5e74861366a7952edbb8520138206ffff774b1e4d0af080fc720a3a9bdccb43f985a76450ffc144fa8ff9ab03315843f8d0fa30305f1106d40b42b76375705b1abe2b1063aff47fabc1e71adb4f184c4ef847c2de6658e99b60276358b46c3430e97894e07776256cc56e69182c913beefac7828952", 0xde, 0x44040, &(0x7f0000000140)={0xa, 0x0, 0x7, @mcast2, 0x7ff, 0xffffffff}, 0x20) r5 = getpid() ptrace(0x10, r5) ptrace$getregset(0x4203, r5, 0x0, &(0x7f0000000180)={0x0, 0x8}) r6 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(0x0, r7, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000002c0)={0x4, 0x6, {r5}, {r7}, 0x2, 0x1852}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000180)={0x3, 0x0, 'client1\x00', 0xffffffff80000000, "f48d8601588ce2bf", "361308cae060971b2da96b70e6b582728e0a232dd9d82c13eda8cde6e4476937", 0x800, 0x400}) pread64(r0, 0x0, 0x0, 0x0) 00:16:06 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x6300, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) [ 2346.565808][T18265] bond169: (slave veth893): Enslaving as a backup interface with a down link 00:16:06 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c09, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) [ 2346.624228][T18279] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:16:06 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000000000000008000000400000000000000000000001f000000f3000000000000000000000000000000000000000000001000000000070000000100000000000000400000009dd700000800"/104]) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r2, 0x800448d3, &(0x7f0000000100)={@fixed={[], 0x10}, 0x4, 0xbf9, 0x8, 0xfff7, 0x8, "0f3023324245634ff2a783d1eb58508c89a10a8b41aee97066fd29d6e56ec85bd57cc462c29875e0c364108fdc4d1881a8c3f708acece548e82659187f94c897762cc789478847edfa0b613227260b3b542fe979b01892174bb15357585abe99aa17c97184aa49895dca75827991f9f646d0a1f7d2ce70912d968a0bc09baa4f"}) pread64(r2, 0x0, 0x0, 0x0) [ 2346.711117][T18288] bond169 (unregistering): (slave veth893): Releasing backup interface [ 2346.968927][T18288] bond169 (unregistering): Released all slaves [ 2347.074127][T18303] bond179: (slave veth677): Enslaving as an active interface with an up link [ 2347.116347][T18308] bond179 (unregistering): (slave veth677): Releasing backup interface [ 2347.299850][T18308] bond179 (unregistering): Released all slaves [ 2347.363859][T18252] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2347.452893][T18404] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:16:07 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c09, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:07 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x6364, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:07 executing program 1: pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000080)={0x4, &(0x7f0000000000), 0x0, r3, 0x6}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$SNAPSHOT_CREATE_IMAGE(r9, 0x40043311, &(0x7f0000000040)) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x81}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x9}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x1}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xfffffff7}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3ff}}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x44, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x9}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x6}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x1}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0xb7}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x6408}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x1}, @NL80211_TXQ_ATTR_CWMAX={0x6}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x400}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4010}, 0x20004810) 00:16:07 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2312f1f759b3afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) 00:16:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x68, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:16:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x4800, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) [ 2347.686987][T18457] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:16:07 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c09, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:07 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2312f1f755708fabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) 00:16:08 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x6612, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) [ 2347.973417][T18466] bond169: (slave veth897): Enslaving as a backup interface with a down link [ 2347.982915][T18475] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2348.165865][T18494] bond169 (unregistering): (slave veth897): Releasing backup interface 00:16:08 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x8901, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:08 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) ioctl$LOOP_SET_STATUS(r0, 0x4c09, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:08 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c09, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:08 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x8912, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:08 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c09, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) [ 2348.541823][T18494] bond169 (unregistering): Released all slaves [ 2348.701112][T18502] bond179: (slave veth681): Enslaving as an active interface with an up link [ 2348.731201][T18508] bond179 (unregistering): (slave veth681): Releasing backup interface [ 2348.945465][T18508] bond179 (unregistering): Released all slaves [ 2348.997065][T18457] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:16:09 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) pread64(r2, 0x0, 0x0, 0x0) 00:16:09 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c09, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) [ 2349.134520][T18579] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:16:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x6c, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:16:09 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x8914, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:09 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) ioctl$LOOP_SET_STATUS(r0, 0x4c09, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:09 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2312f1f755709fabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) 00:16:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x4c00, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:16:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x4}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x9, 0x40, 0x1000, 0x68, @loopback, @mcast1, 0x700, 0x40, 0xffff, 0x520}}) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="0e0000000a0000000505d1008007f04b3eafef4936e8466cda0d3c17c116a77197ead52a074eaff84158028dfb8db155801e1a9de32913fcec83463497bda3818540da6fb954547ccb8be98aa77e1bcb6b20f3d21137bad22d13ea3737d73e86576c17b20d8999b23e9e2910eb6cff42fa93a519ca263a4a16075094a6aa7bf5f2dc29238d9a495de7cda545f59288c3085664e4583a7e350ea30cad4b9b436dd630f1be2857ea1efd98f071f6b1da5f79ae796e20983c0b02c77f03aa6d3418152c878920e0194cadd175ec6222f5c5b7d1d68eed600af39a00000000"], 0xdd) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000024000b0f00"/20, @ANYRES32=r3, @ANYBLOB="00000000ffbcffff000000000900010063616b65000000000c0002000800040000000000"], 0x3c}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={r7, 0x1648, 0xffffffffffff4dad, 0x5}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_setlink={0x78, 0x13, 0x100, 0x70bd26, 0x25dfdbfd, {0x7, 0x0, 0x0, r1, 0x98, 0x2}, [@IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_EXT_MASK={0x8, 0x1d, 0x58}, @IFLA_LINKMODE={0x5, 0x11, 0xfd}, @IFLA_MTU={0x8, 0x4, 0x1000}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x6e68ad86}, @IFLA_NET_NS_FD={0x8, 0x1c, r8}, @IFLA_PHYS_SWITCH_ID={0x19, 0x24, "2bab57aa159075386d041d7af801861e6f6a9e7531"}]}, 0x78}, 0x1, 0x0, 0x0, 0x41}, 0x8001) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/seq/timer\x00', 0x0, 0x0) pread64(r9, 0x0, 0x0, 0x0) [ 2349.470842][T18704] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:16:09 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) ioctl$LOOP_SET_STATUS(r0, 0x4c09, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) [ 2349.542532][T18708] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:16:09 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x8933, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:09 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2312f1f75570afabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) [ 2349.704317][T18715] bond169: (slave veth899): Enslaving as a backup interface with a down link [ 2349.763899][T18747] bond179: (slave veth683): Enslaving as an active interface with an up link 00:16:09 executing program 5: r0 = syz_open_dev$loop(0x0, 0x0, 0x44182) ioctl$LOOP_SET_STATUS(r0, 0x4c09, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) [ 2349.822277][T18704] bond169 (unregistering): (slave veth899): Releasing backup interface 00:16:09 executing program 5: r0 = syz_open_dev$loop(0x0, 0x0, 0x44182) ioctl$LOOP_SET_STATUS(r0, 0x4c09, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:10 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x89e2, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) [ 2350.066046][T18704] bond169 (unregistering): Released all slaves [ 2350.143600][T18755] bond179 (unregistering): (slave veth683): Releasing backup interface [ 2350.410692][T18755] bond179 (unregistering): Released all slaves [ 2350.473066][T18715] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2350.593757][T18708] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:16:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x74, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:16:10 executing program 5: r0 = syz_open_dev$loop(0x0, 0x0, 0x44182) ioctl$LOOP_SET_STATUS(r0, 0x4c09, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:10 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0xae01, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:10 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2312f1f75570dfabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) 00:16:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x6000, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:16:10 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) pread64(r0, 0x0, 0x2, 0x1ffffffe) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat2(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x612200, 0xd6, 0x10}, 0x18) [ 2350.819796][T18922] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:16:10 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c09, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:11 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2312f1f755746fabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) [ 2350.944460][T18929] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:16:11 executing program 5: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c09, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:11 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0xae41, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) [ 2351.140055][T18931] bond169: (slave veth901): Enslaving as a backup interface with a down link 00:16:11 executing program 5: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c09, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) [ 2351.226034][T18954] bond179: (slave veth685): Enslaving as an active interface with an up link [ 2351.273144][T18960] bond169 (unregistering): (slave veth901): Releasing backup interface 00:16:11 executing program 5: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c09, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) [ 2351.560020][T18960] bond169 (unregistering): Released all slaves [ 2351.633315][T18973] bond179 (unregistering): (slave veth685): Releasing backup interface [ 2351.782135][T18973] bond179 (unregistering): Released all slaves [ 2351.876044][T18922] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2351.994579][T18954] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:16:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x7a, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:16:12 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0xae60, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:12 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c09, 0x0) 00:16:12 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2312f1f75579bfabbb89d9d912f5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) 00:16:12 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x4}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x3c}}, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x56, &(0x7f0000000040), &(0x7f0000000080)=0x10) 00:16:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x6800, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) [ 2352.171897][T19133] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:16:12 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c09, 0x0) 00:16:12 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/timers\x00', 0x0, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) pread64(r3, 0x0, 0xa, 0x0) ioctl(r2, 0x5, &(0x7f0000000040)="b6335589f38ef4971000") [ 2352.290178][T19139] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:16:12 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c09, 0x0) 00:16:12 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0xae80, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:12 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2312f1f75573afabbb89d9d91085659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) 00:16:12 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c09, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x0, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) [ 2352.553549][T19141] bond169: (slave veth903): Enslaving as a backup interface with a down link [ 2352.666383][T19152] bond179: (slave veth689): Enslaving as an active interface with an up link [ 2352.682605][T19133] bond169 (unregistering): (slave veth903): Releasing backup interface [ 2352.886771][T19133] bond169 (unregistering): Released all slaves [ 2352.941806][T19178] bond179 (unregistering): (slave veth689): Releasing backup interface [ 2353.139805][T19178] bond179 (unregistering): Released all slaves [ 2353.200627][T19141] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2353.323532][T19152] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:16:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xf0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:16:13 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c09, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x0, 0x0, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:13 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x400454ca, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:13 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) 00:16:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x6c00, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:16:13 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2312f1f75573afabbb89d9d91095659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) [ 2353.519819][T19341] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:16:13 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pread64(r1, 0x0, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000040)=0x5) 00:16:13 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c09, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x0, 0x0, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:13 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2312f1f75573afabbb89d9d910a5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) 00:16:13 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x40045542, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) [ 2353.728951][T19350] bond169: (slave veth905): Enslaving as a backup interface with a down link 00:16:13 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c09, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x0, 0x0, 0x0, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) [ 2353.870215][T19341] bond169 (unregistering): (slave veth905): Releasing backup interface 00:16:13 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c09, 0x0) [ 2354.247152][T19341] bond169 (unregistering): Released all slaves [ 2354.298919][T19350] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2354.344894][T19349] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:16:14 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c09, 0x0) 00:16:14 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x40049409, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:14 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2312f1f75573afabbb89d9d910d5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) 00:16:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x7400, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:16:14 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$char_raw_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/raw/rawctl\x00', 0x10200, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000040)={0xc172, 0x1, {0x1, 0x2, 0x101, 0x1, 0xfff}, 0x800}) r3 = getpid() ptrace(0x10, r3) ptrace$getregset(0x4203, r3, 0x0, &(0x7f0000000180)={0x0, 0x8}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x6, 0x1, 0x81, 0x9, 0x0, 0x1ff, 0x81200, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2f, 0x2, @perf_bp={&(0x7f0000000100), 0x3}, 0x48, 0x1, 0xfff, 0x7, 0x8001, 0x1, 0x2681}, r3, 0x6, r2, 0xa) 00:16:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x300, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:16:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x18f6, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:16:14 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2312f1f75573afabbb89d9d91465659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) [ 2354.640800][T19520] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:16:14 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x40081271, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) [ 2354.863116][T19526] bond169: (slave veth907): Enslaving as a backup interface with a down link [ 2354.883480][T19527] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2354.973221][T19554] bond169 (unregistering): (slave veth907): Releasing backup interface 00:16:15 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x40101283, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) [ 2355.228121][T19554] bond169 (unregistering): Released all slaves [ 2355.282893][T19552] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 2355.390492][T19561] bond180: (slave veth693): Enslaving as an active interface with an up link 00:16:15 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0xfffffffffffffedf, 0x0) [ 2355.438242][T19574] bond2: (slave veth9): Enslaving as a backup interface with a down link 00:16:15 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x40101286, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:15 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2312f1f75573afabbb89d9d919b5659312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) [ 2355.486474][T19576] bond180 (unregistering): (slave veth693): Releasing backup interface 00:16:15 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x4800, 0x0) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000080)='\v', 0x1, 0xfffffffffffffffd) r5 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r4, r5}, 0x0, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000000000002d21405c930bc0d5b7e60cf8b5b9d5309010498a4ae8c16f000000", @ANYRES32=r5, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000906cb53ec0bc341f4f3248053174fe8a62eb8f5105886f0910a01f416c9fcd9da224fe39f2a239e4cc62f64e7c0271728726930faa0a22f99c9c6c738320b5db953360ecb5a838367014659ae807d85cc80736f367a212fa9a8531416d9819a460936c25dd54abce9e7d1941bc1750"]) utimensat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={{r1, r2/1000+10000}}, 0x100) 00:16:15 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x40101288, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) [ 2355.740250][T19576] bond180 (unregistering): Released all slaves [ 2355.809583][T19580] bond2 (unregistering): (slave veth9): Releasing backup interface [ 2356.036617][T19580] bond2 (unregistering): Released all slaves [ 2356.082741][T19520] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2356.175657][T19561] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:16:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x7a00, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:16:16 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getegid() r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fcntl$dupfd(r2, 0x2b65823bf7db44bf, r1) 00:16:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x500, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:16:16 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x401070c9, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:16 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x40081271, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:16 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2312f1f75573afabbb89d9d912f0859312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) [ 2356.407052][T19816] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:16:16 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) 00:16:16 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x40081271, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) [ 2356.608380][T19834] bond169 (unregistering): Released all slaves 00:16:16 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x401070ca, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:16 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2312f1f75573afabbb89d9d912f0959312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) 00:16:16 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x4}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000100)={0x1, 'ipvlan1\x00', {}, 0xa11}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000040)={0x8000, 0x7, 0x0, 'queue1\x00', 0x1}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r3, 0x0, 0x0, 0x0) [ 2356.769562][T19842] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:16:16 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x40081271, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) [ 2356.951126][T19874] bond180: (slave veth697): Enslaving as an active interface with an up link [ 2356.988309][T19881] bond180 (unregistering): (slave veth697): Releasing backup interface [ 2357.250512][T19881] bond180 (unregistering): Released all slaves [ 2357.393171][T19816] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2357.421306][T19842] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2357.500795][T20015] bond180: (slave veth699): Enslaving as an active interface with an up link [ 2357.517880][T20021] bond180 (unregistering): (slave veth699): Releasing backup interface [ 2357.651131][T20021] bond180 (unregistering): Released all slaves 00:16:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0xf000, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:16:17 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x401070cd, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) [ 2357.742272][T20098] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:16:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x600, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:16:17 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_SET_STATUS(r0, 0x40081271, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:17 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2312f1f75573afabbb89d9d912f0a59312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) 00:16:17 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f00000000c0)) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f0000000040)={{0x0, 0x0, 0x80}}) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000020c0)={"74979336fde7ccd1065e2cf15da663e4cf4a292ef0902eeef4f7790c629ec56619306beadf237d0346b8dcfcfaf80cbf617def8c5b910ef15a58f8cd465c952ae92ad7202fdaf9c84cf2fbf76c797cdbbd3a4a1342ccb4aebce4be5218c56d5587a3b332d9878d5f5ebf4fc17664ce995ae08f1d71c9488cbe6100bbb9e93415ceb8630015cc1b013a991b3d6ed0f5f21adbb917beb348ee6fe6240a483ad8134f499a05e67041121a803ceda26bb63da2c207eda08915ca7b311e6fa6de1c8e8898f3f1896c297db7c5a3f917b52a67bbd60de50ce2d76ca9559937ebac50c989d7d23a523d9ac8f09d3814541516e87d431de0d0023e41d98217ef91adb53beb0da6373c67b32eb0685bff82935f0d0e304201309746cd6f50e10c801e30caa57d637c8f8543456ebc31bc9454232bcb9370a433f6c9dc7983315c636cc2d9fc95c4197684e7ea0b919252cd5a2f1deecd6f782e2bd6a44d0938d2bba2d1d4be9166851bae2a13e3e0161957feda0d2a55a693cb7e8ff30c28591ee2dd08d3c761001e801aed0675703c770a2e4f0b903de5ef45836861ffcf95830b6932775b9cb65dd8995e5cc06be18d8db80a1fd84510b9d8d67ee28d39d80576642cffcc6cc1ba2b9af3ce270ddf94a8fa9cb020beac07deacd17726bc647135db8851b5e24d9a67b86a4e659adf03b1eba87aa0d42425f76f2d65b21c5a6d2650e0c3141488e0da0ff1a9fd24d51255fdbf5036f4738ae4ad55a3cdb6ff6016e056fb125153266209fdb3dbcce8342246dcf75f514bbe050b09eeced3b09f8f5e3ebb0735cc860aede559f79e854d60d5201140f0ed1c79c99b6c2cf0d5a485be0fa4b482036c60fbfcdd027afb96791e87a11fe8bf5616499c1f0b5dec79b81d65f33e954086b64982d6ace9255317ef9c6950b7ed5caf8f0b475e6e3d83d4a0583835675e14c93e4bb453fac701fd8745efb1a6aff82a8d481a417ebefa53fa0d91c38c78e9416535dca1dcfa4f6a44fe87df5c8a33847427b22f28c9987edd106b6883bfc1d3f9ae0c1042fad3422acea22c6ff90c4eb0a6da358aa5273e89fff7c33bd90b96388147e6ee0afcd9dd8e82861b012969efda6ddb1b947cf0728c48e929e6fcf70e2a0d6871af1615404811d120365f093976a7097504d3e1721065cf318c9dfb9fd3f98c06e805b4a647bcff24159c88492fbedc0f8e16fb16110c1ee62829842cf84cd587ef5738e5cc1ed4f6833303a6c86c2de4877cb5a9e82c1e83644fdb598e0bdb3d1a80cddc483087af3a737c8026fb5add4689c0d9c999ff15d063e0977917d9f1c00bde04bd4705a4e08d409fe399be8ccd82a3ce5c0381172ccba755a12bfa579815f82d0838e769204368d1594205fbfbdd2c7217c6e8e07a0b4e717b9c236b9fd4c6cde8a0a94d7305443b5baddba6c6063c74a129"}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r3, 0x0, 0x0, 0x0) [ 2357.946648][T20102] bond169: (slave veth909): Enslaving as a backup interface with a down link 00:16:18 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x40186366, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) [ 2358.007260][T20098] bond169 (unregistering): (slave veth909): Releasing backup interface 00:16:18 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x1, 0x0, 0x1, {0xa, 0x4e20, 0x40, @ipv4={[], [], @remote}, 0x80}}}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x4}]}}]}, 0x3c}}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000180), &(0x7f0000000140)=0x4) 00:16:18 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$LOOP_SET_STATUS(r0, 0x40081271, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) [ 2358.263584][T20098] bond169 (unregistering): Released all slaves 00:16:18 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x401870c8, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2312f1f75573afabbb89d9d912f0d59312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) [ 2358.326298][T20155] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:16:18 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x40081271, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) [ 2358.649081][T20161] bond180: (slave veth701): Enslaving as an active interface with an up link [ 2358.683189][T20165] bond180 (unregistering): (slave veth701): Releasing backup interface [ 2358.870965][T20165] bond180 (unregistering): Released all slaves [ 2358.922477][T20102] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2359.017269][T20155] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:16:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0xf618, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:16:19 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x40081271, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x700, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:16:19 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000280)={{0x6, 0xffffff16}, 0x40}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x4}]}}]}, 0x3c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x28, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x3}}, @NL80211_ATTR_WIPHY={0x8}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc4, r6, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x1c, 0x22, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffffff23}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}]}, @NL80211_ATTR_REG_RULES={0x24, 0x22, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5ba9d2ac}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x44, 0x22, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xef8e}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8001}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5d34}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xc6c5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xc4}}, 0x800) pread64(r1, 0x0, 0x0, 0x0) 00:16:19 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x401870cb, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:19 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2312f1f75573afabbb89d9d912f9b59312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) [ 2359.174985][T20314] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:16:19 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x40081271, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) [ 2359.309501][T20318] bond169: (slave veth911): Enslaving as a backup interface with a down link [ 2359.322419][T20314] bond169 (unregistering): (slave veth911): Releasing backup interface 00:16:19 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x401870cc, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:19 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x40081271, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) [ 2359.538083][T20314] bond169 (unregistering): Released all slaves [ 2359.631010][T20365] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:16:19 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2312f1f75573afabbb89d9d912f5608312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) 00:16:19 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) dup3(r2, r3, 0x0) [ 2359.801631][T20371] bond180: (slave veth703): Enslaving as an active interface with an up link [ 2359.826924][T20372] bond180 (unregistering): (slave veth703): Releasing backup interface 00:16:19 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4018920a, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) [ 2360.190271][T20372] bond180 (unregistering): Released all slaves [ 2360.243362][T20318] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2360.334531][T20365] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:16:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x40000, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:16:20 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x40081271, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x900, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:16:20 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) 00:16:20 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4020940d, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:20 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2312f1f75573afabbb89d9d912f5609312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) 00:16:20 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) ioctl$LOOP_SET_STATUS(r0, 0x40081271, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:20 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0xfffffffffffffffc) [ 2360.584103][T20546] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 00:16:20 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2312f1f75573afabbb89d9d912f560a312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) 00:16:20 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) ioctl$LOOP_SET_STATUS(r0, 0x40081271, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) [ 2360.755597][T20554] bond169: (slave veth913): Enslaving as a backup interface with a down link [ 2360.770003][T20553] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:16:20 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) ioctl$LOOP_SET_STATUS(r0, 0x40081271, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) [ 2360.858316][T20579] bond169 (unregistering): (slave veth913): Releasing backup interface 00:16:20 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000040)={0x8}) pread64(r0, 0x0, 0x0, 0x0) [ 2361.063449][T20579] bond169 (unregistering): Released all slaves [ 2361.143799][T20581] bond180: (slave veth705): Enslaving as an active interface with an up link [ 2361.168189][T20598] bond180 (unregistering): (slave veth705): Releasing backup interface [ 2361.401462][T20598] bond180 (unregistering): Released all slaves [ 2361.463915][T20546] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2361.571627][T20553] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:16:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x80000, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:16:21 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x44182) socket(0x0, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x10\x01\x00t\xb3-\rG|\x00\x00\x00\x00\x00\x00\xad\x8d\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000001e00)=[{&(0x7f0000000600)='0', 0x1}], 0x1, 0xfff) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4400ae8f, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000ee00000000000000ff00", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000000100005ffe7b0f680ca10fc0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002f3652af90008000a00", @ANYRES32=r2], 0x50}}, 0x840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0xa00, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x10}, 0x0) 00:16:21 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x40081271, &(0x7f0000000280)={0x600, {0x17e}, 0x2ec, {}, 0x0, 0x1, 0x1c, 0xc, "b04a83706694a75154c629f75b71a95a8f3b289271c607adb22d4d000000007b1291b1150d4d3aa20d7beebc689e926d5e290679d1042f1b38e9e8af694c0d43", "5244534b0f00000d574556820000a482ebf7888c305bee6fd600"}) 00:16:21 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000000)) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000440)={0x1, 0x0, 0x1d, 0xa, 0x1f, &(0x7f0000000040)}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) pread64(r3, 0x0, 0x0, 0x0) 00:16:21 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)='C', 0x1}, {&(0x7f00000001c0)="fdb2312f1f75573afabbb89d9d912f560d312a733b970ea1170ed780da635690c2cb0e6615aa17d2c8367250369acbcf9819f254635d12ded0f77304a8007bdf09e1d043d448", 0x46}], 0x2) [ 2361.712865][T20748] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 2361.874021][T20775] ================================================================== [ 2361.874146][T20775] BUG: KASAN: slab-out-of-bounds in fbcon_get_font+0x2f4/0x6f0 [ 2361.874163][T20775] Read of size 16 at addr ffff888060f34d10 by task syz-executor.1/20775 [ 2361.874190][T20775] CPU: 1 PID: 20775 Comm: syz-executor.1 Not tainted 5.8.0-rc6-next-20200723-syzkaller #0 [ 2361.874205][T20775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2361.874214][T20775] Call Trace: [ 2361.874245][T20775] dump_stack+0x18f/0x20d [ 2361.874267][T20775] ? fbcon_get_font+0x2f4/0x6f0 [ 2361.874283][T20775] ? fbcon_get_font+0x2f4/0x6f0 [ 2361.874305][T20775] print_address_description.constprop.0.cold+0xae/0x497 [ 2361.874329][T20775] ? lockdep_hardirqs_off+0x6a/0xb0 [ 2361.874349][T20775] ? vprintk_func+0x97/0x1a6 [ 2361.874371][T20775] ? fbcon_get_font+0x2f4/0x6f0 [ 2361.874386][T20775] ? fbcon_get_font+0x2f4/0x6f0 [ 2361.874403][T20775] kasan_report.cold+0x1f/0x37 [ 2361.874425][T20775] ? fbcon_get_font+0x2f4/0x6f0 [ 2361.874447][T20775] check_memory_region+0x13d/0x180 [ 2361.874474][T20775] memcpy+0x20/0x60 [ 2361.874494][T20775] fbcon_get_font+0x2f4/0x6f0 [ 2361.874517][T20775] ? fbcon_resize+0x610/0x610 [ 2361.874539][T20775] con_font_op+0x1f5/0x1110 [ 2361.874562][T20775] ? lock_downgrade+0x830/0x830 [ 2361.874582][T20775] ? con_write+0xb0/0xb0 [ 2361.874612][T20775] ? __might_fault+0x190/0x1d0 [ 2361.874636][T20775] vt_ioctl+0x20b9/0x2c20 [ 2361.874657][T20775] ? vt_waitactive+0x350/0x350 [ 2361.874678][T20775] ? trace_hardirqs_on+0x5f/0x220 [ 2361.874700][T20775] ? lockdep_hardirqs_on+0x76/0xf0 [ 2361.874735][T20775] ? tomoyo_execute_permission+0x470/0x470 [ 2361.874762][T20775] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 2361.874782][T20775] ? tty_jobctrl_ioctl+0x4d/0x1010 [ 2361.874798][T20775] ? vt_waitactive+0x350/0x350 [ 2361.874822][T20775] tty_ioctl+0x1019/0x15f0 [ 2361.874843][T20775] ? tty_fasync+0x390/0x390 [ 2361.874863][T20775] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 2361.874884][T20775] ? do_vfs_ioctl+0x27d/0x1090 [ 2361.874905][T20775] ? generic_block_fiemap+0x60/0x60 [ 2361.874928][T20775] ? _copy_to_user+0x126/0x160 [ 2361.874960][T20775] ? __fget_files+0x294/0x400 [ 2361.874987][T20775] ? tty_fasync+0x390/0x390 [ 2361.875010][T20775] __x64_sys_ioctl+0x193/0x200 [ 2361.875031][T20775] do_syscall_64+0x60/0xe0 [ 2361.875053][T20775] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2361.875070][T20775] RIP: 0033:0x45c1f9 [ 2361.875077][T20775] Code: Bad RIP value. [ 2361.875088][T20775] RSP: 002b:00007f4b50648c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2361.875111][T20775] RAX: ffffffffffffffda RBX: 000000000000f480 RCX: 000000000045c1f9 [ 2361.875123][T20775] RDX: 0000000020000440 RSI: 0000000000004b72 RDI: 0000000000000005 [ 2361.875135][T20775] RBP: 000000000078bfe0 R08: 0000000000000000 R09: 0000000000000000 [ 2361.875147][T20775] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 2361.875159][T20775] R13: 00007fff56df97ef R14: 00007f4b506499c0 R15: 000000000078bfac [ 2361.875191][T20775] Allocated by task 4127: [ 2361.875207][T20775] kasan_save_stack+0x1b/0x40 [ 2361.875224][T20775] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 2361.875238][T20775] __kmalloc+0x1a8/0x320 [ 2361.875254][T20775] fbcon_set_font+0x34f/0x8b0 [ 2361.875271][T20775] con_font_op+0xd25/0x1110 [ 2361.875285][T20775] vt_ioctl+0x1be1/0x2c20 [ 2361.875301][T20775] tty_ioctl+0x1019/0x15f0 [ 2361.875317][T20775] __x64_sys_ioctl+0x193/0x200 [ 2361.875331][T20775] do_syscall_64+0x60/0xe0 [ 2361.875349][T20775] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2361.875366][T20775] The buggy address belongs to the object at ffff888060f34c00 [ 2361.875366][T20775] which belongs to the cache kmalloc-512 of size 512 [ 2361.875382][T20775] The buggy address is located 272 bytes inside of [ 2361.875382][T20775] 512-byte region [ffff888060f34c00, ffff888060f34e00) [ 2361.875389][T20775] The buggy address belongs to the page: [ 2361.875410][T20775] page:00000000b55839ef refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x60f34 [ 2361.875424][T20775] flags: 0xfffe0000000200(slab) [ 2361.875448][T20775] raw: 00fffe0000000200 ffffea00027da248 ffffea0002905048 ffff8880aa000600 [ 2361.875480][T20775] raw: 0000000000000000 ffff888060f34000 0000000100000004 0000000000000000 [ 2361.875490][T20775] page dumped because: kasan: bad access detected [ 2361.875501][T20775] Memory state around the buggy address: [ 2361.875518][T20775] ffff888060f34c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2361.875533][T20775] ffff888060f34c80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2361.875548][T20775] >ffff888060f34d00: 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2361.875556][T20775] ^ [ 2361.875570][T20775] ffff888060f34d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2361.875583][T20775] ffff888060f34e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2361.875591][T20775] ================================================================== [ 2361.875598][T20775] Disabling lock debugging due to kernel taint [ 2361.913610][T20775] Kernel panic - not syncing: panic_on_warn set ... [ 2361.913636][T20775] CPU: 1 PID: 20775 Comm: syz-executor.1 Tainted: G B 5.8.0-rc6-next-20200723-syzkaller #0 [ 2361.913649][T20775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2361.913657][T20775] Call Trace: [ 2361.913684][T20775] dump_stack+0x18f/0x20d [ 2361.913705][T20775] ? fbcon_get_font+0x2b0/0x6f0 [ 2361.913724][T20775] panic+0x2e3/0x75c [ 2361.913744][T20775] ? __warn_printk+0xf3/0xf3 [ 2361.913763][T20775] ? preempt_schedule_common+0x59/0xc0 [ 2361.913779][T20775] ? fbcon_get_font+0x2f4/0x6f0 [ 2361.913798][T20775] ? preempt_schedule_thunk+0x16/0x18 [ 2361.913816][T20775] ? trace_hardirqs_on+0x55/0x220 [ 2361.913833][T20775] ? fbcon_get_font+0x2f4/0x6f0 [ 2361.913846][T20775] ? fbcon_get_font+0x2f4/0x6f0 [ 2361.913863][T20775] end_report+0x4d/0x53 [ 2361.913879][T20775] kasan_report.cold+0xd/0x37 [ 2361.913895][T20775] ? fbcon_get_font+0x2f4/0x6f0 [ 2361.913913][T20775] check_memory_region+0x13d/0x180 [ 2361.913927][T20775] memcpy+0x20/0x60 [ 2361.913943][T20775] fbcon_get_font+0x2f4/0x6f0 [ 2361.913960][T20775] ? fbcon_resize+0x610/0x610 [ 2361.913979][T20775] con_font_op+0x1f5/0x1110 [ 2361.914000][T20775] ? lock_downgrade+0x830/0x830 [ 2361.914017][T20775] ? con_write+0xb0/0xb0 [ 2361.914039][T20775] ? __might_fault+0x190/0x1d0 [ 2361.914055][T20775] vt_ioctl+0x20b9/0x2c20 [ 2361.914074][T20775] ? vt_waitactive+0x350/0x350 [ 2361.914094][T20775] ? trace_hardirqs_on+0x5f/0x220 [ 2361.914111][T20775] ? lockdep_hardirqs_on+0x76/0xf0 [ 2361.914139][T20775] ? tomoyo_execute_permission+0x470/0x470 [ 2361.914164][T20775] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 2361.914182][T20775] ? tty_jobctrl_ioctl+0x4d/0x1010 [ 2361.914197][T20775] ? vt_waitactive+0x350/0x350 [ 2361.914215][T20775] tty_ioctl+0x1019/0x15f0 [ 2361.914232][T20775] ? tty_fasync+0x390/0x390 [ 2361.914248][T20775] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 2361.914266][T20775] ? do_vfs_ioctl+0x27d/0x1090 [ 2361.914284][T20775] ? generic_block_fiemap+0x60/0x60 [ 2361.914310][T20775] ? _copy_to_user+0x126/0x160 [ 2361.914335][T20775] ? __fget_files+0x294/0x400 [ 2361.914356][T20775] ? tty_fasync+0x390/0x390 [ 2361.914374][T20775] __x64_sys_ioctl+0x193/0x200 [ 2361.914390][T20775] do_syscall_64+0x60/0xe0 [ 2361.914410][T20775] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2361.914426][T20775] RIP: 0033:0x45c1f9 [ 2361.914432][T20775] Code: Bad RIP value. [ 2361.914440][T20775] RSP: 002b:00007f4b50648c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2361.914468][T20775] RAX: ffffffffffffffda RBX: 000000000000f480 RCX: 000000000045c1f9 [ 2361.914481][T20775] RDX: 0000000020000440 RSI: 0000000000004b72 RDI: 0000000000000005 [ 2361.914491][T20775] RBP: 000000000078bfe0 R08: 0000000000000000 R09: 0000000000000000 [ 2361.914504][T20775] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bfac [ 2361.914514][T20775] R13: 00007fff56df97ef R14: 00007f4b506499c0 R15: 000000000078bfac [ 2361.915769][T20775] Kernel Offset: disabled [ 2362.730222][T20775] Rebooting in 86400 seconds..